To Next Page

To Previous Page

Virtual PrivateNetworks(VPN) OpenVPN

IX20 User Guide

565

6. The default behavior isto use an OVPN file for client configuration. To disable this behavior

and configure the client manually, click Use .ovpn file to disable.

7. For Device type, select the mode used by the OpenVPNserver, either TUN or TAP.

8. For Zone, select the firewall zone for the OpenVPNclient.

9. (Optional) Select the Metricfor the OpenVPNclient. If multiple activeroutesmatch a

destination, the route with the lowest metric will be used.

10. (Optional) For Username and Password, type the login credentials as configured on the

OpenVPN server.

11. For VPN server IP, typethe IPaddress of the OpenVPNserver.

12. (Optional) Set the VPN port used by the OpenVPNserver. The default is 1194.

13. Paste the contents of the CAcertificate (usually in a ca.crt file), the Public key (for example,

client.crt), and the Private key (for example, client.key) into their respective fields. The

contents will be hidden when the configuration issaved.

14. (Optional) Click to expand Advanced Optionsto manually set additional OpenVPN

parameters.

a. Click Enable to enable the use of additional OpenVPNparameters.

b. Click Override if the additional OpenVPNparameters should override default options.

c. For OpenVPN parameters, typethe additional OpenVPN parameters. For example, to

override the configuration by using a configuration file, enter --config filename, for

example, --config /etc/config/openvpn_config.

15. Click Apply to save the configuration and apply the change.

 Command line

1. Select the device in Remote Manager and click Actions> Open Console, or log into the IX20

local command line as a user with full Admin access rights.

Depending on your device configuration, you may be presented with an Access selection

menu. Type admin to accessthe Admin CLI.

2. At the command line, type config to enter configuration mode:

> config

(config)>

3. At the config prompt, type:

(config)> add vpn openvpn client name

(config vpn openvpn client name)>

where name is the name of the OpenVPNserver.

The OpenVPNclient is enabled by default. To disable the client, type:

(config vpn openvpn client name)> enable false

(config vpn openvpn client name)>

4. The default behavior isto use an OVPN file for client configuration. To disable this behavior

and configure the client manually:

Digi IX20 User Manual

Questions and Answers: