vpn_server.config 9.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360
  1. # Software Configuration File
  2. # ---------------------------
  3. #
  4. # You may edit this file when the VPN Server / Client / Bridge program is not running.
  5. #
  6. # In prior to edit this file manually by your text editor,
  7. # shutdown the VPN Server / Client / Bridge background service.
  8. # Otherwise, all changes will be lost.
  9. #
  10. declare root
  11. {
  12. uint ConfigRevision 0
  13. bool IPsecMessageDisplayed true
  14. string Region $
  15. bool VgsMessageDisplayed false
  16. declare DDnsClient
  17. {
  18. bool Disabled true
  19. }
  20. declare IPsec
  21. {
  22. bool EtherIP_IPsec false
  23. string IPsec_Secret vpn
  24. string L2TP_DefaultHub DEFAULT
  25. bool L2TP_IPsec false
  26. bool L2TP_Raw false
  27. declare EtherIP_IDSettingsList
  28. {
  29. }
  30. }
  31. declare ListenerList
  32. {
  33. declare Listener0
  34. {
  35. bool DisableDos false
  36. bool Enabled true
  37. uint Port 5555
  38. }
  39. }
  40. declare LocalBridgeList
  41. {
  42. bool DoNotDisableOffloading false
  43. }
  44. declare ServerConfiguration
  45. {
  46. bool AcceptOnlyTls true
  47. uint64 AutoDeleteCheckDiskFreeSpaceMin 104857600
  48. uint AutoDeleteCheckIntervalSecs 300
  49. uint AutoSaveConfigSpan 300
  50. bool BackupConfigOnlyWhenModified false
  51. string CipherName AES128-GCM-SHA256
  52. bool DisableCoreDumpOnUnix false
  53. bool DisableDeadLockCheck false
  54. bool DisableDosProction false
  55. bool DisableGetHostNameWhenAcceptTcp false
  56. bool DisableIntelAesAcceleration false
  57. bool DisableIPsecAggressiveMode false
  58. bool DisableIPv6Listener true
  59. bool DisableJsonRpcWebApi true
  60. bool DisableNatTraversal false
  61. bool DisableOpenVPNServer true
  62. bool DisableSessionReconnect false
  63. bool DisableSSTPServer true
  64. bool DontBackupConfig true
  65. bool EnableVpnOverDns false
  66. bool EnableVpnOverIcmp false
  67. byte HashedPassword UGTVAqbtJObBO6LCJaQZyEby2pg=
  68. string KeepConnectHost 127.0.0.1
  69. uint KeepConnectInterval 30
  70. uint KeepConnectPort 80
  71. uint KeepConnectProtocol 0
  72. uint64 LoggerMaxLogSize 1073741823
  73. uint MaxConcurrentDnsClientThreads 512
  74. uint MaxConnectionsPerIP 256
  75. uint MaxUnestablishedConnections 1000
  76. bool NoHighPriorityProcess false
  77. bool NoLinuxArpFilter false
  78. bool NoSendSignature false
  79. string OpenVPNDefaultClientOption dev-type$20tun,link-mtu$201500,tun-mtu$201500,cipher$20AES-128-CBC,auth$20SHA1,keysize$20128,key-method$202,tls-client
  80. string OpenVPN_UdpPortList 1194
  81. bool SaveDebugLog false
  82. uint ServerLogSwitchType 4
  83. uint ServerType 0
  84. bool StrictSyslogDatetimeFormat false
  85. bool Tls_Disable1_0 false
  86. bool Tls_Disable1_1 false
  87. bool Tls_Disable1_2 false
  88. bool Tls_Disable1_3 false
  89. bool UseKeepConnect false
  90. bool UseWebTimePage false
  91. bool UseWebUI false
  92. declare GlobalParams
  93. {
  94. uint FIFO_BUDGET 10240000
  95. uint HUB_ARP_SEND_INTERVAL 5000
  96. uint IP_TABLE_EXPIRE_TIME 60000
  97. uint IP_TABLE_EXPIRE_TIME_DHCP 300000
  98. uint MAC_TABLE_EXPIRE_TIME 600000
  99. uint MAX_BUFFERING_PACKET_SIZE 2560000
  100. uint MAX_HUB_LINKS 1024
  101. uint MAX_IP_TABLES 65536
  102. uint MAX_MAC_TABLES 65536
  103. uint MAX_SEND_SOCKET_QUEUE_NUM 128
  104. uint MAX_SEND_SOCKET_QUEUE_SIZE 2560000
  105. uint MAX_STORED_QUEUE_NUM 1024
  106. uint MEM_FIFO_REALLOC_MEM_SIZE 655360
  107. uint MIN_SEND_SOCKET_QUEUE_SIZE 320000
