User Manual

VIVOTEK - Built with Reliability
140 - User's Manual
With a remote VAST2 instance that needs to access the NVR via the Internet, you can enter
its public IP address and credentials. The NVR runs an Open VPN client that makes remote
connection via the RESTful (Repretational State Transfer) API (Application Programming
Interface) service to a VPN server running on the remote site. The applicable service port
number ranges from 1 to 65534. Default is 3443. The NVR automatically registers with CA cert
key and becomes with sub-station over a VPN tunnel. Once set, the VAST2 can automatically
connects the NVR.
A public IP or domain name must be congured on the VAST server for the access through the
Internet. The IP or domain name can contain alpha-numeric characters [0-9][a-z][A-Z][-]. [-] can
not be the beginning or the ending character.
Note that on the side of the VAST server making connection via the OpenVPN, the server/client
conguration should be properly congured. On the mobile NVR, a proper gateway setting
should be made for VPN connection.
For the server conguration, the conguration le is placed in:
C:\Program Files (x86)\VIVOTEK Inc\VAST\Server\OpenVPN\cong\server\server.ovpn
You can edit your VPN IP subnet parameters according to your network conguration. The
contents of the editable text le looks like this:
port 3939
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
server 10.6.0.0 255.255.0.0
topology subnet
client-to-client
client-cong-dir "C:\\Program Files (x86)\\VIVOTEK Inc\\VAST\\Server\\OpenVPN\\
ccd"
keepalive 10 30
cipher AES-256-CBC
max-clients 50000
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 3
mute 20
sndbuf 262144
rcvbuf 262144
tls-server