NBB-800
User Manual for NRSW version 4.5.0.100
The following further options can be applied:
Parameter
OpenVPN Options
use compression
Enable or disable LZO packet compression
use keepalive
Can be used to send a periodic keepalive packet in order to keep the
tunnel up despite of inactivity
redirect gateway
By redirecting the gateway, all packets will be directed to the VPN
tunnel. Please ensure that essential services (such as DNS or NTP
servers) can be reached at the network behind the tunnel. In doubt,
create an extra static route pointing to the correct interface.
allow duplicates
Allow multiple clients with the same common name to concurrently
connect.
verify certs
Check peer certificate against local CRL.
negotiate DNS
If enabled, the system will use the nameservers which have been
negotiated over the tunnel.
OpenVPN Expert Configuration (Client)
The expert configuration mode offers a straightforward way to configure a tunnel by simply uploading
a zip package containing the required configuration and optionally key/certificate files. A client tunnel
usually consists of the following files:
Parameter
Client Expert Files
client.conf
OpenVPN configuration file (see
for avail-
able options)
ca.crt
Root certificate authority file
client.crt
Certificate file
client.key
Private key file
client.p12
PKCS#12 file
ta.key
TLS authentication key file
Please note that you may specify arbitrary file names, however, the configuration file suffix must be
.conf
and all files referred in the configuration file must correspond to relative path names.
97
