NetModule NB3710, Руководство пользователя

Страница: 95 / 211

NB3710 User Manual 4.0
Parameter Server Expert Files
server.conf OpenVPN configuration file
ca.crt Root certificate authority file
server.crt Certificate file
server.key Private key file
dh1024.pem Diffie-Hellman parameters file
ccd A directory containing client-specific configuration files
Keep in mind that a certificate becomes valid once its validity time has been reached,
thus an accurate system has to be set prior to creating certificates and establishing a
tunnel connection. Please ensure that all NTP servers are reachable. Using host names
also requires a working DNS server.
Client Management
Once you have successfully set up an OpenVPN server tunnel, you can manage and
enable clients connecting to your service. Currently connected clients can be seen on
this page, including the connect time and IP address. You may kick connected clients
by disabling them.
In the Networking section you can specify a fixed tunnel endpoint address for each client.
Please note that, if you intend to use a fixed address for a particular client, you would
have to apply fixed addresses to the other ones as well.
You may specify the network behind the clients as well as the routes to be pushed to each
client. This can be useful for routing purposes, e.g. in case you want to redirect traffic
for particular networks towards the server. Routing between the clients is generally not
allowed but you can enable it if desired.
Finally, you can generate and download all expert mode files for enabled clients which
can be used to easily populate each client.
Operating in server mode with certificates, it is possible to block a specific client by
revoking a possibly stolen client certificate (see
5.8.8 );
95