Vpn Configuration; Generate The Vpn Configuration File (Network Administrator) - Matrox Extio 3 Series User Manual

VPN configuration

To configure the Internet with IPSec VPN connection on the receiver, the network administrator as
well as the remote user must perform the tasks described in this section.

Generate the VPN configuration file (network administrator)

Matrox Extio 3 uses Strongswan 5.8.4 IPsec VPN in tunnel mode.
The network administrator must do the following:
Generate a swanctl file for Strongswan 5.8.4. in the JSON format (2.1) and name it
1
swanctl.json
provides a template JSON file (swanctl-template.json) that lists all supported parameters
with their default values when omitted. For more information,
structure for swanctl.json", page
Next, create a ".zip" configuration file containing the swanctl.json file, and optionally the
2
certificates and private keys in their respective swanctl sub-folders. For more
information,
page
Name the file
3
4 Place the file in the root of the first partition of a USB mass storage device. Note: The
USB mass storage device needs to be formatted as FAT32.
Make the USB mass storage device available to the remote user.
5
The remote user has to import this VPN configuration file into the Extio3 receiver unit using the USB
mass storage device.
20 Matrox Extio 3 Series – User Guide
. Note: Matrox then converts swanctl.json to swanctl.conf internally. Matrox
see "File structure for the VPN configuration file (strongswan.zip)",
26.
strongswan.zip.
108.
This file must not be password protected.
see "Appendix E - File