OpenVPN Technical Support Guide
8. In the Profile name field, type a name for the OpenVPN Server profile you are creating.
9. From the Type drop down list, select whether to use TUN (tunnel) or TAP (virtual TAP interface). A TAP interface can be
bridged with an Ethernet connection.
10. Select a port number and packet type to use for your OpenVPN Server. The default OpenVPN port is 1194 and default
packet type is UDP.
11. In the VPN Network Address and VPN Network Mask fields, enter the IP address and network mask to assign to your
VPN. This is ideally an internal IP address which differs from your existing address scheme.
12. HMAC or Hash-based Message Authentication Code is a means of calculating a message authentication code through the
use of a cryptographic hash function and a cryptographic key. If you wish to use the HMAC signature as an additional key
and level of security, under the SSL/TLS handshake section, click the Use HMAC Signature toggle key so that it is in the
ON position, then click the Generate button so that the router can randomly generate the key. The Server key timestamp
field is updated with the time that the key was generated. Click the Download button to download the key file so that it can
be uploaded on the client.
13. Select the Authentication Type that you would like to use for the OpenVPN Server.
Certificate Authentication
a) In the Certificate Management section, enter the required details to create a client certificate. All fields are required. When
you have finished entering the details, click the Generate button. The certificate should only take a moment to generate.
Figure 5 - OpenVPN Server - Certificate Management section
b) When it is done, you can click the Download P12 or Download TGZ buttons to save the certificate file. You may select the
format required by the remote router. NetComm Wireless routers support both formats. If for some reason the integrity of
your network has been compromised, you can return to this screen and use the Certificate drop down list to select the
certificate and then press the Revoke button to disable it.
c) To inform the OpenVPN Server of the network address scheme of the currently selected certificate, enter the Network
Address and Network Mask in the respective fields. If you do not enter the remote subnet here, any packet requests from
the server to the client will not be received by the client network because it is not aware of the remote client’s subnet.
