Digi IX10 User Manual page 209

Virtual Private Networks (VPN)
To limit access to specified IPv4 addresses and networks:
n
(config vpn openvpn server name)> add acl address end value
(config vpn openvpn server name)>
Where value can be:
l
l
l
Repeat this step to list additional IP addresses or networks.
To limit access to specified IPv6 addresses and networks:
n
(config vpn openvpn server name)> add acl address6 end value
(config vpn openvpn server name)>
Where value can be:
l
l
l
Repeat this step to list additional IP addresses or networks.
To limit access to hosts connected through a specified interface on the IX10 device:
n
(config vpn openvpn server name)> add acl interface end value
(config vpn openvpn server name)>
Where value is an interface defined on your device.
Repeat this step to list additional interfaces.
To limit access based on firewall zones:
n
(config vpn openvpn server name)> add acl zone end value
Where value is a firewall zone defined on your device, or the any keyword.
IX10 User Guide
A single IP address or host name.
A network designation in CIDR notation, for example, 192.168.1.0/24.
any: No limit to IPv4 addresses that can access the service-type.
A single IP address or host name.
A network designation in CIDR notation, for example, 2001:db8::/48.
any: No limit to IPv6 addresses that can access the service-type.
Display a list of available interfaces:
Use ... network interface ? to display interface information:
Display a list of available firewall zones:
Type ... firewall zone ? at the config prompt:
(config vpn openvpn server name)> ... firewall zone ?
Zones: A list of groups of network interfaces that can be
referred to by packet
filtering rules and access control lists.
Additional Configuration
---------------------------------------------------------
----------------------
OpenVPN
209