Geneko GWG, Руководство пользователя

Страница: 137 / 158

137
User Manual
GWG Gateway
OpenVPN tunnel between GWG Gateway and OpenVNP server
Overview
OpenVPN site to site allows connecting two remote networks via point–to–point encrypted tunnel.
OpenVPN implementation offers a cost–effective simply configurable alternative to other VPN technologies.
OpenVPN allows peers to authenticate each other using a pre–shared secret key, certificates, or
username/password. When used in a multiclient–server configuration, it allows the server to release an
authentication certificate for every client, using signature and Certificate authority. It uses the OpenSSL
encryption library extensively, as well as the SSLv3/TLSv1 protocol, and contains many security and control
features. The server and client have almost the same configuration. The difference in the client configuration
is the remote endpoint IP or hostname field. Also the client can set up the keepalive settings. For successful
tunnel creation a static key must be generated on one side and the same key must be uploaded on the
opposite side.
OpenVPN configuration example
Open VPN is established between one central locations and three remote locations with GWG Gateway
configured in TCP client mode. Authentication used is pre-shared key.
Figure
126
– Multipoint OpenVPN topology
Configuration
1. Open VPN server is in TCP listening mode and it is reachable from the internet over static public IP
address 134.45.22.1 and TCP port 1194 (default Open VPN port)
2 Configuration file in Open VPN server is applied in following way:
a) Open any Text Editor application and make configuration txt file.
In this example configuration file looks like this