User`s guide

221
OpenVPN can be used for connecting to the router for secure management as well as access
to services on the LAN side of the TransPort router, such as corporate messaging services,
file servers and print servers for example.
OpenVPN is a full-featured SSL VPN which implements OSI layer 2 or 3 secure network
extension using the industry standard SSL/TLS protocol, supports flexible client
authentication methods based on certificates, smart cards, and/or username/password
credentials, and allows user or group-specific access control policies using firewall rules
applied to the VPN virtual interface. OpenVPN is not a web application proxy and does not
operate through a web browser.
The Digi TransPort implementation of OpenVPN can be configured as an OpenVPN server
(shown above) or as an OpenVPN client, connecting to an OpenVPN server.
On TransPort firmware, OpenVPN has been implemented as an interface. That means that
when an OpenVPN tunnel connects, an interface is added to the routing table. Static routes
may be configured to point to an OpenVPN instance, and additionally, OpenVPN may learn
routes from the tunnel peer and add these routes to the routing table for the duration of the
OpenVPN tunnel. As each tunnel appears just like an interface, support for features like the
firewall, NAT, IGMP etc are the same as for other interfaces like PPP and ETH.
OpenVPN n
Configuration - Network > Virtual Private Networking (VPN) > OpenVPN >
OpenVPN n
Description
The text string is a friendly name to help identify this OpenVPN instance.
IP address a.b.c.d
This must be specified correctly. OpenVPN interfaces use a 30 bit mask, the first address is
the network address, the 2
nd
is the server address, the 3
rd
is the client address, the 4
th
is
the broadcast address. This address must be configured as the 2
nd
IP address in the block
of 4. For example 192.168.0.1 if configured as a server, or 192.168.0.2 if configured as a
client.
Destination host a.b.c.d
Only required when configured as an OpenVPN client. This is the IP address of the
OpenVPN server.