Table of Contents
Advertisement
Configuration (WBM)
4.15 Security
● Key exchange time (s)
Maximum time for the TLS key exchange after initializing the handshake.
Permitted range: 0 to 65535 s. Default: 60 s. If you enter 0 (zero), the function is
deactivated.
Note that 60 seconds with bad connection quality may not be adequate.
● Keepalive monitoring time (s)
If the partner does not respond to the keep alive frame of the RTU or another frame
within the keepalive monitoring time, the RTU aborts the connection and attempts to
reestablish it.
If the OpenVPN server is reached using its DNS name then along with the monitoring
frame a new DNS resolution is performed. In particular when the server uses a DynDNS
service and occasionally changes the IP address increasing the monitoring time can
make sense.
● Renewal interval for session key (s)
Interval (seconds) at which the session key is exchanged with the server.
Permitted range: 0 to 65535 s. Default: 3600 s. If you enter 0 (zero), the function is
deactivated.
This interval can be set on the server and client. If the configured values differ the shorter
interval is used.
● Compression procedure LZO
To increase the transmission speed in the VPN tunnel with compression, you can select
the following options:
– None
– LZO
– Adaptive
Below you can load the certificates and keys individually or alternatively as a common PEM
file from the OpenVPN server.
CA certificate
Here you import the CAA certificate generated by the certification authority (CA).
128
There is no compression is used.
Compression procedure that compresses all data.
Adaptive compression with which the OpenVPN stack regularly checks the
compression. When the effect of the compression is slight, the compression is turned
off and activated again in a later check.
Operating Instructions, 09/2017, C79000-G8976-C382-04
RTU3030C
Advertisement
Table of Contents
