Digi TransPort LR54 - Page 326

Web reference OpenVPN server page
Digi TransPort WR Routers User Guide
326
Encryption options
Option Description
Cipher Encryption algorithm or list of algorithms the OpenVPN server can use to encrypt and
decrypt data channel packets. The OpenVPN server pushes the first cipher in the list to
OpenVPN clients that support cipher negotiation. OpenVPN clients that do not support
cipher negotiation can connect using any cipher in this list.
Select one or more ciphers: aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-192-
gcm, and aes-256-gcm. The default is aes-256-gcm,aes-256-cbc,aes-192-gcm,aes-192-
cbc,aes-128-gcm,aes-128-cbc.
Digest Digest algorithm the OpenVPN server uses to sign and authenticate data channel packets.
Select one of the following: sha1, sha224, sha256, sha384, or sha512. The default is sha1.
Authentication options
Option Description
Certificate
Authority (CA)
certificate
Certificate file this OpenVPN server uses to validate the certificate presented by
the clients. See Certificate and key management.
Certificate
Revocation
List (CRL) file
CRL file this OpenVPN server uses to prevent connection to a client that presents
a revoked certificate.
CA/CRL
directory path
(capath)
CA and CRL directory path for this OpenVPN server. You can provide multiple CA
and CRL files. Use the c_rehash tool to create CA certificates with a .0 filename
extension and CRLs with a .r0 filename extension. See rehash for details.
Diffie-Hellman
file
Diffie-Hellman parameters this OpenVPN server uses for shared secret
generation. This file is in PEM format.
Certificate Public certificate file for this OpenVPN server. The file is in PEM format.
Private Key
File
Private key file for this OpenVPN server. The file is in PEM format.
Authenticate
By
Configures authentication to use username and password, certificates, or both.
The default is certificates.
Radius Server
State
Enables or disables the Radius server. The default is disabled.
Radius Server IP address in IPv4 format for the RADIUS server for OpenVPN.
Radius Server
Port
Port for the RADIUS server. Specify an integer from 1 to 65535. The default is
1812.
Radius Server
Secret
Secret for the RADIUS server. Specify a string up to 64 characters long.