Robustel GoRugged R3000 - Page 73

Robustel GoRugged R3000 User Guide
RT_UG_R3000_v.3.0.3 04.02.2017 72 / 124
Confidential
Tunnel Settings
Item
Description
Default
Index
Show the index of the tunnel.
1
Enable
Enable OpenVPN tunnel.
ON
Description
Enter some simple words about the OpenVPN Tunnel.
Null
Mode
Select from “P2P”, “Client”.
Client
Protocol
Select from “UDP”, “TCP-Client”.
UDP
Server Address
Enter the OpenVPN server address.
Null
Server Port
Enter the OpenVPN server port
1194
Interface Type
Select from “TUN”, “TAP” which are two different kinds of device
interface for OpenVPN.
The difference between TUN and TAP device is this: a TUN device is a
virtual IP point-to-point device and a TAP device is a virtual Ethernet
device.
TUN
Authentication Type
Select from “None”, “Preshared”, “Password”, “X509CA” and “X509CA
Password”. “None” and “Preshared” type just work with p2p mode.
None
Local IP
When the “Mode” is “P2P”.
Define the local IP address of OpenVPN tunnel.
Null
Remote IP
When the “Mode” is “P2P”.
Define the remote IP address of OpenVPN tunnel.
Null
Username
User name used for Authentication Type “Password” or “X509CA
Password”.
Null
Password
Password used for Authentication Type “Password” or “X509CA
Password”.
Null
Encrypt Algorithm
Select from “BF”, “DES”, “DES-EDE3”, “AES128”, “AES192” and
“AES256”.
BF: Uses the BF algorithm in CBC mode and 128-bit key.
DES: Uses the DES algorithm in CBC mode and 64-bit key.
DES-EDE3: Uses the 3DES algorithm in CBC mode and 192-bit key.
AES128: Uses the AES algorithm in CBC mode and 128-bit key.
AES192: Uses the AES algorithm in CBC mode and 192-bit key.
AES256: Uses the AES algorithm in CBC mode and 256-bit key.
BF
Keepalive Interval
Set keepalive (ping) interval to check if the tunnel is active.
20
Keepalive Timeout
Trigger OpenVPN restart after n seconds pass without reception of a
ping or other packet from remote.
120
Private Key Password
Password of Private Key for Authentication Type “X509CA”
Null
Enable Compression
Enable to compress the data stream.
ON
Enable NAT
Tick to enable NAT for OpenVPN. The source IP address of host behind
R3000 will be disguised before accessing the remote OpenVPN client.
OFF