CM5000 User Manual
UM-CM5000-FW3.5.2.0-REV0.0
2019-07-08
www.ateme.com
Page 110
Appendix C. VPN Guide
C.1. Overview
The CM5000 embeds a Virtual Private Network (VPN) client. It allows the CM5000 to connect to a private network
across another one (e.g Internet) and behaving like it is directly connected to the private network. The client is based
on the OpenVPN® technology (http://openvpn.net/). OpenVPN® is an open source project which implements various
methods to create a secure VPN.
Note
This section will describe server and client configurations. It will not describe how to install OpenVPN®
server on a machine, how to generate or revoke the certificates and keys and how to manage them.
For an in-depth view of the administration of an OpenVPN® server please refer to http://openvpn.net/
index.php/open-source/documentation/howto.html
C.2. Server configuration
This section describes a server configuration example file on Linux. It is based on OpenVpn 2.3.4-5 for debian jessie.
It is located in /etc/openvpn/server.conf
Here we highlight the mandatory parameters the server has to configure in order to communicate with the CM5000.
port 1194 #The port the server will open to listen to
#the clients.
proto udp #May be 'proto tcp'
dev tun #MUST be dev tun, dev tap not supported
ca /etc/openvpn/easy-rsa/keys/ca.crt #Path to the certification authority
#certificate, will be given to the client
cert /etc/openvpn/easy-rsa/keys/server.crt #Path to the server certificate
key /etc/openvpn/easy-rsa/keys/server.key #Path to the server secret key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem #MUST be a 1024bit Diffie Hellman parameters
#file
server 10.8.0.0 255.255.255.0 #Subnet address range, 10.8.0.1 will be the
#server address in the VPN.
ifconfig-pool-persist ipp.txt #Keep the same IP address for a client if
#possible.
keepalive 10 60 #Connections keep alive timeouts.
auth SHA256 #MUST be this auth
cipher AES-256-CBC #MUST be this cipher
comp-lzo #MUST be enabled
persist-key #Persists options
persist-tun
status /var/log/openvpn-status.log #Short status file path
log-append /var/log/openvpn.log #Complete logs path
verb 3 #Log verbosity
