NetModule NB3711, User Manual, Page: 94 / 214

NB3711 User Manual 4.0
Parameter OpenVPN Options
use compression Enable or disable LZO packet compression
use keepalive Can be used to send a periodic keepalive packet in order to
keep the tunnel up despite of inactivity
redirect gateway By redirecting the gateway, all packets will be directed to
the VPN tunnel. Please ensure that essential services (such
as DNS or NTP servers) can be reached at the network
behind the tunnel. In doubt, create an extra static route
pointing to the correct interface.
allow duplicates Allow multiple clients with the same common name to con-
currently connect.
verify certs Check peer certificate against local CRL.
negotiate DNS If enabled, the system will use the nameservers which have
been negotiated over the tunnel.
OpenVPN Expert Configuration (Client)
The expert configuration mode offers a straightforward way to configure a tunnel by
simply uploading a zip package containing the required configuration and optionally
key/certificate files. A client tunnel usually consists of the following files:
Parameter Client Expert Files
client.conf OpenVPN configuration file (see
http://www.openvpn.net
for available options)
ca.crt Root certificate authority file
client.crt Certificate file
client.key Private key file
client.p12 PKCS#12 file
ta.key TLS authentication key file
Please note that you may specify arbitrary file names, however, the configuration file
suffix must be
.conf
and all files referred in the configuration file must correspond to
relative path names.
OpenVPN Expert Configuration (Server)
A server tunnel typically requires the following files:
94