Billion M500 User Manual page 142

Netmask: Set the tunnel virtual subnet mask.
Local Access Range
IP Address: Set the local network address.
Netmask: Set the local subnet mask.
Protocol: OpenVPN can run over User Datagram Protocol (UDP) or Transmission Control Protocol
(TCP) transports. Select the protocol.
Local Certificate Index: Select the local certificate. Please Edit certificates in Maintenance >>
Certificate Management. OpenVPN mutually authenticate each other based on certificates and CA. If
not edited first, only Default(the embedded certificate) is listed.
Trusted CA Index: Select the trusted CA. Please Edit certificates in Maintenance >> Certificate
Management.
Cryptographic Suite
Cipher: OpenVPN uses all the ciphers available in the OpenSSL package to encrypt both the data
and channels. Select the encryption method.
Hash: To establish the integrity of the datagram and ensures it is not tampered with in transmission.
There are options: Message Digest 5 (MD5) and Secure Hash Algorithm (SHA1, SHA256). SHA1 is
more resistant to brute-force attacks than MD5. However, it is slower.
Compression: Choose adaptive to use the LZO compression library to compress the data stream.
Keepalive: Enable to allow the router to check the connectivity to the peer every 10 seconds (can be
changed based on need) by sending ping package to keep the OpenVPN tunnel active.
Interval: This period between Pings is set to monitor the connection status. Default interval setting is
10 seconds. Time interval can be set from 0 to 3600 second.
Timeout: Restart if receiving no response until the timeout period expires, by default, 120s.
Click Save to submit your OpenVPN Server basic settings.
138