NB3000-Line-Hd User Manual 4.2
The following further options can be applied:
Parameter
OpenVPN Options
use compression
Enable or disable LZO packet compression
use keepalive
Can be used to send a periodic keepalive packet in order to
keep the tunnel up despite of inactivity
redirect gateway
By redirecting the gateway, all packets will be directed to the
VPN tunnel. Please ensure that essential services (such as DNS
or NTP servers) can be reached at the network behind the tun-
nel. In doubt, create an extra static route pointing to the cor-
rect interface.
allow duplicates
Allow multiple clients with the same common name to concur-
rently connect.
verify certs
Check peer certificate against local CRL.
negotiate DNS
If enabled, the system will use the nameservers which have
been negotiated over the tunnel.
OpenVPN Expert Configuration (Client)
The expert configuration mode offers a straightforward way to configure a tunnel by simply
uploading a zip package containing the required configuration and optionally key/certificate
files. A client tunnel usually consists of the following files:
Parameter
Client Expert Files
client.conf
OpenVPN configuration file (see
for
available options)
ca.crt
Root certificate authority file
client.crt
Certificate file
client.key
Private key file
client.p12
PKCS#12 file
ta.key
TLS authentication key file
Please note that you may specify arbitrary file names, however, the configuration file suffix
must be
.conf
and all files referred in the configuration file must correspond to relative path
names.
100
