Siemens LOGO! CMR2020, Руководство по эксплуатации

Страница: 101 / 178

Configuration (WBM)
5.11 Security
LOGO! CMR2020, LOGO! CMR2040
Operating Instructions, 10/2016, C79000-G8976-C356-03
101
File "vpnpeer.conf"
Below you will find the content of the configuration file exported from the CMR for the
OpenVPN client (communications partner of the CMR).
Note
Unencrypted configuration file: Encrypted transfer
The configuration file for the OpenVPN client is not encrypted. The pre-shared key is located
unencrypted in the file.
Only transfer the file encrypted to the partner, e.g. using HTTPS.
Table 5- 4 Content of the configuration file "vpnpeer.conf"
Original file Adapted file
dev tun0
disable-occ
# Please update your OpenVPN peer's address on
the next line
remote vpn.example.com 1194
ifconfig 10.8.0.1 10.8.0.2
nobind
keepalive 15 60
route 192.168.0.0 255.255.255.0
tun-mtu 1500
fragment 1371
mssfix 1282
persist-key
replay-window 512 15
cipher AES-128-CBC
auth SHA256
comp-lzo
verb 4
#key-direction 1
#<secret>
# Please insert your key here and uncomment these
lines
#</secret>
dev tun0
disable-occ
remote 192.168.229.29 1196
ifconfig 10.8.0.1 10.8.0.2
nobind
keepalive 15 60
route 192.168.0.0 255.255.255.0
tun-mtu 1500
fragment 1371
mssfix 1282
persist-key
replay-window 512 15
cipher AES-128-CBC
auth SHA256
comp-lzo
verb 4
key-direction 1
<secret>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
1a17c9b9737c0fd0b33eb540ba845340e2dad229b8d6fd9b82
f934563d8169843021d0bc1fcec0862d560b0917685cbe0315
7aa9cb952de7566dd43f120d7278c1d672dad724457eaed3c6
412a14434d9da2f97158465e95b711e68f1b80d681
ca4e3f3f6d7cdac38cc6dddfb74f23b175becbb6125093d41a
3af1456824760db3e46e0bc8d20539c7fc1a4111c7cdb57155
2c1a7bfd707848bbe3eca036e9a2092eea5d9041001bd07a3d
c0a8b6636fce42fc94b1446c283c24daa458460ef9ab8a18eb
b9c4791f45d87f11e0918f002bfbdbc955d74d7ffc7fa4bacd
6f15f10137ebde93b8219ae38ebae9b029e97cd79d204255f3
0a048865ffbb3eabb6b9-----END OpenVPN Static key
V1-----
</secret>
Notes:
•
This is the unchanged content of the file exported from
the CMR.
When using DynDNS, in this form, the file can be im-
ported into the OpenVPN client.
•
When exporting the file in this form, the pre-shared key
is still missing on the CMR. You still need to import the
pre-shared key at the client end (partner) and at the
server end (CMR).
Notes:
The content was adapted for the use of OpenVPN without
DynDNS:
•
The third commented line of the original file was deleted
and the address adapted in the next line.
• The second last commented out line of the original file
and the comments were deleted and the pre-shared key
added.