Robustel GoRugged R3000 Quad - Page 79

Robustel GoRugged R3000 Quad User Guide
RT_UG_R3000 Quad_v.1.2.0 02.07.2015 78 / 136
Confidential
device.
Authentication
Select from four different kinds of authentication ways: “Pre-shared”,
“Username/Password”, “X.509 cert” and “X.509 cert+user”.
None
Local IP
Define the local IP address of OpenVPN tunnel.
10.8.0.1
Remote IP
Define the remote IP address of OpenVPN tunnel.
10.8.0.2
Enable NAT
Tick to enable SNAT for OpenVPN. The source IP address of host
Behind R3000 will be disguised before accessing the remote
OpenVPN client.
Disable
Ping Interval
Set ping interval to check if the tunnel is active.
20
Ping -Restart
Restart to establish the OpenVPN tunnel if ping always timeout
during this time.
120
Compression
Select from “None”and”LZO”, Select “LZO” to use the LZO
compression library to compress the data stream.
LZO
Encryption
Select from “NONE”, “BF-CBC”, “DES-CBC”, “DES-EDE3-CBC”,
“AES128-CBC”, “AES192-CBC” and “AES256-CBC”.
BF-CBC: Uses the BF algorithm in CBC mode and 128-bit key.
DES-CBC: Uses the DES algorithm in CBC mode and 64-bit key.
DES-EDE3-CBC: Uses the 3DES algorithm in CBC mode and 192-bit
key.
AES128-CBC: Uses the AES algorithm in CBC mode and 128-bit key.
AES192-CBC: Uses the AES algorithm in CBC mode and 192-bit key.
AES256-CBC: Uses the AES algorithm in CBC mode and 256-bit key.
NONE
MTU
Maximum Transmission Unit. It is the identifier of the maximum size
of packet, which is possible to transfer in a given environment.
1500
Max Frame Size
Set the Max Frame Size for transmission.
1500
Verbose Level
Select the log output level which from low to high: “ERR”,
“WARNING”, “NOTICE” and “DEBUG”. The higher level will output
more log information.
ERR
Expert Options
You can enter some other PPP initialization strings in this field. Each
string can be separated by a space.
Null
Enable HMAC
Firewall @ VPN
Server Advanced
In order to prevent malicious attacks, such as DOS, UDP port flooding,
we generate a "HMAC is firewall"
Disable
Enable Crl @ VPN
Server Advanced
Generate a certificate revoked chain file, to prevent someone lost
certificate in the future, users access VPN by illegal.
You could find the certificate tab of R3000, there is one option for
Crl.
Disable
Enable Client to
Client @ VPN Server
Advanced
Uncomment this directive to allow different clients to be able to
"see" each other.
By default, clients will only see the server. To force clients to only see
the server, you will also need to appropriately firewall the server's
TUN/TAP interface.
Disable
Enable Dup Client @
While establish OpenVPN with keys, must open this option,
Disable