OpenVPN:Client Configuration

OpenVPN Client Configuration

This document describes how to configure OpenVPN clients.

Client Files

Client configuration files (.ovpn) are stored in /root/:

• josh.ovpn

• Work_MacBook_Air.ovpn

• StrawberryNAS.ovpn (Synology NAS)

Client Configuration Structure

Each client .ovpn file contains:

• Client certificate

• Client private key

• CA certificate

• TLS-Crypt key

• Connection settings (server IP, port, protocol)

Client Configuration Directory

Per-client configurations can be placed in /etc/openvpn/ccd/ to assign static IP addresses or custom routes.

Current CCD Files:

• StrawberryNAS - Static IP configuration for Synology NAS (10.8.0.2)

Example CCD File

Example CCD file content:

ifconfig-push 10.8.0.2 255.255.255.0

This assigns a static IP address (10.8.0.2) to the client named "StrawberryNAS". The second parameter is the netmask for the VPN subnet.

Connect using the client application

Synology NAS Connection

The Synology NAS connects using StrawberryNAS.ovpn and typically receives IP address 10.8.0.2.

Verifying Connection

From the server, verify client is connected:

= Check connected clients =
cat /etc/openvpn/server/ipp.txt

= Check VPN interface =
ip addr show tun0

= Ping client =
ping 10.8.0.2

Related Documentation

• [Server Configuration](server-configuration.md) - Server setup

• [User Management](user-management.md) - Adding new clients

• [Certificate Management](certificate-management.md) - Certificate details