MB Connect Line mbNET MDH 810, Руководство пользователя

Страница: 166 / 226

Page 166 of 226
Version: 3.3.5
– DR05 – 23.03.2017
VPN
– OpenVPN
19.3
Basics about OpenVPN 19.3.1
-OpenVPN basically works with two tunnel IP addresses, i.e. each connection has two IP addresses via which
the data traffic is processed.
- Depending on the authentication method, OpenVPN either works in point-to-point mode (with static key or no
authentication) or in server/client mode (with X.509 certificates).
- OpenVPN can use three different authentication methods:

None : No certificate or key is needed. Used primarily for testing the connection. The tunnel data is also
NOT encrypted.

Static key : A 1024-bit key as required by each peer is generated for the connection. Similar to the
password.

Certificates, X.509 : The following certificate variants are distinguished:

Each subscriber needs the same root CA and a personal certificate signed by the root CA.

Like 1, but with additional username/password verification.

Like 2, but without a personal certificate. In other words, subscribers only need a root CA and
username/password.
- OpenVPN can use an http proxy server as the outgoing connection. This is important for integration into
existing corporate networks with an Internet connection.
- The transmission protocol setting (UDP or TCP) can be freely selected with OpenVPN. The same applies
to the port numbers to be used for the transmission protocol.

The settings for various OpenVPN con-
nection scenarios are described below.

From the start page, click VPN in the nav-
igation bar on the left and OpenVPN in
the navigation bar at the top.

Click the button on the right to create an
OpenVPN connection.