Cradlepoint IBR600 User Manual page 43

User Manual / IBR600/IBR650
OPEN VPN
OpenVPN is an open source software application that implements virtual private network (VPN) techniques
for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote
access facilities.
NOTE: OpenVPN requires a feature license not included with ECM Prime. Go to SYSTEM > Administration >
Feature Licenses to enable this feature.
Once you have a valid feature license, click Add to create a new OpenVPN tunnel. Click Edit to make changes to
an existing tunnel.
Add/Edit Tunnel – General
• Tunnel Name – Enter a name to uniquely
identify this tunnel
• Tunnel Mode – Select which mode this tunnel
endpoint is required to be. Choose from the
following:
• Client
• Server
• Device Type - Select between Routed (TUN)
or Bridged (TAP) virtual device.
• Routed creates an interface that can
be used in the Zone Firewall and is fully
routable.
• Bridged creates a network interface that
can be assigned to a LAN under the Local
Networks configuration. This interface
is managed through the assigned LAN
device.
• Local Endpoint - Enter the IP Address of the
LNS (tunnel server) peer
• Local Netmask – Enter the Netmask of the LNS (tunnel server) peer
• Remote Endpoint – Enter the IP Address of the LNS (tunnel server) peer
• Remote Netmask – Enter the Netmask of the LNS (tunnel server) peer
• Support IPv6 Tunnels – Allow IPv6 traffic to be forwarded over this tunnel. If you select this option, also
input an IPv6 Tunnel Address and Tunnel Prefix Length for IPv6
• Tunnel Protocol – Choose UDP or TCP
• Port – Specify the port if desired
• Ping – (Displays if the Configuration Mode is Advanced) If no packets have been sent in the amount of
time entered, a ping is sent to the remote endpoint
• Ping Restart – (Displays if the Configuration Mode is Advanced) If no pings have been received in the
amount of time entered, OpenVPN restarts the tunnel
• Tunnel Enabled – Click to enable/disable this tunnel
Add/Edit Tunnel – Security
• Cipher – Encrypt packets with the selected algorithm. The default is BF-CBC, an abbreviation for Blowfish
in Cipher Block Chaining mode. Blowfish has the advantages of being fast, very secure, and allowing key
sizes of up to 448 bits. Blowfish is designed to be used in situations where keys are changed infrequently.
©2015 Cradlepoint. All Rights Reserved.
11/5/15
| +1.855.813.3385 | cradlepoint.com
43