Seneca Z-PASS1, Руководство пользователя

Страница: 95 / 155

USER MANUAL – Z-PASS1/Z-PASS2
95
The “VPN Files” section lets you load the files needed to configure Open VPN and establish a secure VPN
connection on the Z-PASS; these files are described in the following.
18.7.1.1 Configuration File
This file shall contain all the information needed to configure the Open VPN behaviour; the main
configuration options are
13
:

if Z-PASS shall act as a client or a server (typically, it will be a client)

the transport protocol (UDP or TCP)

the server IP address/host name and port

the files needed to perform authentication procedures

etc.
This file has the .ovpn extension (in Windows systems) or .conf extension (in Linux systems); regardless of
the original name, it will be renamed as ovpn.conf on the Z-PASS.
This is the only mandatory file, that is if this file has not been loaded on the Z-PASS, VPN can’t be enabled.
As reminded in the web page, in options requiring a file argument, only the file name shall be given, with
no path, as in the following example:
ca ca.crt
OK
ca /home/config/vpn/ca.crt
KO !
Other two important rules that shall be followed are:

the “dev” option shall be: “
dev tun0
” or “
dev tap0
”

the “log” option shall be omitted (so that, logs are written to syslog)
An example of a client configuration file is given in paragraph 18.7.1.7.
18.7.1.2 CA certificate
This file shall contain the Certification Authority (CA) certificate and has the .crt extension.
It is needed when the configuration file contains the “ca” option.
18.7.1.3 Client certificate
This file shall contain the client certificate and has the .crt extension.
It is needed when the configuration file contains the “c ert ” option.
18.7.1.4 Client key
This file shall contain the client key and has the .key extension.
It is needed when the configuration file contains the “key” option.
13
For more information about configuration options, please refer to the OpenVPN web page (“openvpn.net”).