Whether to add DNS servers provided by the OVPN server to IP/DNS configuration. Tls-version ( any | only-1.2 Default: any) The IP or hostname must be present in the server's certificate. Verify-server-certificate ( yes | no Default: no)Ĭhecks the certificates CN or SAN against the 'connect-to' parameter.

Indicates the protocol to use when connecting with the remote endpoint. Specifies which PPP profile configuration will be used when establishing the tunnel. Layer3 or layer2 tunnel mode (alternatively tun, tap)

Max packet size that the OVPN interface will be able to send without packet fragmentation. Will be automatically generated if not specified. Whether the interface is disabled or not. In order to use GCM type ciphers, the 'auth' parameter must be set to 'null', because GCM cipher is also responsible for 'auth', if used. Whether to add OVPN remote address as a default route.Īuth ( md5 | sha1 | null | sha256 | sha512 Default: sha1)Ĭertificate ( string | none Default: none)Ĭipher ( null | aes128-cbc | aes128-gcm | aes192-cbc | aes192-gcm | aes256-cbc | aes256-gcm | blowfish128 Default: blowfish128)Īllowed ciphers. Add-default-route ( yes | no Default: no)

Routeros wireguard