Administration Of The Client Bundle; Generating The Client Bundle - Brocade Communications Systems 5600 Reference Manual

Linux client bundle
The Brocade SSL-VPN client bundle is distributed as part of the installation wizard and includes the
following:
• Latest version of the SSL-VPN client software (a virtual network device driver)
• SSL-VPN client configuration file
• Required TLS CA certificate
The Brocade SSL-VPN client software includes an easy-to-use GUI for the end user to maintain the
SSL-VPN connection. The installation wizard is distributed as an executable (.exe) file.
Linux client bundle
The Linux SSL-VPN client bundle is a .zip archive that holds an OpenVPN configuration file and the
required TLS CA certificate of the server. The TLS CA certificate is intentionally not compatible with
the configuration because some certificates have already been released and are currently being used.
The Network Manager applets for Linux require that the TLS CA certificate is a file that is separate
from the image.
OS X client bundle
The OS X SSL-VPN client bundle is a generic OpenVPN-formatted configuration file (.ovpn) with the
TLS CA certificate included. This file is imported onto the OS X operating system of OpenVPN clients
and allows the user to use the imported VPN connection profile.

Administration of the client bundle

This section covers the setup and administration of the SSL-VPN client bundle on the Brocade
vRouter.
•

Generating the client bundle

• Authentication of the client bundle
• Service-User web portal
• Maintenance of SSL-VPN client bundles
• Deploying the SSL-VPN client bundle
Generating the client bundle
The following example shows how configure the generation of the SSL-VPN client bundle after using
the interfaces openvpn commands.
TABLE 17 Configuring the generation of the client bundle
Step
Configure the OpenVPN tunnel interface for authentication.
See Authentication of the client bundle
Configure the path to the file that contains the TLS CA certificate,
which is part of the client bundle.
40
on page 40
on page 42
on page 44
Command
vyatta@vyatta# set interfaces openvpn vtunX auth ...
on page 42.
vyatta@vyatta# set interfaces openvpn vtunX tls ca-
cert-file filename_of_the_TLS_CA_certificate
on page 44
on page 45
Brocade 5600 vRouter OpenVPN Reference Guide
53-1003719-03