Digi TransPort LR54 - Page 205

Virtual Private Networks (VPN) OpenVPN
Digi TransPort WR Routers User Guide
205
n The IP protocol (TCP or UDP) to use. By default, the TransPort device uses UDP. This must
match the IP protocol configured on the OpenVPN client.
n The TCP/UDP Port to use. By default, the TransPort device uses port 1194.
n You can enable compression on the OpenVPN tunnel. The compression options are LZO and
LZ4.
Web
1. On the menu, click Network > Networks > OpenVPN and select OpenVPN Server. The
OpenVPN Server page appears.
2. Click Edit. The OpenVPN server page displays the settings for the OpenVPN server.
3. Enter the Connection settings:
n Enable: Enables or disables the OpenVPN server when configuration is completed.
n Logging Level: The detail level of output that the OpenVPN server records in the
system log. See Debug an OpenVPN tunnel for more information on logging levels.
4. Enter the Network settings:
n Network: Enter the IP network to be used with the OpenVPN clients.
n Mask: Enter the subnet mask for the IP subnet.
5. Review the Encryption settings and modify as needed. These settings configure the encryption
protocols used with the OpenVPN tunnel.
n Digest: Enter the digest to be used with the OpenVPN tunnel.
6. Enter the Authentication settings:
n Certificate authority (CA) certificate: Enter the name of the Certificate Authority
certificate to authenticate OpenVPN client certificates.
n Diffie-Hellman file: Enter the name of the Diffie-Hellman file.
n Certificate: Enter the name of the certificate to be used by the OpenVPN server.
n Private Key File: Enter the private key file to be used by the OpenVPN server.
7. Review the Lifetime settings and modify as needed. These settings configure the OpenVPN
tunnel keepalive and renegotiation.
8. Click Apply.
Command line
1. Enable the OpenVPN server.
digi.router> openvpn-server state on
2. Configure the IP network of the OpenVPN server.
digi.router> openvpn-server network 192.168.54.0
3. (Optional) Configure the IP subnet mask of the OpenVPN server.
digi.router> openvpn-server mask 255.255.255.128