Grandstream Networks GWN7000 User Manual page 86

Protocol
Interface
Local Port
Destination
•
PSK: used to establish a point-to-point OpenVPN®
configuration. A VPN tunnel will be created with a server
endpoint of a specified IP and a client endpoint of specified
IP. Encrypted communication between client and server will
occur over UDP port 1194, the default OpenVPN® port.
•
SSL: Authentication is made using certificates only (no
user/pass authentication). Each user has a unique client
configuration that includes their personal certificate and key.
This is useful if clients should not be prompted to enter a
username and password, but it is less secure as it relies
only on something the user has (TLS key and certificate).
•
User Auth: Authentication is made using only CA, user and
password, no certificates. Useful if the clients should not
have individual certificates.
Less secure as it relies on a shared TLS key plus only
something the user knows (Username/password).
•
SSL + User Auth: Requires both certificate and username
/ password. Each user has a unique client configuration that
includes their personal certificate and key.
Most secure, as there are multiple factors of authentication
(TLS Key and Certificate that the user has, and the
username/password they know).
Choose the Transport protocol from the dropdown list, either TCP or
UDP. The default protocol is UDP.
Select the interface used to connect the GWN7000 to the uplink,
either WAN1, WAN2 or All.
Configure the listening port for OpenVPN® server.
The default value is 1194.
Choose to which destination group or WAN to allow traffic from the
VPN, this will generate automatically a forwarding rule under the
menu Firewall → Traffic Rules → Forward.
GWN7000 User Manual
Version 1.0.6.28
P a g e |
86