Siemens LOGO! CMR2040 Operating Instructions Manual page 101

File "vpnpeer.conf"
Below you will find the content of the configuration file exported from the CMR for the
OpenVPN client (communications partner of the CMR).
Note
Unencrypted configuration file: Encrypted transfer
The configuration file for the OpenVPN client is not encrypted. The pre-shared key is located
unencrypted in the file.
Only transfer the file encrypted to the partner, e.g. using HTTPS.
Table 5- 4 Content of the configuration file "vpnpeer.conf"
Original file
dev tun0
disable-occ
# Please update your OpenVPN peer's address on
the next line
remote vpn.example.com 1194
ifconfig 10.8.0.1 10.8.0.2
nobind
keepalive 15 60
route 192.168.0.0 255.255.255.0
tun-mtu 1500
fragment 1371
mssfix 1282
persist-key
replay-window 512 15
cipher AES-128-CBC
auth SHA256
comp-lzo
verb 4
#key-direction 1
#<secret>
# Please insert your key here and uncomment these
lines
#</secret>
Notes:
This is the unchanged content of the file exported from
•
the CMR.
When using DynDNS, in this form, the file can be im-
ported into the OpenVPN client.
When exporting the file in this form, the pre-shared key
•
is still missing on the CMR. You still need to import the
pre-shared key at the client end (partner) and at the
server end (CMR).
LOGO! CMR2020, LOGO! CMR2040
Operating Instructions, 10/2016, C79000-G8976-C356-03
Adapted file
dev tun0
disable-occ
remote 192.168.229.29 1196
ifconfig 10.8.0.1 10.8.0.2
nobind
keepalive 15 60
route 192.168.0.0 255.255.255.0
tun-mtu 1500
fragment 1371
mssfix 1282
persist-key
replay-window 512 15
cipher AES-128-CBC
auth SHA256
comp-lzo
verb 4
key-direction 1
<secret>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
1a17c9b9737c0fd0b33eb540ba845340e2dad229b8d6fd9b82
f934563d8169843021d0bc1fcec0862d560b0917685cbe0315
7aa9cb952de7566dd43f120d7278c1d672dad724457eaed3c6
412a14434d9da2f97158465e95b711e68f1b80d681
ca4e3f3f6d7cdac38cc6dddfb74f23b175becbb6125093d41a
3af1456824760db3e46e0bc8d20539c7fc1a4111c7cdb57155
2c1a7bfd707848bbe3eca036e9a2092eea5d9041001bd07a3d
c0a8b6636fce42fc94b1446c283c24daa458460ef9ab8a18eb
b9c4791f45d87f11e0918f002bfbdbc955d74d7ffc7fa4bacd
6f15f10137ebde93b8219ae38ebae9b029e97cd79d204255f3
0a048865ffbb3eabb6b9-----END OpenVPN Static key
V1-----
</secret>
Notes:
The content was adapted for the use of OpenVPN without
DynDNS:
The third commented line of the original file was deleted
•
and the address adapted in the next line.
The second last commented out line of the original file
•
and the comments were deleted and the pre-shared key
added.
Configuration (WBM)
5.11 Security
101