RACOM M!DGE, Руководство по эксплуатации

Страница: 42 / 113

OpenVPN Configuration (Server Expert Configuration)
This configuration mode lets you run an OpenVPN server on M!DGE/MG102. The configuration upload
takes a zip file which may include one or more OpenVPN server configurations.
Typically such a zip file includes files such as:
• server.conf (The client configuration file, referring to)
• ca.crt (OpenVPN root certificate file)
• server.crt (OpenVPN client certificate file)
• server.key (OpenVPN private key file)
• dh1024.pem (Diffie hellman parameters)
• A directory (with default name “ccd”) containing client-specific configuration files
To configure multiple server processes (i.e. multiple *.conf files each referring to its certificates) you
should place all files belonging to a single tunnel/process into a subfolder or make sure that there are
no naming conflicts.
If OpenVPN is enabled and the configuration mode is set to “server expert configuration” all configura-
tions (*.conf) will be started after M!DGE/MG102 startup.
Consider the following points when running OpenVPN without having established a mobile connection:
• Configure a Default Route to the Ethernet Interface / LAN.
• Configure a time server (NTP) and make sure that it is available via the LAN.
• Manually configure a DNS server (on DHCP Server web page!) and make sure that it is available
via the LAN.
For further information and external OpenVPN documentation please see chapter the section called
“OpenVPN”.
IPsec
IPsec (IP security) is a suite of protocols for securing Internet Protocol (IP) communications by authen-
ticating and/or encrypting each IP packet in a data stream. IPsec also includes protocols for crypto-
graphic key establishment.
IPsec can be used to create Virtual Private Networks (VPN) and this is the dominant use.
GPRS/EDGE/UMTS routersM!DGE, MG102 – © RACOM s.r.o. 42
Configuration