Virtual PrivateNetworks(VPN) OpenVPN
IX20 User Guide
551
11. (Optional) Click to expand Advanced Optionsto manually set additional OpenVPN
parameters.
a. Click Enable to enable the use of additional OpenVPNparameters.
b. Click Override if the additional OpenVPNparameters should override default options.
c. For OpenVPN parameters, typethe additional OpenVPN parameters.
12. Click Apply to save the configuration and apply the change.
Command line
1. Select the device in Remote Manager and click Actions> Open Console, or log into the IX20
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to accessthe Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. At the config prompt, type:
(config)> add vpn openvpn server name
(config vpn openvpn server name)>
where name is the name of the OpenVPNserver.
The OpenVPNserver is enabled by default. To disable the server, type:
(config vpn openvpn server name)> enable false
(config vpn openvpn server name)>
4. Set the mode used by the OpenVPNserver:
(config vpn openvpn server name)> device_type value
(config vpn openvpn server name)>
where value is one of:
n
TUN (OpenVPN managed)—Also known as routing mode. Each OpenVPN client is
assigned a different IPsubnet from the OpenVPNserver and other OpenVPN clients.
OpenVPN clients use Network AddressTranslation (NAT) to route traffic from devices
connected on its LAN interfaces to the OpenVPN server.
n
TAP - OpenVPN managed—Also know asbridging mode. Amore advanced
implementation of OpenVPN. The IX20 device creates an OpenVPN interface and uses
standard interface configuration (for example, a standard DHCPserver configuration).
n
TAP - Device only—An alternate form of OpenVPN bridging mode, in which the device,
rather than OpenVPN, controlsthe interface configuration. If this method isis, the
OpenVPN server must be included as a device in either an interface or a bridge.
See OpenVPNfor information about OpenVPNmodes. The default is tun.