Tripp Lite B092-016 - Openvpn

58
• InRight AddressenterthepublicIPorDNSaddressoftheremoteendofthetunnel(onlyiftheremoteendhasastatic
ordyndnsaddress).Otherwiseleavethisblank
• IftheVPNgatewayisservingasaVPNgatewaytoalocalsubnet(e.g.theConsoleServerhasaManagementLAN
congured)entertheprivatesubnetdetailsinLeft Subnet.UsetheCIDRnotation(wheretheIPaddressnumberis
followedbyaslashandthenumberof‘one’bitsinthebinarynotationofthenetmask).Forexample192.168.0.0/24
indicatesanIPaddresswheretherst24bitsareusedasthenetworkaddress.Thisisthesameas255.255.255.0.If
theVPNaccessisonlytotheconsoleserveritselfandtoitsattachedserialconsoledevicesthenleaveLeft Subnet blank
• IfthereisaVPNgatewayattheremoteend,entertheprivatesubnetdetailsinRight Subnet.AgainusetheCIDR
notation and leave blank if there is only a remote host
• SelectInitiate Tunnel if the tunnel connection is to be initiated from the Left console server end. This can only be
initiatedfromtheVPNgateway(Left)iftheremoteendwasconguredwithastatic(ordyndns)IPaddress
• ClickApply to save changes
Note: It is essential the configuration details set up on the Console Server (referred to as the Left or Local host) exactly
matches the set up entered when configuring the Remote (Right) host/gateway or software client.
Chapter 4: Serial Port, Device and User Configuration
4.10 OpenVPN
ConsoleServersalsoincludeOpenVPNwhichisbasedonTSL(TransportLayerSecurity)andSSL(SecureSocketLayer).
WithOpenVPN,itiseasytobuildcross-platform,point-to-pointVPNsusingx509PKI(PublicKeyInfrastructure)orcustom
configuration files.
OpenVPNallowssecuretunnelingofdatathroughasingleTCP/UDPportoveranunsecurednetwork,thusprovidingsecure
access to multiple sites and secure remote administration to a console server over the Internet.
OpenVPNalsoallowstheuseofDynamicIPaddressesbyboththeserverandclientthusprovidingclientmobility.Forexample,
anOpenVPNtunnelmaybeestablishedbetweenaroamingwindowsclientandaConsoleServerwithinadatacentre.
CongurationofOpenVPNcanbecomplexsoTrippLiteprovidesasimpleGUIinterfaceforbasicsetupasdescribedbelow.
HoweverformoredetailedinformationonconguringOpenVPNAccessserverorclientrefertotheHOWTOandFAQsat
http://www.openvpn.net