Digi IX10 User Manual

Virtual Private Networks (VPN) OpenVPN
IX10 User Guide
381
4. Set the mode used by the OpenVPN server:
(config vpn openvpn server name)> device_type value
(config vpn openvpn server name)>
where value is one of:
n
TUN (OpenVPN managed)—Also known as routing mode. Each OpenVPN client is
assigned a different IP subnet from the OpenVPN server and other OpenVPN clients.
OpenVPN clients use Network Address Translation (NAT) to route traffic from devices
connected on its LAN interfaces to the OpenVPN server.
n
TAP - OpenVPN managed—Also know as bridging mode. A more advanced
implementation of OpenVPN. The IX10 device creates an OpenVPN interface and uses
standard interface configuration (for example, a standard DHCP server configuration).
n
TAP - Device only—An alternate form of OpenVPN bridging mode, in which the device,
rather than OpenVPN, controls the interface configuration. If this method is is, the
OpenVPN server must be included as a device in either an interface or a bridge.
See OpenVPN for information about OpenVPN modes. The default is tun.
5. If tap or tun are set for device_type:
a. Set the IP address and subnet mask of the OpenVPN server.
(config vpn openvpn server name)> address ip_address/netmask
(config vpn openvpn server name)>
b. Set the firewall zone for the OpenVPN server. For TUNdevice types, this should be set to
internal to treat clients as LAN devices.
(config vpn openvpn server name)> zone value
(config vpn openvpn server name)>
To view a list of available zones:
(config vpn openvpn server name)> firewall zone ?
Zone: The zone for the local TUN interface. To treat clients as LAN
devices this would usually be
set to internal.
Format:
any
dynamic_routes
edge
external
internal
ipsec
loopback
setup
Current value:
(config vpn openvpn server name)>

Digi IX10 Specifications

General

Brand	Digi
Model	IX10
Category	Network Router
Language	English