vyos@r14:~$ /usr/libexec/vyos/tests/smoke/cli/test_interfaces_openvpn.py
test_openvpn_client_interfaces (__main__.TestInterfacesOpenVPN.test_openvpn_client_interfaces) ... ok
test_openvpn_client_verify (__main__.TestInterfacesOpenVPN.test_openvpn_client_verify) ... ok
test_openvpn_options (__main__.TestInterfacesOpenVPN.test_openvpn_options) ... ok
test_openvpn_server_net30_topology (__main__.TestInterfacesOpenVPN.test_openvpn_server_net30_topology) ... ok
test_openvpn_server_subnet_topology (__main__.TestInterfacesOpenVPN.test_openvpn_server_subnet_topology) ... ok
test_openvpn_server_verify (__main__.TestInterfacesOpenVPN.test_openvpn_server_verify) ... ok
test_openvpn_site2site_interfaces_tun (__main__.TestInterfacesOpenVPN.test_openvpn_site2site_interfaces_tun) ... ok
test_openvpn_site2site_verify (__main__.TestInterfacesOpenVPN.test_openvpn_site2site_verify) ... ok

secret has been deprecated
    static key mode (non-TLS) is no longer considered "good and secure enough" for today's requirements. Use TLS mode instead. If deploying a PKI CA is considered "too complicated", using --peer-fingerprint makes TLS mode about as easy as using --secret.

set interfaces openvpn vtun5001 local-address 203.0.113.1
set interfaces openvpn vtun5001 mode 'site-to-site'
set interfaces openvpn vtun5001 remote-address '192.0.2.5'
set interfaces openvpn vtun5001 shared-secret-key 'ovpn_test'
set pki openvpn shared-secret ovpn_test key '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'
set pki openvpn shared-secret ovpn_test version '1'

vyos@r14# set interfaces input ifb0
[edit]
vyos@r14# set interfaces ethernet eth0 redirect 'ifb0'

##################################################
{'name': {'multitool': {'description': 'Network multitool container',
                        'image': 'wbitt/network-multitool:fedora',
                        'memory': '512',
                        'network': {'cntr-net': {}},
                        'port': {'http': {'destination': '80',
                                          'protocol': 'tcp',
                                          'source': '80'}},
                        'restart': 'on-failure',
                        'shared_memory': '64'},
          'nrpe': {'allow_host_networks': {},
                   'image': 'incitem/almalinux9:nrpe',
                   'protocol': 'tcp'},
          'radius': {'allow_host_networks': {},
                     'image': 'dchidell/radius-web',
                     'protocol': 'tcp',
                     'volume': {'clients': {'destination': '/etc/raddb/clients.conf',
                                            'mode': 'rw',
                                            'source': '/config/containers/radius/clients'},
                                'users': {'destination': '/etc/raddb/users',
                                          'mode': 'rw',
                                          'source': '/config/containers/radius/users'}}}},
 'network': {'cntr-net': {'description': 'VyOS Container Network',
                          'prefix': ['172.253.253.0/24']}},
 'registry': ['docker.io', 'quay.io']}
##################################################