DEFINING TUNNELS
MultiConnect
®
rCell 100 MTR-LTE User Guide 57
OpenVPN Tunnels
OpenVPN is an open-source software application that implements virtual private network (VPN) techniques for
creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access
facilities. You can use and setup OpenVPN tunnels with this device.
To use OpenVPN, you must first install an OpenVPN application along with an easy-rsa tool and configure OpenVPN
on your computer. Then you must also generate the certificates for the OpenVPN server and client before
configuring the device.
To configure OpenVPN client and server on this device the following files are required:
The CA PEM file or CA certificate (.crt)
The Diffie Hellman PEM file (.pem)
The Server Certificate to be used by the device endpoint (.crt)
The Server/Client Key to be used by the device endpoint (.key)
Note: When you configure OpenVPN server and client make sure both sides use the same settings, and certificates.
Configuration 1: OpenVPN Tunnel with TLS Authorization Mode (Device only)
This first configuration establishes the OpenVPN Tunnel connection from a device client to a device server using
TLS as Authorization Mode. This involves adding and configuring both OpenVPN Server and Client sides within the
device UI.
To add an OpenVPN Server using TLS:
1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Click Add Tunnel.
3. Enter the Name.
4. Select the Type as SERVER from the drop-down.
5. You can also enter an optional Description.
6. Click Next.
7. Enter the following fields (using TLS as Authorization Mode):
a. Interface Type as TUN from the drop-down.
b. Authorization Mode as TLS from the drop-down.
c. Protocol as UDP.
d. VPN Subnet.
e. Port number.
f. VPN Netmask.
g. LZO Compression as ADAPTIVE from the drop-down.
h. Enter the contents of the following files generated from the easy-rsa tool. You can copy and paste
this content from the certificate files after opening from a text editor like Notepad. (all required):
i. CA PEM (.crt)
ii. Diffie Hellman PEM (.pem)
iii. Server Certificate PEM (.crt)
iv. Server Key PEM (.key)
To Next Page
Loading...
