User Interface
R&S
®
GP-E/GP-S
120User Manual v16.2.1 ─ 01
The "Site-to-Site" settings allow you to configure the following elements:
Field Description
"On" / "Off" A slider switch indicates whether the OpenVPN S2S connection is active
( "On" ) or inactive ( "Off" ). By clicking the slider switch you, can toggle the
state of the connection. A new connection is enabled by default.
"Show on Desktop" This checkbox is pre-selected by default. You can clear the checkbox if you do
not want the OpenVPN S2S connection to be displayed as a node in the net-
work overview on the desktop.
"Color" Select the color to be used for this object on the desktop. The color is set to
black by default.
"Name" Enter a unique name for the connection. It must consist of a minimum of three
lowercase alphanumeric characters.
"Access Zone" From the drop-down list, select the zone which is directly accessible to the
remote site.
"Role" Select one of the two radio buttons, depending on the role that the gateprotect
Firewall system will play in the new VPN connection:
●
"Primary Box (Server)" - Start a virtual private network connection by ini-
tiating a session with a remote site network
●
"Secondary Box (Client)" - Configure the system to respond to virtual pri-
vate network connection requests from remote site networks
"Listen IP" For the primary box: Enter an external listening IP address from within the
access zone of the remote site. If you set the Listen IP address to the default
route 0.0.0.0, all IP addresses within the access zone are reachable.
"Listen Port" For the primary box: Specify the OpenVPN listening port number to be used for
incoming connections by entering a value from 1 to 65535.
"Remote Port" For the secondary box: Enter the port number used for this connection in the
access zone of the remote site.
"Use Compression" Optional: Select this checkbox to activate LZO (Lempel-Ziv-Oberhumer, a loss-
less data compression algorithm) compression.
"Use TCP Protocol" Optional: Select this checkbox to use the TCP protocol. Otherwise UDP is
used. TCP is not recommended.
"Key Renegotiation" An OpenVPN connection renews the session key while the connection is estab-
lished to increase security. Specify this rekeying interval (in seconds).
"Certificate" Select the server certificate for OpenVPN connections from the drop-down list.
Important: The VPN certificate has to be signed by the same certificate author-
ity (CA) on all sites. Therefore, it is advisable to manage the VPN CA and the
VPN certificates on one site and then to export and import the VPN certificates
from there to the other sites. For more information, see Chapter 3.4.8.1, "Certifi-
cates", on page 122.
"Certificate Password" Optional: Enter the "PK Password" of the VPN certificate if you decide to secure
the private key. For more information, see Chapter 3.4.8.1, "Certificates",
on page 122.
"Bridge Mode" Optional: Select this checkbox to connect the termination zones via layer 2
instead of layer 3.
Important: Before activating Bridge Mode, make sure that you have
●
configured a unique IP address for each of the two termination zones and
●
activated only one DHCP server for one of the two termination zones.
Menu Reference
To Next Page