INSYS MoRoS GPRS 2.1 PRO, Manual

Page: 76 / 144

Functions MoRoS GPRS 2.1 PRO
In order to configure the authentication with static key, select the radio
button "No authentication or authentication with preshared key". It is indi-
cated under the option here, whether the static key is present (green
checkmark) or not (red cross). A present key can also be downloaded
(blue arrow) or deleted again (red cross on white box). If no key exists, the
remote terminal will neither be authenticated nor the data traffic through
the OpenVPN tunnel will be encrypted. You can also generate a new static
key using the "Generate a new static key" link. This static key must then
be downloaded and also uploaded to the remote terminal. Enter the IP ad-
dress of the local tunnel end into the "IP address of VPN tunnel local" field
and the IP address of the remote tunnel end into the "IP address of VPN
tunnel remote" field. Enter the address as well as the associated netmask
of the network behind the OpenVPN tunnel into the "Netaddress of net-
work behind the VPN tunnel" and "Netmask of network behind the VPN
tunnel" fields.
In order to confirm all settings made above, click on "OK".
In order to upload a certificate or key, click in the section "Upload key or
certificates" on the "Browse..." button (button depends on the used
browser). Then, select in the "Upload file" window the desired file on the
respective data carrier and click on the "Open" button. If the file is en-
crypted, you must also enter the password into the "Password (only with
encrypted file)" field. Click on "OK" then to upload the file.
12.6.5 PPTP General
PPTP (Point-to-Point Tunnelling Protocol) is a VPN (virtual private network) that is
not recommended for new installations. A recent alternative is OpenVPN.
PPTP establishes a PPP connection via a tunnel set-up with the GRE protocol. To
establish the tunnel, it is essential that the GRE protocol is routed without restric-
tions between the two PPTP participants and a TCP connection with port 1723 is
possible. The TCP port 1723 is fix and cannot be modified. The GRE protocol is not
always routed directly in the Internet. In this case, NAT can prevent to establish a
tunnel, if performed.
We strongly recommend to use as long as possible passwords with special charac-
ters and the encryption method MPPE-128 Bit.
76