Table of Contents
Advertisement
4 Specify your OpenVPN certificate configuration.
5 Review the settings. To make a change, click Back. To proceed with the installation, click Next.
6 The OpenVPN advanced installation is now complete. Click Finish to proceed to the available
15.3 Post-Installation
15.3.1 Creating the OpenVPN Certificates for Clients in the Key
Management Interface
OpenVPN Key Management allows you to create a new key/certificate pair, revoke an existing key/
certificate pair, and download client configurations for Windows and Linux clients.
1 Follow the post-installation instructions that appear at the end of your OpenVPN install, or log
2 If you choose to log in to the NOWS SBE console, click Products and Services.
3 Under Select Component, click VPN Server (OpenVPN).
4 Under Administrative Console, click OpenVPN Key Management.
5 You can now generate a client key, revoke a client, or download a client.
60
Novell Open Workgroup Suite Small Business Edition 2.0 Administration and Installation Guide
Protocol to Use for VPN Traffic: The protocol to use for VPN traffic, either UDP or
TCP (the default is UDP for better performance).
IP Address or FQDN of VPN Server: IP address or fully qualified domain name that
VPN clients will connect to (such as vpn.yourcompany.com or 192.168.1.1).
Allow Multiple VPN Clients to Share a Certificate: OpenVPN can allow multiple
simultaneous connections from clients using the same certificate, but this is not advised.
Allow VPN Clients Access to Internal Network: Select this option to enable access.
Country of VPN Server: Your country.
City of VPN Server: The city of your VPN server.
The State or Province of Your VPN Server: The state of your VPN server.
Organization Name: The name of your organization.
Hostname for Key: Unique hostname for this server, which will be embedded in the key.
E-mail Address for Certificate: An e-mail address to be displayed with the certificate.
Key Size in bits for Diffie Helman Key: The Diffie Helman Key Size determines the
size of the key used for the initial handshake between the VPN client and server. The
larger the key, the more secure it is, but it also takes much longer to generate during install
and takes slightly more time for each VPN client to connect. 2048 provides the best
balance between security and speed. 1024 is less secure but faster.
software page. OpenVPN is now listed on the installed software list and can be administered
from the OpenVPN administration page.
Section 15.3.1, "Creating the OpenVPN Certificates for Clients in the Key Management
Interface," on page 60
Section 15.3.2, "Monitoring Clients Connected to OpenVPN," on page 61
Section 15.3.3, "Installing the Windows OpenVPN," on page 61
in to the NOWS SBE console.
Advertisement
Table of Contents