  108. uint QUEUE_BUDGET 2048
  109. uint SELECT_TIME 256
  110. uint SELECT_TIME_FOR_NAT 30
  111. uint STORM_CHECK_SPAN 500
  112. uint STORM_DISCARD_VALUE_END 1024
  113. uint STORM_DISCARD_VALUE_START 3
  114. }
  115. declare ServerTraffic
  116. {
  117. }
  118. declare SyslogSettings
  119. {
  120. string HostName $
  121. uint Port 0
  122. uint SaveType 0
  123. }
  124. }
  125. declare VirtualHUB
  126. {
  127. declare DEFAULT
  128. {
  129. uint64 CreatedTime 0
  130. byte HashedPassword UGTVAqbtJObBO6LCJaQZyEby2pg=
  131. uint64 LastCommTime 0
  132. uint64 LastLoginTime 0
  133. uint NumLogin 0
  134. bool Online true
  135. bool RadiusConvertAllMsChapv2AuthRequestToEap false
  136. string RadiusRealm $
  137. uint RadiusRetryInterval 0
  138. uint RadiusServerPort 1812
  139. string RadiusSuffixFilter $
  140. bool RadiusUsePeapInsteadOfEap false
  141. uint Type 0
  142. declare AccessList
  143. {
  144. declare 1
  145. {
  146. bool Active true
  147. bool CheckDstMac false
  148. bool CheckSrcMac false
  149. bool CheckTcpState false
  150. uint Delay 0
  151. string DestIpAddress 0.0.0.0
  152. uint DestPortEnd 0
  153. uint DestPortStart 0
  154. string DestSubnetMask 0.0.0.0
  155. string DestUsername $
  156. bool Discard false
  157. bool Established false
  158. bool IsIPv6 false
  159. uint Jitter 0
  160. uint Loss 0
  161. string Note $
  162. uint Priority 1000
  163. uint Protocol 0
  164. string RedirectUrl $
  165. string SrcIpAddress 0.0.0.0
  166. uint SrcPortEnd 0
  167. uint SrcPortStart 0
  168. string SrcSubnetMask 0.0.0.0
  169. string SrcUsername $
  170. }
  171. }
  172. declare AdminOption
  173. {
  174. uint allow_hub_admin_change_option 0
  175. uint deny_bridge 0
  176. uint deny_change_user_password 0
  177. uint deny_empty_password 0
  178. uint deny_hub_admin_change_ext_option 0
  179. uint deny_qos 0
  180. uint deny_routing 0
  181. uint max_accesslists 0
  182. uint max_bitrates_download 0
  183. uint max_bitrates_upload 0
  184. uint max_groups 0
  185. uint max_multilogins_per_user 0
  186. uint max_sessions 0
  187. uint max_sessions_bridge 0
  188. uint max_sessions_client 0
  189. uint max_sessions_client_bridge_apply 0
  190. uint max_users 0
  191. uint no_access_list_include_file 0
  192. uint no_cascade 0
  193. uint no_change_access_control_list 0
  194. uint no_change_access_list 0
  195. uint no_change_admin_password 0
  196. uint no_change_cert_list 0
  197. uint no_change_crl_list 0
  198. uint no_change_groups 0
  199. uint no_change_log_config 0
  200. uint no_change_log_switch_type 0
  201. uint no_change_msg 0
  202. uint no_change_users 0
  203. uint no_delay_jitter_packet_loss 0
  204. uint no_delete_iptable 0
  205. uint no_delete_mactable 0
  206. uint no_disconnect_session 0
  207. uint no_enum_session 0
  208. uint no_offline 0
  209. uint no_online 0
  210. uint no_query_session 0
  211. uint no_read_log_file 0
  212. uint no_securenat 0
  213. uint no_securenat_enabledhcp 0
  214. uint no_securenat_enablenat 0
  215. }
  216. declare CascadeList
  217. {
  218. }
  219. declare LogSetting
  220. {
  221. uint PacketLogSwitchType 4
  222. uint PACKET_LOG_ARP 0
  223. uint PACKET_LOG_DHCP 1
  224. uint PACKET_LOG_ETHERNET 0
  225. uint PACKET_LOG_ICMP 0
  226. uint PACKET_LOG_IP 0
  227. uint PACKET_LOG_TCP 0
  228. uint PACKET_LOG_TCP_CONN 1
  229. uint PACKET_LOG_UDP 0
  230. bool SavePacketLog false
  231. bool SaveSecurityLog true
  232. uint SecurityLogSwitchType 4
  233. }
  234. declare Message
  235. {
  236. }
  237. declare Option
  238. {
