Digi TX54 User Manual page 335

Virtual Private Networks (VPN)
The OpenVPN server is enabled by default. To disable, click Enable.
5. For Device type, select the mode used by the OpenVPN server, either:
TUN: Routing mode. See
n
TAP: Bridging mode. See
n
6. For Zone, select the firewall zone for the OpenVPN server. For TUN device types, this should be
set to Internal to treat clients as LAN devices.
7. (Optional) Select the Metric for the OpenVPN server. If multiple active routes match a
destination, the route with the lowest metric will be used.
8. (Optional) For Address, type the IP address and subnet mask of the OpenVPN server. If
Address is blank, the server will not provide an IP address to the client, which allows the
server to be added to a bridge or an interface. The interface then provides the IP address to
the client.
9. (Optional) For First IP address and Last IP address, set the range of IP addresses that the
OpenVPN server will use when providing IP addresses to clients. The default is from 80 to 99.
10. (Optional) Set the VPN port that the OpenVPN server will use. The default is 1194.
11. For Server managed certificates, determine the method of certificate management. If
enabled, the server will manage certificates. If not enabled, certificates must be created
externally and added to the server.
12. If Server managed certificates is not enabled:
a. Select the Authentication type:
n
TX54 User Guide
OpenVPN
OpenVPN
Certificate only: Uses only certificates for client authentication. Each client
requires a public and private key.
for information about TUN mode.
for information about TAP mode.
OpenVPN
335