ELTEX ESR Series User Manual

ESR-Series. User manual
472
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Step Description Command Keys
26 Change the authentication algorithm for
OpenVPN clients (optional).
esr(config-openvpn-server)#
authentication algorithm
<ALGORITHM>
<ALGORITHM> –
authentication algorithm:
8-128 bits key size: md4,
rsa-md4, md5, rsa-md5,
mdc2, rsa-mdc2
8-160 bits key size: sha,
sha1, rsa-sha, rsa-sha1,
rsa-sha1-2, dsa, dsa-sha,
dsa-sha1, dsa-sha1-old,
ripemd160, rsa-
ripemd160, ecdsa-with-
sha1
8-224 bits key size:
sha-224, rsa-sha-224
8-256 bits key size:
sha-256, rsa-sha-256
8-384 bits key size:
sha-384, rsa-sha-384
8-512 bits key size:
sha-512, rsa-sha-512,
whirlpool
Default value: sha
15.3.2 Configuration example
Objective:
Configure Open VPN server in L3 mode on a router for remote user connection to LAN.
OpenVPN server subnet: 10.10.100.0/24;
Mode: L3;
Authentication based on certificates.
Solution:
First, do the following:
Prepare certificates and keys:
CA certificate
OpenVPN server key and certificate
Diffie-Hellman and HMAC key for TLS
Configure zone for te1/0/1 interface

ELTEX ESR Series Specifications

General

Model	ESR Series
Category	Network Router
Manufacturer	ELTEX
Management	Web interface, CLI, SNMP
Operating Temperature	0°C to 40°C
Dimensions	Varies by model
Weight	Varies by model
Routing Protocols	OSPF, BGP
WAN Interfaces	Ethernet, SFP
LAN Interfaces	Ethernet, SFP
VPN Support	IPsec, L2TP, PPTP
Firewall	Stateful packet inspection, ACLs
Power over Ethernet (PoE)	Available on some models
QoS	Traffic prioritization