From 2775ab8431db64d6c81479a92825b585dbf3a142 Mon Sep 17 00:00:00 2001
From: oxidized <oxidized@einsle.de>
Date: Sun, 15 Sep 2019 13:28:43 +0200
Subject: [PATCH] update opnsense/fw02.ke.einsle.de

---
 opnsense/fw02.ke.einsle.de | 20 ++++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/opnsense/fw02.ke.einsle.de b/opnsense/fw02.ke.einsle.de
index be9532e..dafe306 100644
--- a/opnsense/fw02.ke.einsle.de
+++ b/opnsense/fw02.ke.einsle.de
@@ -228,6 +228,12 @@
       <member>2004</member>
       <priv>page-all</priv>
     </group>
+    <group>
+      <name>vpn</name>
+      <description>VPN Client Access</description>
+      <member>2000</member>
+      <gid>2000</gid>
+    </group>
     <user>
       <name>root</name>
       <descr>System Administrator</descr>
@@ -293,7 +299,7 @@
       <uid>2004</uid>
     </user>
     <nextuid>2005</nextuid>
-    <nextgid>2000</nextgid>
+    <nextgid>2001</nextgid>
     <timezone>Europe/Berlin</timezone>
     <timeservers>0.opnsense.pool.ntp.org 1.opnsense.pool.ntp.org 2.opnsense.pool.ntp.org 3.opnsense.pool.ntp.org</timeservers>
     <webgui>
@@ -1477,9 +1483,9 @@
     <column_count>2</column_count>
   </widgets>
   <revision>
-    <username>(system)</username>
-    <time>1568382194.583</time>
-    <description>/usr/local/opnsense/mvc/script/run_migrations.php made changes</description>
+    <username>(root)@172.24.11.2</username>
+    <time>1568545542.0608</time>
+    <description>Merged filter,OPNsense,staticroutes,gateways,virtualip,cert,ca,crl,system,schedules,widgets,unbound,openvpn,nat config sections from XMLRPC client.</description>
   </revision>
   <OPNsense>
     <Firewall>
@@ -2342,7 +2348,7 @@ PORT_mail</content>
   </wizardtemp>
   <openvpn>
     <openvpn-server>
-      <mode>server_tls</mode>
+      <mode>server_tls_user</mode>
       <protocol>UDP</protocol>
       <dev_mode>tun</dev_mode>
       <local_port>1194</local_port>
@@ -2355,6 +2361,7 @@ PORT_mail</content>
       <compression>adaptive</compression>
       <client2client>yes</client2client>
       <pool_enable>yes</pool_enable>
+      <local_group>vpn</local_group>
       <dns_domain>ke.einsle.de</dns_domain>
       <dns_server1>172.24.10.11</dns_server1>
       <dns_server2>172.24.10.12</dns_server2>
@@ -2362,8 +2369,9 @@ PORT_mail</content>
       <dns_server4>8.8.8.8</dns_server4>
       <push_register_dns>yes</push_register_dns>
       <netbios_ntype>0</netbios_ntype>
-      <verbosity_level>1</verbosity_level>
+      <verbosity_level>3</verbosity_level>
       <vpnid>1</vpnid>
+      <authmode>kedc01</authmode>
       <interface>any</interface>
       <custom_options/>
       <caref>5cbee047f2269</caref>