Tavve zoneranger User Manual page 382

Starting the OpenVPN Client Manually
If you prefer to run the OpenVPN client manually, copy the following files from the rgvi directory
on the Ranger Gateway install CD to the /etc/openvpn directory:
•
rgviClient.conf
•
rgviClient.crt
•
rgviClientWithPassword.key
•
tavveCA.crt
After the files have been copied, you will need to edit the rgviClient.conf file to specify the
list of Ranger Gateway candidates, as described above. Once this step has been completed, you can
run the OpenVPN client by executing the following commands:
cd /etc/openvpn
/usr/sbin/openvpn rgviClient.conf
The rgviClientWithPassword.key file is password-protected, so when OpenVPN is started,
you will
rgviClientWithPassword.p12
Note that the Ranger Gateway should be running and the RGVI service should be enabled and
configured to accept connections from this client before the RGVI client is started. You can verify
that the RGVI client has successfully started and connected to the RGVI service on the Ranger
Gateway by verifying that the IP address associated with RGVI client is listed in the output of the
following command (executed on the Ranger Gateway server):
/usr/tavve/gateway/bin/rgvi status
Starting the OpenVPN Client Automatically
If you prefer to have the OpenVPN client start automatically when the operating system is restarted,
copy the following files from the rgvi directory on the Ranger Gateway install CD to the
/etc/openvpn
•
rgviClient.conf
•
rgviClient.crt
•
rgviClientNoPassword.key
•
tavveCA.crt
After the files have been copied, you will need to edit the rgviClient.conf file to specify the
list of Ranger Gateway candidates, as described above. In addition, you will need to modify the
rgviClient.conf
used, because there is no way to provide a key file password when the client is started automatically.
Two changes are required:
3. Comment out the " key rgviClientWithPassword.key " line.
4. Uncomment the " # key rgviClientNoPassword.key " line.
Note that the " # " character denotes a comment line. The resulting two lines should be as follows:
# key rgviClientWithPassword.key
key rgviClientNoPassword.key
ZoneRanger 5.5 User's Guide
be prompted to enter
file is rgvi .
directory:
file to indicate that the rgviClientNoPassword.key key file should be
the password. The password for the default
382