Digi IX20 User Manual

Virtual PrivateNetworks(VPN) OpenVPN
IX20 User Guide
547
n
OpenVPN managed—The IX20 device creates the interface and then usesits standard
configuration to set up the connection (for example, its standard DHCPserver configuration).
n
Device only—IPaddressing is controlled by the system, not by OpenVPN.
Additional OpenVPN information
For more information on OpenVPN, see these resources:
Bridging vs. routing
OpenVPN/Routing
Configure an OpenVPN server
Required configuration items
n
Enable the OpenVPNserver.
The OpenVPNserver is enabled by default.
n
The mode used by the OpenVPNserver, one of:
l
TUN (OpenVPN managed)—Also known as routing mode. Each OpenVPN client is assigned
a different IPsubnet from the OpenVPNserver and other OpenVPN clients. OpenVPN
clients use Network AddressTranslation (NAT) to route traffic from devicesconnected on
its LAN interfacesto the OpenVPNserver.
l
TAP - OpenVPN managed—Also know asbridging mode. Amore advanced
implementation of OpenVPN. The IX20 device creates an OpenVPN interface and uses
standard interface configuration (for example, a standard DHCPserver configuration).
l
TAP - Device only—An alternate form of OpenVPN bridging mode, in which the device,
rather than OpenVPN, controlsthe interface configuration. If this method isis, the
OpenVPN server must be included as a device in either an interface or a bridge.
n
The firewall zone to beused by the OpenVPNserver.
n
The IPnetwork and subnet mask of the OpenVPNserver.
n
The server's Certificate authority (CA) certificate, and public, private and Diffie-Hellman (DH)
keys.
n
An OpenVPN authentication group and an OpenVPN user.
n
Determine the method of certificate management:
l
Certificatesmanaged by the server.
l
Certificatescreated externally and added to the server.
n
If certificates are created and added to the server, determine the level of authentication:
l
Certificate authentication only.
l
Username and password authentication only.
l
Certificate and username and password authentication.
If username and password authentication is used, you must create an OpenVPN authentication
group and user. See Configure an OpenVPN Authentication Group and User for instructions.
n
Certificatesand keys:
l
The CAcertificate (usually in a ca.crt file).
l
The Public key (for example, server.crt)

Digi IX20 Specifications

General

Category	Wireless Router
Cellular Connectivity	4G LTE
Ethernet Ports	4
Wi-Fi	802.11ac
SIM Slots	2
WAN Ports	1
LAN Ports	3
Weight	0.5 kg
Operating Temperature	-40°C to +70°C (-40°F to +158°F)