  239. uint AccessListIncludeFileCacheLifetime 30
  240. uint AdjustTcpMssValue 0
  241. bool ApplyIPv4AccessListOnArpPacket false
  242. bool AssignVLanIdByRadiusAttribute false
  243. bool BroadcastLimiterStrictMode false
  244. uint BroadcastStormDetectionThreshold 0
  245. uint ClientMinimumRequiredBuild 0
  246. bool DenyAllRadiusLoginWithNoVlanAssign false
  247. uint DetectDormantSessionInterval 0
  248. bool DisableAdjustTcpMss false
  249. bool DisableCheckMacOnLocalBridge false
  250. bool DisableCorrectIpOffloadChecksum false
  251. bool DisableHttpParsing false
  252. bool DisableIPParsing false
  253. bool DisableIpRawModeSecureNAT false
  254. bool DisableKernelModeSecureNAT false
  255. bool DisableUdpAcceleration false
  256. bool DisableUdpFilterForLocalBridgeNic false
  257. bool DisableUserModeSecureNAT false
  258. bool DoNotSaveHeavySecurityLogs false
  259. bool DropArpInPrivacyFilterMode true
  260. bool DropBroadcastsInPrivacyFilterMode true
  261. bool FilterBPDU false
  262. bool FilterIPv4 false
  263. bool FilterIPv6 false
  264. bool FilterNonIP false
  265. bool FilterOSPF false
  266. bool FilterPPPoE false
  267. uint FloodingSendQueueBufferQuota 33554432
  268. bool ManageOnlyLocalUnicastIPv6 true
  269. bool ManageOnlyPrivateIP true
  270. uint MaxLoggedPacketsPerMinute 0
  271. uint MaxSession 0
  272. bool NoArpPolling false
  273. bool NoDhcpPacketLogOutsideHub true
  274. bool NoEnum false
  275. bool NoIpTable false
  276. bool NoIPv4PacketLog false
  277. bool NoIPv6AddrPolling false
  278. bool NoIPv6DefaultRouterInRAWhenIPv6 true
  279. bool NoIPv6PacketLog false
  280. bool NoLookBPDUBridgeId false
  281. bool NoMacAddressLog true
  282. bool NoManageVlanId false
  283. bool NoPhysicalIPOnPacketLog false
  284. bool NoSpinLockForPacketDelay false
  285. bool RemoveDefGwOnDhcpForLocalhost true
  286. uint RequiredClientId 0
  287. uint SecureNAT_MaxDnsSessionsPerIp 0
  288. uint SecureNAT_MaxIcmpSessionsPerIp 0
  289. uint SecureNAT_MaxTcpSessionsPerIp 0
  290. uint SecureNAT_MaxTcpSynSentPerIp 0
  291. uint SecureNAT_MaxUdpSessionsPerIp 0
  292. bool SecureNAT_RandomizeAssignIp false
  293. bool SuppressClientUpdateNotification true
  294. bool UseHubNameAsDhcpUserClassOption false
  295. bool UseHubNameAsRadiusNasId false
  296. string VlanTypeId 0x8100
  297. bool YieldAfterStorePacket false
  298. }
  299. declare SecureNAT
  300. {
  301. bool Disabled false
  302. bool SaveLog false
  303. declare VirtualDhcpServer
  304. {
  305. string DhcpDnsServerAddress 8.8.8.8
  306. string DhcpDnsServerAddress2 8.8.4.4
  307. string DhcpDomainName $
  308. bool DhcpEnabled true
  309. uint DhcpExpireTimeSpan 7200
  310. string DhcpGatewayAddress 192.168.233.1
  311. string DhcpLeaseIPEnd 192.168.233.200
  312. string DhcpLeaseIPStart 192.168.233.10
  313. string DhcpPushRoutes $
  314. string DhcpSubnetMask 255.255.255.0
  315. }
  316. declare VirtualHost
  317. {
  318. string VirtualHostIp 192.168.233.1
  319. string VirtualHostIpSubnetMask 255.255.255.0
  320. }
  321. declare VirtualRouter
  322. {
  323. bool NatEnabled true
  324. uint NatMtu 1500
  325. uint NatTcpTimeout 600
  326. uint NatUdpTimeout 60
  327. }
  328. }
  329. declare SecurityAccountDatabase
  330. {
  331. declare CertList
  332. {
  333. }
  334. declare CrlList
  335. {
  336. }
  337. declare GroupList
  338. {
  339. }
  340. declare IPAccessControlList
  341. {
  342. }
  343. declare UserList
  344. {
  345. }
  346. }
  347. declare Traffic
  348. {
  349. }
  350. }
  351. }
  352. declare VirtualLayer3SwitchList
  353. {
  354. }
  355. }