3. CONFIGURATION
******************** server cert *************************************
openssl genrsa -des3 -passout pass:router -out private/server.pem 2048
openssl req -new -key private/server.pem -out tmp/server.req
openssl x509 -req -days 7305 -sha1 -extensions v3_req -CA ca.crt -CAkey
private/ca.key -in tmp/server.req -CAserial ca.srl -CAcreateserial
-out server.crt
******************** client cert **************************************
openssl genrsa -des3 -passout pass:router -out private/client.pem 2048
openssl req -new -key private/client.pem -out tmp/client.req
openssl x509 -req -days 7305 -sha1 -extensions v3_req -CA ca.crt -CAkey
private/ca.key -in tmp/client.req -CAserial ca.srl -CAcreateserial
-out client.crt
The IPsec function supports the following types of identifiers (ID) for both sides of the
tunnel,
Remote ID
and
Local ID
parameters:
•
IP address (for example, 192.168.1.1)
•
DN (for example, C=CZ,O=Conel,OU=TP,CN=A)
•
FQDN (for example, @director.conel.cz) –
the @ symbol proceeds the FQDN.
•
User FQDN (for example, [email protected])
The certificates and private keys have to be in the PEM format. Use only certificates containing
start and stop tags.
The random time, after which the router re-exchanges new keys is defined as follows:
Lifetime - (Rekey random value in range (from 0 to Rekey margin * Rekey Fuzz/100))
The default exchange of keys is in the following time range:
•
Minimal time: 1h - (9m + 9m) = 42m
•
Maximal time: 1h - (9m + 0m) = 51m
We recommend that you maintain the default settings. When you set key exchange times
higher, the tunnel produces lower operating costs, but the setting also provides less security.
Conversely, when you reducing the time, the tunnel produces higher operating costs, but
provides for higher security.
The changes in settings will apply after clicking the
Apply
button.
67
Содержание B+B SmartWorx LR77 v2
Страница 1: ...Configuration Manual for v2 Routers ...
Страница 18: ...2 STATUS WiFi Scan output may look like this Figure 4 WiFi Scan 11 ...
Страница 29: ...3 CONFIGURATION Figure 12 Example 1 LAN Configuration Page 22 ...
Страница 34: ...3 CONFIGURATION Figure 19 Example of VRRP configuration backup router 27 ...
Страница 42: ...3 CONFIGURATION Figure 20 Mobile WAN Configuration 35 ...
Страница 50: ...3 CONFIGURATION Figure 24 WiFi Configuration 43 ...
Страница 75: ...3 CONFIGURATION Figure 36 IPsec Tunnels Configuration 68 ...
Страница 105: ...3 CONFIGURATION Figure 54 Expansion Port Configuration 98 ...
Страница 110: ...3 CONFIGURATION Figure 59 Example 2 USB port configuration 103 ...
