B+B SMARTWORK SPECTRE V3, Configuration Manual

Page: 67 / 136

4. CONFIGURATION
Continued from previous page
Item Description
Authenticate Mode Specifies the authentication mode:
•
none – No authentication is set.
• Pre-shared secret – Specifies the shared key function for
both sides of the tunnel.
• Username/password – Specifies authentication using a
CA Certificate, Username and Password.
• X.509 Certificate (multiclient) – Activates the X.509 au-
thentication in multi-client mode.
• X.509 Certificate (client) – Activates the X.509 authenti-
cation in client mode.
• X.509 Certificate (server) – Activates the X.509 authenti-
cation in server mode.
Pre-shared Secret Specifies the pre-shared secret which you can use for every au-
thentication mode.
CA Certificate Specifies the CA Certificate which you can use for the user-
name/password and X.509 Certificate authentication modes.
DH Parameters Specifies the protocol for the DH parameters key exchange which
you can use for X.509 Certificate authentication in the server
mode.
Local Certificate Specifies the certificate used in the local device. You can use this
authentication certificate for the X.509 Certificate authentication
mode.
Local Private Key Specifies the key used in the local device. You can use the key
for the X.509 Certificate authentication mode.
Username Specifies a login name which you can use for authentication in
the username/password mode.
Password Specifies a password which you can use for authentication in the
username/password mode.
Extra Options Specifies additional parameters for the OpenVPN tunnel, such as
DHCP options. The parameters are proceeded by two dashes.
For possible parameters see the help text in the router using SSH
– run the
openvpnd --help
command.
Table 37: OpenVPN Configuration
58