Digi IX10 User Manual page 383

Virtual Private Networks (VPN)
c. If autogenerate is set to false:
i. Set the authentication type:
(config vpn openvpn server name)> authentication value
(config vpn openvpn server name)>
where value is one of:
ii. Paste the contents of the CA certificate (usually in a ca.crt file) into the value of the
cacert parameter:
(config vpn openvpn server name)> cacert value
(config vpn openvpn server name)>
iii. Paste the contents of the public key (for example, server.crt) into the value of the
server_cert parameter:
(config vpn openvpn server name)> server_cert value
(config vpn openvpn server name)>
iv. Paste the contents of the private key (for example, server.key) into the value of the
server_key parameter:
(config vpn openvpn server name)> server_key value
(config vpn openvpn server name)>
v. Paste the contents of the Diffie Hellman key (usually in dh2048.pem) into the value of
the diffie parameter:
(config vpn openvpn server name)> diffie value
(config vpn openvpn server name)>
8. (Optional) Set the access control list to restrict access to the OpenVPN server:
To limit access to specified IPv4 addresses and networks:
n
(config vpn openvpn server name)> add acl address end value
(config vpn openvpn server name)>
Where value can be:
l
l
l
IX10 User Guide
cert: Uses only certificates for client authentication. Each client requires a
n
public and private key.
passwd: Uses a username and password for client authentication. You must
n
create an OpenVPN authentication group and user. See
Authentication Group and User
cert_passwd: Uses both certificates and a username and password for client
n
authentication. Each client requires a public and private key, and you must
create an OpenVPN authentication group and user. See
Authentication Group and User
A single IP address or host name.
A network designation in CIDR notation, for example, 192.168.1.0/24.
any: No limit to IPv4 addresses that can access the service-type.
Configure an OpenVPN
for instructions.
Configure an OpenVPN
for instructions.
OpenVPN
383