INSYS MoRoS GPRS 2.1 PRO, Руководство пользователя

Страница: 73 / 144

MoRoS GPRS 2.1 PRO Functions
In order to configure the authentication with static key, select the radio
button "No authentication or authentication with preshared key". It is indi-
cated under the option here, whether the static key is present (green
checkmark) or not (red cross). A present key can also be downloaded
(blue arrow) or deleted again (red cross on white box). If no key exists, the
remote terminal will neither be authenticated nor the data traffic through
the OpenVPN tunnel will be encrypted. You can also generate a new static
key using the "Generate a new static key" link. This static key must then
be downloaded and also uploaded to the remote terminal. Both OpenVPN
remote terminals must have the same static key that a tunnel is functional
with this authentication type. Enter the IP address or the domain name of
the remote terminal into the "IP address or domain name of remote site"
field. You can enter the IP address or the domain name of an alternative
remote terminal into the "Alternative remote site" field. Enter the IP ad-
dress of the local tunnel end into the "IP address of VPN tunnel local" field
and the IP address of the remote tunnel end into the "IP address of VPN
tunnel remote" field. Enter the address as well as the associated netmask
of the network behind the OpenVPN tunnel into the "Netaddress of net-
work behind the VPN tunnel" and "Netmask of network behind the VPN
tunnel" fields.
In order to confirm all settings made above, click on "OK".
In order to upload a certificate or key, click in the section "Upload key or
certificates" on the "Browse..." button (button depends on the used
browser). Then, select in the "Upload file" window the desired file on the
respective data carrier and click on the "Open" button. If the file is en-
crypted, you must also enter the password into the "Password (only with
encrypted file)" field. Click on "OK" then to upload the file.
12.6.4 Setting Up an OpenVPN-Client
You can use the MoRoS GPRS 2.1 PRO as OpenVPN client, if you want to connect
to an OpenVPN server via an unsecured network. This section describes the set-up
of an OpenVPN client. The basic settings of the MoRoS GPRS 2.1 PRO are reason-
able factory defaults, which you need to adjust to the VPN which will be connected
to the MoRoS GPRS 2.1 PRO. Here, you define with which IP address or domain and
via which ports the OpenVPN tunnel is established, and if the OpenVPN transmis-
sion is performed with the UDP or the TCP protocol. Moreover, you can specify
here, whether a default route is set, the local address and the port are fixed, the re-
mote terminal may change its IP address, LZO compression is used, packets are
masked before tunnelling, which encryption algorithm is used during transmission,
how big the tunnel packets are to be, and in which time intervals the OpenVPN cli-
ent of the MoRoS GPRS 2.1 PRO sends VPN pings to the server. In addition, you will
have the option to display the OpenVPN status, the current configuration file, a con-
figuration for an OpenVPN remote terminal (the OpenVPN sever) and a log of the
last connection.
73