NB2800
User Manual for NRSW version 4.5.0.100
The following further options can be applied:
Parameter OpenVPN Options
use compression Enable or disable LZO packet compression
use keepalive Can be used to send a periodic keepalive packet in order to keep the
tunnel up despite of inactivity
redirect gateway By redirecting the gateway, all packets will be directed to the VPN
tunnel. Please ensure that essential services (such as DNS or NTP
servers) can be reached at the network behind the tunnel. In doubt,
create an extra static route pointing to the correct interface.
allow duplicates Allow multiple clients with the same common name to concurrently
connect.
verify certs Check peer certificate against local CRL.
negotiate DNS If enabled, the system will use the nameservers which have been
negotiated over the tunnel.
OpenVPN Expert Configuration (Client)
The expert configuration mode offers a straightforward way to configure a tunnel by simply uploading
a zip package containing the required configuration and optionally key/certificate files. A client tunnel
usually consists of the following files:
Parameter Client Expert Files
client.conf OpenVPN configuration file (see http://www.openvpn.net for avail-
able options)
ca.crt Root certificate authority file
client.crt Certificate file
client.key Private key file
client.p12 PKCS#12 file
ta.key TLS authentication key file
Please note that you may specify arbitrary file names, however, the configuration file suffix must be
.conf and all files referred in the configuration file must correspond to relative path names.
111
To Next Page
Loading...
