Tripp Lite B092-016 - Enable the Openvpn

59
Chapter 4: Serial Port, Device and User Configuration
4.10.1 Enable the OpenVPN
• SelectOpenVPN on the Serial & Networks menu
• ClickAdd and complete the Add OpenVPN Tunnel screen
• EnteranydescriptivenameyouwishtoidentifytheOpenVPNTunnelyouareadding,forexampleNorthStOutlet-VPN
• SelecttheDevice Drivertobeused,eitherTun-IP or Tap-Ethernet.TheTUN(networktunnel)andTAP(networktap)
driversarevirtualnetworkdriversthatsupportIPtunnelingandEthernettunneling,respectively.TUNandTAParepartof
the Linux kernel.
• SelecteitherUDP or TCPastheProtocol.UDPisthedefaultandpreferredprotocolforOpenVPN.
• InTunnel Mode,nominatewhetherthisistheClient or Serverendofthetunnel.Whenrunningasaserver,theConsole
ServersupportsmultipleclientsconnectingtotheVPNserveroverthesameport.
• InCongurationMethod,selecttheauthenticationmethodtobeused.ToauthenticateusingcerticatesselectPKI
(X.509Certicates)orselectCustomCongurationtouploadcustomcongurationles.Customcongurationsmustbe
stored in /etc/config.
Note: If you select PKI (public key infrastructure) you will need to establish:
• Separatecerticate(alsoknownasapublickey).ThisCertificate File will be a *.crt file type
• PrivateKeyfortheserverandeachclient.ThisPrivate Key File will be a *.key file type
• MasterCerticateAuthority(CA)certicateandkeywhichisusedtosigneachoftheserverandclientcerticates.This
Root CA Certificate will be a *.crt file type
For a server you may also need dh1024.pem (Diffie Hellman parameters).
Refer http://openvpn.net/easyrsa.html for a guide to basic RSA key management.
For alternative authentication methods see http://openvpn.net/index.php/documentation/howto.html#auth.
For more information also see http://openvpn.net/howto.html
• CheckorunchecktheCompressionbuttontoenableordisablecompression,respectively