MoRoS LAN PRO 2.0
Functions
43
12.3.3
Configuring OpenVPN Server
Configuring an OpenVPN Server with or without authentication
In the following, you will find a description of how to configure the MoRoS LAN PRO
2.0 as VPN server. How to configure the VPN server of the MoRoS LAN PRO 2.0
without authentication or with one of the two supported authentication methods
(certificate-based or by static key):
Configuring the OpenVPN server with certificate-based authentication
In order to configure an OpenVPN server with certificate-based authentica-
tion, you must first create Diffie-Hellman parameters, (CA) certificates and
keys. Afterwards, you can configure the VPN server and clients using the
created files. The created files and keys must then be distributed on the
server and the clients according to the figure below. Moreover, it is possible
to upload a Certificate Revocation List to the MoRoS LAN PRO 2.0. More in-
formation regarding the use and creation of certificates can be found on
the OpenVPN web site: http://openvpn.net/howto.html
Figure 7: OpenVPN with certificates
Creating a CA certificate structure (in Windows)
How to create a CA certificate structure for the MoRoS LAN PRO 2.0 VPN
server and the VPN clients, which must be loaded to all participants in the
OpenVPN network.
You have downloaded and installed the OpenVPN packet (version >= 2.0.9)
from the INSYS web site (www.insys-tec.de/en/en/driver). The installation
of the RSA scripts and an SSL installation are important.
The time of the MoRoS LAN PRO 2.0 is correct (certificates have a validity
date).
