DEFINING TUNNELS
MultiConnect
®
rCell 100 MTR-EV3 User Guide 69
15. Click Save and Restart to save your changes
To add an OpenVPN Client using TLS:
1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Click Add Tunnel.
3. Enter the Name of the tunnel.
4. Select the Type as CLIENT from the drop-down.
5. You can also enter an optional Description.
6. Under OpenVPN Tunnel Configuration, enter the following fields (using TLS as Authorization Mode):
a. Interface Type as TUN from the drop-down.
b. Authorization Mode as TLS from the drop-down.
c. Protocol as UDP.
d. Remote Host (server public IP address).
e. Remote Port number.
f. LZO Compression as ADAPTIVE from the drop-down.
g. Hash Algorithm as DEFAULT.
h. Encryption Cipher as DEFAULT.
i. Min. TLS Version as 1.2.
j. TLS Cipher Suite as DEFAULT.
k. Enter the contents of the following files generated from the easy-rsa tool. You can copy and paste
this content from the certificate files after opening from a text editor like Notepad. (all required):
i. CA PEM (.crt)
ii. Client Certificate PEM (.crt)
iii. Client Key PEM (.key)
l. Click Next.
7. If you use TLS as Authorization Mode, you do not need configure or add Remote Network Routes. The
server adds the routes if the server's Push Routes are already configured. If you use Static Key as
Authorization Mode, you must add and configure Remote Network Routes.
8. Click Next.
9. The system displays the Configuration Preview window (read-only).
10. Click Finish.
11. Click Save and Restart to save your changes.
Now the device client can access the device server subnet. You can ping the IP address of the device server subnet
from the client console to test this.
Note: The PC connected to the device does not have access to the device server subnet.
Configuration 2: OpenVPN Tunnel with TLS Authorization Mode (Device and Connected PC)
This second configuration provides access between a device server and its subnet and device client and its subnet.
An additional configuration is needed on the device server side. This also allows your PC to connect with the device
server and ultimately to the device client through that server.
To Next Page
Loading...
