MLR 3G 2.0
Functions
this is the network 192.168.200.0/24 on one side. On the other side, this is the network
192.168.1.0/24. On the other side, this is the network 192.168.1.0/24. As soon as the
tunnel is established, data for these target networks is sent through the OpenVPN tun-
nel. If the entire data traffic from a network behind the MLR 3G 2.0 is supposed to be
sent via the VPN tunnel, we recommend activating the firewall as soon as the configura-
tion is completed successfully. This will limit the communication to the port at which the
OpenVPN tunnel is established (standard setting: port 1194).
The MLR 3G 2.0 supports several authentication methods when establishing the VPN
tunnel:
Authentication type
Usage
Characteristics
None
For testing purposes and
to connect networks
without encryption.
No encrypted connection. It is not
possible to log in several clients at
the server at the same time.
Static key
For encrypted connections
of one client and one
server each in small appli-
cations
Encrypted connection. It is not
possible to log in several clients at
the server at the same time.
User name/password
and common CA cer-
tificate (can only be
configured at the
OpenVPN client)
For encrypted connections
from one or more clients
to an OpenVPN server.
Flexible application for several cli-
ents.
Certificate-based;
each participant has
an individual certifi-
cate and key.
For encrypted connections
from one or more clients
to an OpenVPN server.
Solution for maximum security,
but the configuration is more
complicated.
Table 11: Authentication methods for OpenVPN
For detailed information and troubleshooting, we also recommend the OpenVPN web
site:
http://openvpn.net/howto.html
10.5.3
OpenVPN Server Basic Settings
You can use the MLR 3G 2.0 as VPN server, if you want to send confidential data via an
unsecured network, for example. This section describes the basic settings for the VPN
Server. The basic settings of the MLR 3G 2.0 are reasonable factory defaults, which you
may change in certain circumstances. The VPN basic settings are used to define which
port of the MLR 3G 2.0 is used to create the VPN tunnel and if the VPN transmission is
performed with the UDP or the TCP protocol. Moreover, you can specify here, whether
the clients are informed about the server network, the remote terminal may change its IP
address, LZO compression is used, packets are masked before tunnelling, which encryp-
tion algorithm is used during transmission, how big the tunnel packets are to be, and in
which time intervals the VPN server sends VPN pings. In addition, you will have the op-
tion to display the OpenVPN status, the current configuration file, to create a configura-
tion for an OpenVPN remote terminal, and to display a log of the last connection. For ex-
ample, the created configuration can be used to set up an OpenVPN packet on a client
PC. The OpenVPN packet for Windows clients can be downloaded from the INSYS MI-
CROELECTRONICS web site:
49
