Functions
MLR 3G 2.0
10.5
VPN
10.5.1
VPN General
A VPN (virtual private network) is used to connect IP end devices or entire networks with
each other, in a safe way. The data is transmitted tamper-proof to a destination and can
not be read by third parties.
You can configure the MLR 3G 2.0 for an OpenVPN, PPTP or IPsec connection.
The exact proceeding for creating a certificate structure and configuring a VPN partici-
pant is described in a series of configuration guides. These are available from our website
(http://www.insys-tec.de/en/home) or our support team ([email protected]).
10.5.2
OpenVPN General
You can use the MLR 3G 2.0 as OpenVPN server or OpenVPN client. This is independent
from the type of connection setup (dial-in or dial-out).
Figure 6 shows a sample VPN configuration. One MLR 3G 2.0 is configured as OpenVPN
server and a second MLR 3G 2.0 as OpenVPN client here. Client as well as server can be
replaced by any OpenVPN-capable devices. In the example, a PPP connection between
the two devices exists. Via this PPP connection, an OpenVPN connection is established.
As soon as a PPP connection has been established via the functions dial-in or dial-out, IP
connections between the two networks can be established. OpenVPN uses an existing
PPP connection to establish a VPN tunnel within this PPP connection. This tunnel consists
of one single IP connection. OpenVPN will make a virtual network card available for send-
ing data traffic.
Figure 6: OpenVPN network and IP addresses in the sample configuration
In the sample configuration, the end points of the OpenVPN connection will have the IP
addresses 10.1.0.1 and 10.1.0.2. The VPN tunnel will be established within an already
existing PPP connection. The OpenVPN clients and servers must also know which net-
work is located behind the according VPN tunnel end. The networks behind the ends are
the target networks, to which data is supposed to be sent. In the sample configuration,
48
