openvpn
-------

.. osdx:cfgcmd:: vpn openvpn

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    OpenVPN profiles






.. osdx:cfgcmd:: vpn openvpn client-profile <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        Client options


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn client-profile <id> allow-pull-fqdn

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Allow client to pull DNS names from server






.. osdx:cfgcmd:: vpn openvpn client-profile <id> authentication

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Client authentication




    :ref Required: 
    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn client-profile <id> authentication encrypted-password <password>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg password:
        VPN encrypted password





.. osdx:cfgcmd:: vpn openvpn client-profile <id> authentication password <txt>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg txt:
        VPN password





.. osdx:cfgcmd:: vpn openvpn client-profile <id> authentication username <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        VPN username





.. osdx:cfgcmd:: vpn openvpn client-profile <id> pull

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Option pulling parameters






.. osdx:cfgcmd:: vpn openvpn client-profile <id> pull filter <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Option filter parameters

    :arg u32:
        Filter index


    :instances: Multiple

    :ref Required: 
    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn client-profile <id> pull filter <u32> policy <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Filter policy

    :arg accept:
        Allow option
    :arg ignore:
        Remove option
    :arg reject:
        Flag option as error and restart tunnel





.. osdx:cfgcmd:: vpn openvpn client-profile <id> pull filter <u32> text <txt>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg txt:
        Filter rules that start with this text





.. osdx:cfgcmd:: vpn openvpn encryption-profile <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        Data channel encryption options


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> auth <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Digest algorithms to authenticate data channel packets with

    :arg u32:
        Digest index


    :instances: Multiple

    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> auth <u32> algorithm <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Digest algorithm

    :arg none:
        Disable data channel authentication





.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> cipher <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Cipher algorithms to encrypt data channel packets with

    :arg u32:
        Cipher index


    :instances: Multiple

    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> cipher <u32> algorithm <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Cipher algorithm

    :arg none:
        Disable data channel encryption





.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> ncp

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Negotiable Crypto Parameters (client/server mode)






.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> ncp cipher <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Cipher negotiation proposals

    :arg u32:
        Cipher index


    :instances: Multiple

    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> ncp cipher <u32> algorithm <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        Cipher algorithm





.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> ncp disable

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Disable cipher negotiation






.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> secret

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Static key encryption mode (p2p mode)




    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> secret direction <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Data flow direction





.. osdx:cfgcmd:: vpn openvpn encryption-profile <id> secret static-key <file>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg file:
        Static key file





.. osdx:cfgcmd:: vpn openvpn server-profile <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        Server options


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn server-profile <id> authentication <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Authentication list



    :ref Reference: system aaa list *



.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        Client parameters

        Client Common Name


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> address <ipv4|fqdn>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg ipv4:
        Static IP address
    :arg fqdn:
        Static IP address





.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> disable

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Disable client






.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Option pushing parameters






.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push reset

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Ignore global push list for client






.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push route

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Routing parameters






.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push route delay <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Delay after connection establishment before adding routes





.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push route destination <ipv4cidr|ipv4net|id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Route destination

    :arg ipv4cidr:
        IPv4 address
    :arg ipv4net:
        IPv4 network
    :arg vpn_gateway:
        Remote VPN endpoint address
    :arg net_gateway:
        Pre-existing IP default gateway
    :arg remote_host:
        Remote host


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push route destination <ipv4cidr|ipv4net|id> gateway <ipv4|id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Route gateway

    :arg vpn_gateway:
        Remote VPN endpoint address
    :arg net_gateway:
        Pre-existing IP default gateway
    :arg remote_host:
        Remote host





.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push route destination <ipv4cidr|ipv4net|id> metric <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Route metric





.. osdx:cfgcmd:: vpn openvpn server-profile <id> client <id> push route gateway <ipv4|id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Default gateway to use with pushed routes

    :arg ipv4:
        IPv4 address
    :arg dhcp:
        Extract the gateway address from a DHCP negotiation





.. osdx:cfgcmd:: vpn openvpn server-profile <id> client-to-client

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Allow connected clients to reach each other






.. osdx:cfgcmd:: vpn openvpn server-profile <id> duplicate-cn

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Allow multiple clients with the same common name to concurrently connect






