INSYS MoRoS GPRS 2.1 PRO, Manual

Page: 75 / 144

MoRoS GPRS 2.1 PRO Functions
In order to configure the detail level of the messages in the connection
log, enter the detail level into the field "Log level", where "0" disables the
log record completely and "9" records the most detailed information.
In order to define a certain fragmenting size for the OpenVPN tunnel
packets in bytes, use the entry field "Fragment packets". Enter the re-
quired maximum packet size in bytes here. If you don't enter a value, the
OpenVPN packets will have a maximum size of 1.500 bytes. The actually
transmitted amount of user data is lower, because OpenVPN creates a
"protocol overhead", which means that the protocol information that is
transmitted as well is a part of the packet size.
In order to adjust the interval up to the key renegotiation, use the entry
field "Interval for renegotiation of data channel key". This interval config-
ures the time in seconds, which must expire before new keys are created.
In order to adjust the VPN ping interval, use the entry field "Ping interval".
Enter the interval in the amount of seconds, in which the OpenVPN client
of the MoRoS GPRS 2.1 PRO sends ping packets to the remote VPN ter-
minal. The frequent ping is used to keep the connection open via several
routers and gateways, which may participate in the connection and would
close the channel in case there was no communication.
In order to adjust the ping restart interval, use the entry field "Ping restart
interval". The ping restart interval configures the time in seconds after
which the tunnel is to be established again, if no ping from the remote
terminal arrived during the complete time. The value "0" prevents the tun-
nel to be terminated, even if no ping is received any more.
In order to send a ping via ICMP protocol to a domain or an IP address
additionally, enter this into the entry field "Additional ICMP Ping to". It is
recommended to enter a domain name or IP address, which can only be
connected via the tunnel, here. If the ping is not successful, a possibly ex-
isting tunnel will be terminated, and a new tunnel will be established. The
ping interval is 15 minutes.
In order to configure the authentication with certificates, select the radio
button "Authentication based on certificate". It is indicated under the op-
tion here, whether the individual certificates and keys are present (green
checkmark) or not (red cross). Present certificates can also be downloaded
(blue arrow) or deleted again (red cross on white box). The private key can
only be deleted. Alternatively, or in addition to the usage of a client certifi-
cate and a private key, an user name/password combination can be used
for the authentication with the OpenVPN server (however, the CA certifi-
cate is required in any case, which must be possessed by every partici-
pant of this VPN). Enter a user name into the field "User name" as well as
the associated password into the field "Password" for this. In order to
check the certificate type of the remote terminal, check the checkbox
"Check remote certificate type".
75