Digi IX10 User Manual page 208

Virtual Private Networks (VPN)
b. To create certificates externally and add them to the server
(config vpn openvpn server name)> autogenerate false
(config vpn openvpn server name)>
The default setting is false.
c. If autogenerate is set to false:
i. Set the authentication type:
(config vpn openvpn server name)> authentication value
(config vpn openvpn server name)>
where value is one of:
ii. Paste the contents of the CA certificate (usually in a ca.crt file) into the value of the
cacert parameter:
(config vpn openvpn server name)> cacert value
(config vpn openvpn server name)>
iii. Paste the contents of the public key (for example, server.crt) into the value of the
server_cert parameter:
(config vpn openvpn server name)> server_cert value
(config vpn openvpn server name)>
iv. Paste the contents of the private key (for example, server.key) into the value of the
server_key parameter:
(config vpn openvpn server name)> server_key value
(config vpn openvpn server name)>
v. Paste the contents of the Diffie Hellman key (usually in dh2048.pem) into the value of
the diffie parameter:
(config vpn openvpn server name)> diffie value
(config vpn openvpn server name)>
8. (Optional) Set the access control list to restrict access to the OpenVPN server:
IX10 User Guide
cert: Uses only certificates for client authentication. Each client requires a
n
public and private key.
passwd: Uses a username and password for client authentication. You must
n
create an OpenVPN authentication group and user. See
Authentication Group and User
cert_passwd: Uses both certificates and a username and password for client
n
authentication. Each client requires a public and private key, and you must
create an OpenVPN authentication group and user. See
Authentication Group and User
Configure an OpenVPN
for instructions.
Configure an OpenVPN
for instructions.
OpenVPN
208