12.3.3 Setting Up an OpenVPN Server
You can use the EBW-E100 as OpenVPN server, if you want to send confidential
data via an unsecured network, for example. This section describes the set-up of an
OpenVPN server. The basic settings are reasonable factory defaults, which you
may change in certain circumstances. Here, you define which port of the EBW-
E100 is used to create the OpenVPN tunnel and if the OpenVPN transmission is
performed with the UDP or the TCP protocol. Moreover, you can specify here,
whether the clients are informed about the server network, the remote terminal
may change its IP address, LZO compression is used, packets are masked before
tunnelling, which encryption algorithm is used during transmission, how big the
tunnel packets are to be, and in which time intervals the OpenVPN server sends
VPN pings. In addition, you will have the option to display the OpenVPN status, to
display the current configuration file, to create a configuration for an OpenVPN
remote terminal, and to display a log of the last connection. You can use the
generated configuration file to create an OpenVPN configuration file for exampple,
which can be used as basis for the operation of an OpenVPN instance on a client
PC. The OpenVPN packet for Windows clients can be downloaded from the INSYS
icom web site (www.insys-icom.com/driver).
This program is used as remote terminal, if you want to establish an OpenVPN
connection from a Windows PC.
Configuration via web interface (menu "LAN (ext)", page "OpenVPN server")
In order to use the OpenVPN server for a connection, check the
checkbox "Activate OpenVPN server".
In order to define the local port at the EBW-E100 as well as the port at
the remote terminal, enter a value for the required port into the entry
fields "Tunnelling over port (local / remote)" (default setting 1194).
The OpenVPN transmission protocol is selected with the radio buttons
"UDP" or "TCP". We recommend using UPD to minimise latency.
In order to inform the clients about the route to the network behind the
server, check the checkbox "Inform clients about server network". If this
setting is disabled, a communication can only be initiated from the
network of the server.
In order to enable remote OpenVPN terminals to change its IP during a
connection ("Floating"), check the checkbox "Remote terminal is allowed
to change its IP address (float)". This setting is activated by default.
In order to enable or disable LZO compression, check or uncheck the
checkbox "Activate LZO compression". If already strongly compressed
data (e.g. jpg) is transmitted, the compression will have hardly any effect;
however, if compressible data (e.g. text) is transmitted, the compression
may significantly reduce the transmitted volume of data. Switch the
compression off, if the remote terminal does not support LZO
compression.
To Next Page
Loading...