CONEL SPECTRE v3 ERT — настройка аутентификации для VPN-соединений [67/136]

Превью страниц Страница 67 / 136

4. CONFIGURATION

Continued from previous page

Item Description

Authenticate Mode Speciﬁes the authentication mode:

• none – No authentication is set.

• Pre-shared secret – Speciﬁes the shared key function for

both sides of the tunnel.

• Username/password – Speciﬁes authentication using a

CA Certiﬁcate, Username and Password.

• X.509 Certiﬁcate (multiclient) – Activates the X.509 au-

thentication in multi-client mode.

• X.509 Certiﬁcate (client) – Activates the X.509 authenti-

cation in client mode.

• X.509 Certiﬁcate (server) – Activates the X.509 authenti-

cation in server mode.

Pre-shared Secret Speciﬁes the pre-shared secret which you can use for every au-

thentication mode.

CA Certiﬁcate Speciﬁes the CA Certiﬁcate which you can use for the user-

name/password and X.509 Certiﬁcate authentication modes.

DH Parameters Speciﬁes the protocol for the DH parameters key exchange which

you can use for X.509 Certiﬁcate authentication in the server

mode.

Local Certiﬁcate Speciﬁes the certiﬁcate used in the local device. You can use this

authentication certiﬁcate for the X.509 Certiﬁcate authentication

mode.

Local Private Key Speciﬁes the key used in the local device. You can use the key

for the X.509 Certiﬁcate authentication mode.

Username Speciﬁes a login name which you can use for authentication in

the username/password mode.

Password Speciﬁes a password which you can use for authentication in the

username/password mode.

Extra Options Speciﬁes additional parameters for the OpenVPN tunnel, such as

DHCP options. The parameters are proceeded by two dashes.

For possible parameters see the help text in the router using SSH

– run the openvpnd --help command.

Table 37: OpenVPN Conﬁguration