D-Link DSR-150 - Page 151

D-Link DSR-Series User Manual 137
Section 7 - VPN
Field Description
OpenVPN Click On/O button to start or stop the OpenVPN process. By default, this option is disabled.
Mode Select Server.
VPN Network Enter the IP network for the VPN.
VPN Netmask Enter the netmask.
Duplicate CN Toggle On to allow a same certication for multiple clients.
Port Enter what port to use. The default port is 1194.
Tunnel Protocol Select either TCP or UDP.
Encryption Algorithm Select the encryption algorithm from the drop-down menu.
Hash Algorithm Select the hash algorithm from the drop-down menu. The options are SHA1, SHA256, SHA512.
Tunnel Type
Select either Full Tunnel or Split Tunnel. Full Tunnel mode just sends all trac from the client across the
VPN tunnel to the router. Split Tunnel mode only sends trac to the private LAN based on pre-specied
client routes. If you select Split Tunnel, refer to “Local Networks” on page 147 to create local networks.
Client to Client
Communication
Enable this eld to allow openvpn clients to communicate with each other in split tunnel case. By default,
it is disabled.
User Based Auth
This option is introduced to provide the additional authentication method using username/password.
Disabled by default.
Certicate Verication
This method does not require the client certicate, client will authenticate using the username/password
only. Enabled by default.
Certs Prole
Select the prole which has list certicates uploaded for the congured mode server/client. By default,
the default prole will be selected which has both server and client certicates.
TLS Authentication Key
Enabling this adds Tls authentication which adds an additional layer of authentication. Can be checked
only when the tls key is uploaded. Disabled by default.
TLS Key Select the type of tls certicate name.
Invalid Client
Certicates
Enabling this adds facility to block invalid client certicate. This feature requires crl certicate which
contains list of client certicates to be blocked. Please upload crl certicate in OpenVPN Authentication
page. Disabled by default
CRL Certicates Select the type of crl certicate name.
Save Click Save to save and activate your settings.
Cancel Click Cancel to revert to previous settings.