Changes

no edit summary
Line 386: Line 386:  
====TLS Clients====
 
====TLS Clients====
 
----
 
----
 +
<b>TLS Clients</b> is a way to differentiate clients by their Common Names (CN), which are found in the client certificate file. It can be used to assign specific VPN addresses to corresponding clients and bind them to their LAN addresses, making the server aware of which client has which LAN IP address.
 +
 +
The TLS Clients section can be found in the OpenVPN Server configuration window, provided that the OpenVPN server uses TLS or TLS/Password authentication methods. To create a new TLS client, type in the new client‘s name in the text field found bellow the TLS Clients tab and press the "Add" button. Refer to the figure and table below for information on the TLS Clients' configuration fields:
    
[[File:{{{file_openvpn_tls_clients_config}}}]]
 
[[File:{{{file_openvpn_tls_clients_config}}}]]
 +
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field name</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>VPN instance name</td>
 +
      <td>string; Default: <b>none</b></td>
 +
      <td>With what VPN instance should the TLS Client be associated with. When left empty, this field filled automatically</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Endpoint name</td>
 +
      <td>string; Default: <b>none>/b></td>
 +
      <td>A custom name for the client</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Common name (CN)</td>
 +
        <td>string; Default: <b>none</b></td>
 +
        <td>Client’s Common Name (CN) found in the client certificate file</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Virtual local endpoint</td>
 +
        <td>ip; Default: <b>none</b></td>
 +
        <td>Client’s local address in the virtual network</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Virtual remote endpoint</td>
 +
      <td>ip; Default: <b>none</b></td>
 +
      <td>Client’s remote address in the virtual network</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Private network</td>
 +
        <td>ip; Default: <b>none</b></td>
 +
        <td>Client’s private network (LAN) IP address</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Private netmask</td>
 +
        <td>ip; Default: <b>none</b></td>
 +
        <td>Client’s private network (LAN) IP netmask</td>
 +
    </tr>
 +
</table>

Navigation menu