.. osdx:cfgcmd:: vpn openvpn server-profile <id> push

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Push configuration options to the clients






.. osdx:cfgcmd:: vpn openvpn server-profile <id> push route

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Routing parameters






.. osdx:cfgcmd:: vpn openvpn server-profile <id> push route delay <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Delay after connection establishment before adding routes





.. osdx:cfgcmd:: vpn openvpn server-profile <id> push route destination <ipv4net|id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Route destination

    :arg ipv4net:
        IPv4 network
    :arg vpn_gateway:
        Remote VPN endpoint address
    :arg net_gateway:
        Pre-existing IP default gateway
    :arg remote_host:
        Remote host


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn server-profile <id> push route destination <ipv4net|id> gateway <ipv4|id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Route gateway

    :arg vpn_gateway:
        Remote VPN endpoint address
    :arg net_gateway:
        Pre-existing IP default gateway
    :arg remote_host:
        Remote host





.. osdx:cfgcmd:: vpn openvpn server-profile <id> push route destination <ipv4net|id> metric <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Route metric





.. osdx:cfgcmd:: vpn openvpn server-profile <id> push route gateway <ipv4|id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Default gateway to use with pushed routes

    :arg ipv4:
        IPv4 address
    :arg dhcp:
        Extract the gateway address from a DHCP negotiation





.. osdx:cfgcmd:: vpn openvpn tls-profile <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        TLS options


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn tls-profile <id> auth

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Additional layer of HMAC authentication on top of the TLS control channel




    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn tls-profile <id> auth direction <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Data flow direction





.. osdx:cfgcmd:: vpn openvpn tls-profile <id> auth static-key <file>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg file:
        Static key to use for HMAC authentication





.. osdx:cfgcmd:: vpn openvpn tls-profile <id> ca <file>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg file:
        Certificate Authority certificate in PEM format





.. osdx:cfgcmd:: vpn openvpn tls-profile <id> certificate <file>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg file:
        Local certificate in PEM format





.. osdx:cfgcmd:: vpn openvpn tls-profile <id> crl <file>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg file:
        Certificate Revocation List in PEM format





.. osdx:cfgcmd:: vpn openvpn tls-profile <id> crypt

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Encrypt and authenticate all control channel packets




    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn tls-profile <id> crypt static-key <file>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg file:
        Static key to use for HMAC authentication





.. osdx:cfgcmd:: vpn openvpn tls-profile <id> csr <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Certificate Signing Request instance (SCEP)



    :ref Reference: system certificate scep csr *



.. osdx:cfgcmd:: vpn openvpn tls-profile <id> dhparam <file|id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Diffie-Hellman parameters in PEM format (server mode)

    :arg none:
        Do not use dhparam file





.. osdx:cfgcmd:: vpn openvpn tls-profile <id> private-key <file>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg file:
        Local certificate's private key in PEM format





.. osdx:cfgcmd:: vpn openvpn tunnel-profile <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg id:
        Tunnel options


    :instances: Multiple



.. osdx:cfgcmd:: vpn openvpn tunnel-profile <id> compression <id>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Compression algorithm to use

    :arg lzo:
        Better compatibility
    :arg lz4:
        Better performance





.. osdx:cfgcmd:: vpn openvpn tunnel-profile <id> float

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Allow remote peer to change its IP address and/or port number






.. osdx:cfgcmd:: vpn openvpn tunnel-profile <id> keepalive

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    Keepalive parameters




    :ref Required: 
    :ref Required: 


.. osdx:cfgcmd:: vpn openvpn tunnel-profile <id> keepalive interval <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Ping interval





.. osdx:cfgcmd:: vpn openvpn tunnel-profile <id> keepalive timeout <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>


    :arg u32:
        Ping timeout to restart





.. osdx:cfgcmd:: vpn openvpn tunnel-profile <id> log-level <u32>

    .. raw:: html

        <span class="badge" style="background-color: lightslategray">SDE</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: rosybrown">AresC640</span>

    OpenVPN log level

    :arg u32:
        Disable all logging except fatal errors (0)
    :arg u32:
        Normal usage range (1-4)
    :arg u32:
        Output R and W for each packet read and write (5)
    :arg u32:
        Debug info range (6-11)