To configure an OpenVPN server on an Accelerated device using Server managed certificates, and to setup the OpenVPN configuration file for remote clients.

This article assumes you have an Accelerated device that supports OpenVPN, a working knowledge of networking for the infrastructure you are trying to establish, and physical connection of network hardware. The configuration of OpenVPN servers and clients that use custom key files and certificates is not in the scope of this article. However, related information are available in these links:

• Configuring an OpenVPN Server for iOS & Android OS Clients
• Configuring a TAP-styled OpenVPN Server and Client

The sample configuration below shows the connection arrangement and relevant network information between an Accelerated device as the OpenVPN server, and the remote devices which are the OpenVPN clients.  The network information are used in this article.

Open the configuration page and set the following configurations.

VPN > OpenVPN Section Configuration

1. Specify a new server name in Add OpenVPN server: TestOVPN
2. Specify the type of OpenVPN device in Device type: TUN/TAP (TUN is used in this walkthrough)
3. Specify the firewall zone in Zone: internal
4. Specify the address of the OpenVPN network in Address, which should be different from the LAN network: 192.168.30.1/24
5. Enable Server managed certificates: Checked

Authentication Section Configuration to add OpenVPN users

1. In Authentication > Groups, specify a new OpenVPN group name and click Add Group: GroupOVPN
2. In the newly created group (i.e. GroupOVPN), enable OpenVPN access 
3. In the OpenVPN section, select the newly created OpenVPN server in the Tunnel dropdown: OpenVPN server: TestOVPN
4. In Authentication > Users, specify a new OpenVPN user username and click Add User: UserOVPN
5. Insert a password in the Password prompt: userpasswd
6. In the Groups section, select the newly created (or as desired) OpenVPN group in the Group dropdown: GroupOVPN

Once all configurations are correct, click Save at the bottom of the configuration page to save the changes. Your TUN-style OpenVPN server is now set up and ready to accept client user connection using the appropriate credentials set up in the Authentication section.

The minimum requirements for a remote client to connect to the OpenVPN server is the OpenVPN client configuration file and an OpenVPN client.  To obtain these:

• Configuration file (*.ovpn): In local web administration page (normally accessible from 192.168.210.1) > System > OpenVPN Configuration File Download; click to download TestOVPN.ovpn
• Client application: OpenVPN download page

The TestOVPN.ovpn file needs to be edited before use, and it can be edited in any text editing program.

When TestOVPN.ovpn file is opened, change the field <server address> with the public external IP address of your server.  In this sample, <server address> is replaced with 172.16.10.1.

Custom routing (e.g. from the OpenVPN network to the internal corporate network) can also be achieved with route <destination network> <network submask> .  In this sample, the destination (internal) network is 192.168.10.0/24, therefore a new line route 192.168.10.0 255.255.255.0 is added to the configuration.

The remaining configuration process of the remote client uses this configuration file.  For details, visit:

• Configuring an OpenVPN Client on an Accelerated Device
• Configuring a TAP-styled OpenVPN Server and Client
• Configuring an OpenVPN Server for iOS & Android OS Clients