Vivotek ND9541P User Manual page 152

VIVOTEK - Built with Reliability
With a remote VAST2 instance that needs to access the NVR via the Internet, you can enter
its public IP address and credentials. The NVR runs an Open VPN client that makes remote
connection via the RESTful (Repretational State Transfer) API (Application Programming
Interface) service to a VPN server running on the remote site. The applicable service port
number ranges from 1 to 65534. Default is 3443. The NVR automatically registers with CA cert
key and becomes with sub-station over a VPN tunnel. Once set, the VAST2 can automatically
connects the NVR.
A public IP or domain name must be configured on the VAST server for the access through the
Internet. The IP or domain name can contain alpha-numeric characters [0-9][a-z][A-Z][-]. [-] can
not be the beginning or the ending character.
Note that on the side of the VAST server making connection via the OpenVPN, the server/client
configuration should be properly configured. On the mobile NVR, a proper gateway setting
should be made for VPN connection.
For the server configuration, the configuration file is placed in:
C:\Program Files (x86)\VIVOTEK Inc\VAST\Server\OpenVPN\config\server\server.ovpn
You can edit your VPN IP subnet parameters according to your network configuration. The
contents of the editable text file looks like this:
port 3939
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
server 10.6.0.0 255.255.0.0
topology subnet
client-to-client
client-config-dir "C:\\Program Files (x86)\\VIVOTEK Inc\\VAST\\Server\\OpenVPN\\
ccd"
keepalive 10 30
cipher AES-256-CBC
max-clients 50000
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 3
mute 20
sndbuf 262144
rcvbuf 262144
tls-server
152 - User's Manual