ELTEX ESR-1000 - Page 550

ESR series service routers.ESR-Series. User manual
550
•
•
•
•
•
•
Step Description Command Keys
6 Specify IP addresses list from which
dynamic IP addresses are leased to
remote users in L2 mode by
OpenVPN server (only for tunnel
ethernet).
esr(config-openvpn-server)#
address-range <FROM-ADDR>-
<TO-ADDR>
<FROM-ADDR> – range starting IP
address, defined as
AAA.BBB.CCC.DDD where each part
takes values of [0..255];
<TO-ADDR> – range ending IP
address, defined as
AAA.BBB.CCC.DDD where each part
takes values of [0..255].
7 Include client connections via
OpenVPN in L2 domain (only for
tunnel ethernet).
esr(config-openvpn-server)#
bridge-group <BRIDGE-ID>
<BRIDGE-ID> – bridge identifying
number.
8 Specify certificates and keys. esr(config-openvpn-server)#
certificate <CERTIFICATE-
TYPE> <NAME>
<CERTIFICATE-TYPE> – certificate or
key type, may take the following
values:
ca – Certificate Authority;
crl – Certificate Revocation
List;
dh – Diffie-Hellman key;
server - crt – public server
certificate;
server - key – private server
key;
ta – HMAC key.
<NAME> – certificate or key name,
set by the string of up to 31
characters.
9 Select encryption algorithm used
when data transmission.
esr(config-openvpn-server)#
encryption algorithm
<ALGORITHM>
<ALGORITHM> – encryption protocol
identifier, may take values:
3des,blowfish128, aes128.
10 Include the OpenVPN server in a
security zone and configure
interaction rules between zones (see
section Firewall configuration).
esr(config-openvpn-server)#
security-zone <NAME>
<NAME> – security zone name, set
by the string of up to 31 characters.
11 Define the additional parameters for
a specified OpenVPN server user
(when using a local base for user
authentication).
esr(config-openvpn-server)#
username < NAME >
<NAME> – user name, set by the
string of up to 31 characters.
12 Define a subnet for the specified
user of the OpenVPN server.
esr(config-openvpn-user)#
subnet <ADDR/LEN>
<ADDR/LEN> – subnet address, set
in the following format:
AAA.BBB.CCC.DDD/NN – network IP
address with prefix mask, where
AAA-DDD take values of [0..255] and
EE takes values of [1..32].