Digi TransPort LR54, Руководство пользователя

Страница: 500 / 1113

Virtual Private Networks (VPN) OpenVPN
LR54 User Guide 500
The default is from 80 .
ii. Set the last address in the range limit:
(config vpn openvpn server name )> server_last_ip value
(config vpn openvpn server name )>
where value is a number between 1 and 255 . The number entered here will represent
the last client IP address. For example, if address is set to 192.168.1.1/24 and
server_last_ip is set to 99 , the last client IP address will be 192.168.1.80.
The default is from 80 .
6. (Optional) Set the port that the OpenVPN server will use:
(config vpn openvpn server name )> port port
(config vpn openvpn server name )>
The default is 1194 .
7. Determine the method of certificate management:
a. To allow the server to manage certificates:
(config vpn openvpn server name )> autogenerate true
(config vpn openvpn server name )>
b. To create certificates externally and add them to the server
(config vpn openvpn server name )> autogenerate false
(config vpn openvpn server name )>
The default setting is false .
c. If autogenerate is set to false:
i. Set the authentication type:
(config vpn openvpn server name )> authentication value
(config vpn openvpn server name )>
where value is one of:
n
cert : Uses only certificates for client authentication. Each client requires a
public and private key.
n passwd : Uses a username and password for client authentication. You must
create an OpenVPN authentication group and user. See Configure an OpenVPN
Authentication Group and User for instructions.
n
cert_passwd : Uses both certificates and a username and password for client
authentication. Each client requires a public and private key, and you must
create an OpenVPN authentication group and user. See
Configure an OpenVPN
Authentication Group and User for instructions.
ii. Paste the contents of the CA certificate (usually in a ca.crt file) into the value of the
cacert parameter: