Billion BiPAC 8900X R3, User Manual

Page: 202 / 261

197
OpenVPN
OpenVPN is an open source software application that implements
237H245H245H245H
virtual private network (VPN)
techniques for creating secure point-to-point or site-to-site connections in routed or bridged
configurations and remote access facilities. It uses a custom security protocol that utilizes
238H246H246H246H
SSL/TLS
for key exchange. It is capable of traversing network address translation (NAT) and
239H247H247H247H
firewalls.
OpenVPN allows
240H248H248H248H
peers to
241H249H249H249H
authenticate each other using a
242H250H250H250H
pre-shared secret key,
243H251H251H251H
certificates, or
244H252H252H252H
username/
245H253H253H253H
password. When used in a multiclient-server configuration, it allows the server to release
an
246H254H254H254H
authentication certificate for every client, using
247H255H255H255H
signature and
248H256H256H256H
Certificate authority. It uses the
249H257H257H257H
OpenSSL encryption
250H258H258H258H
library extensively, as well as the
251H259H259H259H
SSLv3/TLSv1
252H260H260H260H
protocol, and contains many
security and control features.
OpenVPN is good at portability. OpenVPN has been ported and embedded to several systems.
OpenVPN Server
Users can set the bassic parameters(source/destination address, protocl/port, authentication,
encyption, etc) for OpenVPN Server.
OpenVPN Server: Select Enable to activate OpenVPN Server.
WAN Interface: Select the exact WAN interface configured as source for the tunnel. Select Default
to use the now-working WAN interface for the tunnel.
Protocol: OpenVPN can run over
253H261H261H261H
User Datagram Protocol (UDP) or
254H262H262H262H
Transmission Control Protocol
(TCP) transports. Select the protocol.
Port Number: Port 1194 is the official assigned port number for OpenVPN
Tunnel Virtual Subnet: Set the tunnel virtual subnet IP for OpenVPN server.
Tunnel Network: Set the tunnel virtual subnet mask.
Cipher Encryption: OpenVPN uses all the ciphers available in the OpenSSL package to encrypt
both the data and channels. Select the encryption method.