D-Link DSR-150 User Manual page 151

Section 7 - VPN
Field
OpenVPN
Mode
VPN Network
VPN Netmask
Duplicate CN
Port
Tunnel Protocol
Encryption Algorithm Select the encryption algorithm from the drop-down menu.
Hash Algorithm
Tunnel Type
Client to Client
Communication
User Based Auth
Certificate Verification
Certs Profile
TLS Authentication Key
TLS Key
Invalid Client
Certificates
CRL Certificates
Save
Cancel
D-Link DSR-Series User Manual
Click On/Off button to start or stop the OpenVPN process. By default, this option is disabled.
Select Server.
Enter the IP network for the VPN.
Enter the netmask.
Toggle On to allow a same certification for multiple clients.
Enter what port to use. The default port is 1194.
Select either TCP or UDP.
Select the hash algorithm from the drop-down menu. The options are SHA1, SHA256, SHA512.
Select either Full Tunnel or Split Tunnel. Full Tunnel mode just sends all traffic from the client across the
VPN tunnel to the router. Split Tunnel mode only sends traffic to the private LAN based on pre-specified
client routes. If you select Split Tunnel, refer to "Local Networks" on page 147 to create local networks.
Enable this field to allow openvpn clients to communicate with each other in split tunnel case. By default,
it is disabled.
This option is introduced to provide the additional authentication method using username/password.
Disabled by default.
This method does not require the client certificate, client will authenticate using the username/password
only. Enabled by default.
Select the profile which has list certificates uploaded for the configured mode server/client. By default,
the default profile will be selected which has both server and client certificates.
Enabling this adds Tls authentication which adds an additional layer of authentication. Can be checked
only when the tls key is uploaded. Disabled by default.
Select the type of tls certificate name.
Enabling this adds facility to block invalid client certificate. This feature requires crl certificate which
contains list of client certificates to be blocked. Please upload crl certificate in OpenVPN Authentication
page. Disabled by default
Select the type of crl certificate name.
Click Save to save and activate your settings.
Click Cancel to revert to previous settings.
Description
137