In order to configure the authentication with static key, select the radio
button "No authentication or authentication with preshared key". It is
indicated under the option here, whether the static key is present (green
checkmark) or not (red cross). A present key can also be downloaded
(blue arrow) or deleted again (red cross on white box). If no key exists,
the remote terminal will neither be authenticated nor the data traffic
through the OpenVPN tunnel will be encrypted. You can also generate a
new static key using the "Generate a new static key" link. This static key
must then be downloaded and also uploaded to the remote terminal.
Both OpenVPN remote terminals must have the same static key that a
tunnel is functional with this authentication type. Enter the IP address or
the domain name of the remote terminal into the "IP address or domain
name of remote site" field. You can enter the IP address or the domain
name of an alternative remote terminal into the "Alternative remote site"
field. Enter the IP address of the local tunnel end into the "IPv4 tunnel
address local" or "IPv6 tunnel address local" field and the IP address of
the remote tunnel end into the "IPv4 tunnel address remote" or "IPv6
tunnel address remote" field. Enter the address as well as the associated
netmask of the network behind the OpenVPN tunnel into the "IPv4 net
address behind the tunnel" or "IPv6 net address behind the tunnel" and
"IPv4 netmask behind the tunnel" or "IPv6 netmask behind the tunnel"
fields.
In order to confirm all settings made above, click on "OK".
In order to upload a certificate or key, click in the section "Upload key or
certificates" on the "Browse..." button (button depends on the used
browser). Then, select in the "Upload file" window the desired file on the
respective data carrier and click on the "Open" button. If the file is
encrypted, you must also enter the password into the "Password (only
with encrypted file)" field. Click on "OK" then to upload the file.
12.3.4 Setting Up an OpenVPN Client
You can use the EBW-E100 as OpenVPN client, if you want to connect to an
OpenVPN server via an unsecured network. This section describes the set-up of an
OpenVPN client. The basic settings are reasonable factory defaults, which you need
to adjust to the VPN which will be connected to the EBW-E100. Here, you define
with which IP address or domain and via which ports the OpenVPN tunnel is
established, and if the OpenVPN transmission is performed with the UDP or the
TCP protocol. If the remote terminal can only be accessed via a proxy server, this
can be configured accordingly. Moreover, you can specify here, whether a default
route is set, the local address and the port are fixed, the remote terminal may
change its IP address, LZO compression is used, packets are masked before
tunnelling, which encryption algorithm is used during transmission, how big the
tunnel packets are to be, and in which time intervals the OpenVPN client sends
VPN pings to the server. In addition, you will have the option to display the
OpenVPN status, the current configuration file, a configuration for an OpenVPN
remote terminal (the OpenVPN sever) and a log of the last connection.
To Next Page
Loading...