Page MenuHomePhabricator

English Version - VPN
Updated 289 Days AgoPublic

VPN

VPN allows access to the resources inside Hackerspace and resources of the HSWAN. Currently, it doesn't have a route to the Internet. VPN shouldn't be used to peer with HSWAN.

Authorized with LDAP credentials. OpenVPN. Requires valid membership.

TAP (L2)

Available at vpn.hskrk.pl, on ports 1-2000 both TCP and UDP (we recommend using 1194 UDP).

TUN (L3)

Available at vpn.hskrk.pl, on ports 2001-4000 both TCP and UDP (we recommend using 4000 UDP).

hskrk-vpn.conf

client

remote vpn.hskrk.pl
proto udp
port 1194

dev tap

ca "hskrk-vpn.crt"

auth-user-pass
comp-lzo yes

cipher AES-256-CBC
auth SHA256

auth-nocache
persist-tun

hskrk-vpn.crt

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Config in one .ovpn file

#infrastruktura

Last Author
mily
Last Edited
Aug 30 2020, 4:34 PM