OpenVPN

OpenVPN


OpenVPN is an open source virtual private network (VPN) product that offers a simplified security framework, modular network design, and cross-platform portability.

Status


Field Description

OpenVPN Information

 
  • Enable
Displays current OpenVPN settings is enable or disable.
  • Mode
Displays current working mode of OpenVPN.
  • Status
Displays the current VPN connection status.
  • Uptime
Displays the connection time since VPN is established.
  • Local Virtual IP
Displays the virtual IP address obtain from remote side.
   

OpenVPN Server Status

 
  • Common Name
Displays the common name of OpenVPN client.
  • Status
Displays the current VPN connection status.
  • Uptime
Displays the connection time since VPN is established.
  • Remote Virtual IP
Displays the virtual IP address of OpenVPN client. 
  • Remote IP
Displays the remote IP address of OpenVPN client.
  • Remote Port
Displays the remote port obtain of OpenVPN client.

 

General Settings


Field

Description
  • Enable
Check this box to enable OpenVPN tunnel.
  • Description
Enter a description for this OpenVPN tunnel.
  • Mode
Select from “P2P”, “Client” or “Server”.
  • Protocol
Select from “UDP”, “TCP Client” or “TCP Server”
  • Connection Type
Select from “TUN”, “TAP” which are two different kinds of device interface for OpenVPN. The difference between TUN and TAP device is that a TUN device is a point-to-point virtual device on network while a TAP device is a virtual device on Ethernet.
  • Server Address
Enter the IP address or domain of remote server.
  • Server Port
Enter the negotiate port on OpenVPN server.
  • Max Client
Allow max OpenVPN client connect to OpenVPN server.
  • Authentication Method
Select from "X.509", "Pre-shared", "Password", and "X.509 And Password".
  • Encryption Type
Select from "BF-CBC", "DES-CBC", "DES-EDE-CBC", "DES-EDE3-CBC", "AES-128-CBC", "AES-192-CBC" and "AES-256-CBC".
  • Username
Enter the username for authentication when selection from “Password” or “X.509 And Password”.
  • Password
Enter the password for authentication when selection from “Password” or “X.509 And Password”.
  • Local IP Address
Enter the local virtual IP address when select “P2P” and “OpenVPN Server” mode.
  • Remote IP Address
Enter the remote virtual IP address when select “P2P” mode.
  • Local Port
Specify the OpenVPN Server port, default is 1194.
  • Topology

Select the possible topology from “Subnet” and “Net30”

Subnet: The recommended topology for modern servers. Note that this is not the current default. Addressing is done by IP & netmask.

Net30: This is the old topology for support with Windows clients running 2.0.9 or older clients. This is the default as of OpenVPN 2.3, but not recommended for current use. Each client is allocated a virutal /30, taking 4 IPs per client, plus 4 for the server.

  • Subnet
Specify the subnet for the OpenVPN client. Default is 10.8.0.0
  • Subnet Netmask
Specify the subnet netmaks for OpenVPN client. Default is 255.255.255.0
  • TAP Bridge
Select the specified LAN that bridge with OpenVPN tunnel when select “TAP” connection type.
  • Renegotiate Interval
Enter the renegotiate interval if connection is failed.
  • Keepalive Interval
Enter the keepalive interval to check the tunnel is active or not.
  • Keepalive Timeout
Enter the keepalive timeout, once connection is failed it will trigger the OpenVPN reconnect.
  • Fragment
Enter the fragment size, 0 means disable.
  • Private Key Password
Enter the private key password for authentication when selection from “X.509” or “X.509 And Password”.
  • Output Verbosity Level
Enter the level of the output log and values.

 

Advanced Settings


Field

Description
  • Enable NAT
Check this box to enable NAT, the source IP of host behind router will be disguised before accessing the remote end.
  • Enable Default Gateway
Check this box to enable default gateway, all the data traffic will go through the VPN tunnel.
  • Enable PKCS#12
It is an exchange of digital certificate encryption standard, used to describe personal identity information.
  • Enable CRL
Check this box to enable CRL(Certificate Revocation List).
  • Enable Client to Client
Check this box to allow client to communicate with each other.
  • Enable Duplicate CN
Check this box allow multiple clients connect to the server with the same certificate/key files or common names.
  • Enable IP Persist
Check this box to keep the IP address unchanged.
  • Enable X.509 Attribute nsCertType
Require that peer certificate was signed with an explicit nsCertType designation of “server”.
  • Enable HMAC Firewall
Add additional layer of HMAC authentication on the top of the TLS control channel to protect against DoS attacks. 
  • Enable Compression LZO
Compress the data.
  • Additional Configurations
Enter some other options of OpenVPN in this field. Each expression can be separated by a ‘,’.

 

X.509 Certificate


Field

Description
  • OpenVPN Mode
Select OpenVPN working mode between Server and Client. 
  • Connection Index
Displays the current connection index for OpenVPN channel.
  • CA Certificate
Import CA certificate file.
  • Local Certificate File
Import Local Certificate file.
  • Local Private Key
Import Local Private Key file. 
  • DH File
Import DH file when works as OpenVPN server. 
  • HMAC Firewall Key
Import HMAC Firewall Key file.
  • Pre-shared Key
Import the pre-shared key file.
  • PKCS#12 Certificate
Import PKCS#12 Certificate.
  • User-Password File
Import the username and password file when import the OpenVPN client file.
  • Private Key Password File
Import the private key password file when import the OpenVPN client file.
  • CRL File
Import CRL file. 

 

Configuration Files


Field

Description
  • Connection Index
Select OpenVPN connection index. 
  • Configuration Files
Import the OpenVPN client file.
  • Configuration Files Download
Download the OpenVPN client configuration.
  • Configuration Files List
Display the imported OpenVPN client file.

Page Contents