Tripp Lite B097048 Owners Manual for B093- B097- and B098-Series Console Serve - Page 66

Options, Description

Page 66 highlights

4. Serial Port, Host, Device and User Configuration An example of an OpenVPN Windows Server configuration file is shown below: server 10.100.10.0 255.255.255.0 port 1194 keepalive 10 120 proto udp mssfix 1400 persist-key persist-tun dev tun ca c:\\openvpnkeys\\ca.crt cert c:\\openvpnkeys\\server.crt key c:\\openvpnkeys\\server.key dh c:\\openvpnkeys\\dh.pem comp-lzo verb 1 syslog B098_OpenVPN_Server The Windows client/server configuration file options are: Options #description: Client server proto udp proto tcp mssfix verb dev tun dev tap remote Port Keepalive http-proxy ca cert Description This is a comment describing the configuration. Comment lines start with "#" and are ignored by OpenVPN. Specify whether this will be a client or server configuration file. In the server configuration file, define the IP address pool and netmask. For example, server 10.100.10.0 255.255.255.0. Set the protocol to UDP or TCP. The client and server must use the same settings. Mssfix sets the maximum size of the packet. This is only useful for UDP if problems occur. Set log file verbosity level. Log verbosity level can be set from 0 (minimum) to 15 (maximum). For example, 0 = silent except for fatal errors 3 = medium output, good for general usage 5 = helps with debugging connection problems 9 = extremely verbose, excellent for troubleshooting Select dev tun to create a routed IP tunnel or dev tap to create an Ethernet tunnel. The client and server must use the same settings. The hostname/IP of OpenVPN server when operating as a client. Enter either the DNS hostname or the static IP address of the server. The UDP/TCP port of the server. Keepalive uses ping to keep the OpenVPN session alive. "Keepalive 10 120" pings every 10 seconds and assumes the remote peer is down if no ping has been received over a 120 second time period. If a proxy is required to access the server, enter the proxy server DNS name or IP and port number. Enter the CA certificate file name and location. The same CA certificate file can be used by the server and all clients. Note: Ensure each "\" in the directory path is replaced with "\\". For example, c:\openvpnkeys\ ca.crt will become c:\\openvpnkeys\\ca.crt. Enter the client's or server's certificate file name and location. Each client should have its own certificate and key files. Note: Ensure each "\" in the directory path is replaced with "\\". 66

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288

66
4. Serial Port, Host, Device and User Configuration
An example of an OpenVPN Windows Server configuration file is shown below:
server 10.100.10.0 255.255.255.0
port 1194
keepalive 10 120
proto udp
mssfix 1400
persist-key
persist-tun
dev tun
ca c:\\openvpnkeys\\ca.crt
cert c:\\openvpnkeys\\server.crt
key c:\\openvpnkeys\\server.key
dh c:\\openvpnkeys\\dh.pem
comp-lzo
verb 1
syslog B098_OpenVPN_Server
The Windows client/server configuration file options are:
Options
Description
#description:
This is a comment describing the configuration.
Comment lines start with “#” and are ignored by OpenVPN.
Client server
Specify whether this will be a client or server configuration file.
In the server configuration file, define the IP address pool and netmask. For example,
server 10.100.10.0 255.255.255.0.
proto udp
proto tcp
Set the protocol to UDP or TCP. The client and server must use the same settings.
mssfix <max. size>
Mssfix sets the maximum size of the packet. This is only useful for UDP if problems
occur.
verb <level>
Set log file verbosity level. Log verbosity level can be set from 0 (minimum) to 15
(maximum). For example,
0 = silent except for fatal errors
3 = medium output, good for general usage
5 = helps with debugging connection problems
9 = extremely verbose, excellent for troubleshooting
dev tun
dev tap
Select dev tun to create a routed IP tunnel or dev tap to create an Ethernet tunnel.
The client and server must use the same settings.
remote <host>
The hostname/IP of OpenVPN server when operating as a client. Enter either the DNS
hostname or the static IP address of the server.
Port
The UDP/TCP port of the server.
Keepalive
Keepalive uses ping to keep the OpenVPN session alive. “Keepalive 10 120” pings
every 10 seconds and assumes the remote peer is down if no ping has been received
over a 120 second time period.
http-proxy <proxy server>
<proxy port #>
If a proxy is required to access the server, enter the proxy server DNS name or IP and
port number.
ca <file name>
Enter the CA certificate file name and location.
The same CA certificate file can be used by the server and all clients.
Note:
Ensure each “\” in the directory path is replaced with “\\”. For example, c:\openvpnkeys\
ca.crt will become c:\\openvpnkeys\\ca.crt.
cert <file name>
Enter the client’s or server’s certificate file name and location.
Each client should have its own certificate and key files.
Note:
Ensure each “\” in the directory path is replaced with “\\”.