IS200DSPXH1BBD处理器模块
本地网络掩码必需设置指定本地子网掩码。身份验证配置窗口项值设置描述密钥管理1。所需设置从此IPsec隧道的下拉框中选择密钥管理。EW200工业蜂窝网关223 2。预共享密钥8到32个字符。IKE+预共享密钥：设置密钥（8~32个字符）。本地ID可选设置指定此IPsec隧道的本地ID以进行身份验证。选择“用户名”作为“本地ID”，然后输入用户名。用户名可能包括但不能是所有数字。为本地ID选择FQDN并输入FQDN。选择User@FQDN对于本地ID，输入User@FQDN.为“本地ID”选择“密钥ID”，然后输入密钥ID（字母或数字）。远程ID可选设置指定此IPsec隧道的远程ID以进行身份验证。选择“用户名”作为“远程ID”，然后输入用户名。用户名可能包括但不能是所有数字。为本地ID选择FQDN并输入FQDN。选择User@FQDN对于远程ID，输入User@FQDN.为Remote ID选择Key ID，然后输入Key ID（字母或数字）。当选择隧道方案中的动态VPN选项时，远程ID将不可用。对于剩余的IKE阶段、IKE建议定义、IPsec阶段和IPsec建议定义设置，它们与上一节中描述的创建IPsec隧道的设置相同。请参阅相关说明。EW200工业蜂窝网关224 5.1.2 OpenVPN OpenVPN是一种实现虚拟专用网络（VPN）技术的应用程序，用于在路由或桥接配置和远程访问设施中创建安全的点对点或站点对站点连接。它使用自定义安全协议，利用SSL/TLS进行密钥交换。它能够穿越网络地址转换器（NAT）和防火墙。OpenVPN允许对等方使用静态密钥（预共享密钥）或证书相互认证。在多客户端服务器配置中使用时，它允许服务器使用签名和证书颁发机构为每个客户端发布身份验证证书。它广泛使用OpenSSL加密库以及SSLv3/TLSv1协议，并包含许多安全和控制功能。OpenVPN隧道是一种基于客户端和服务器的隧道技术。OpenVPN服务器必须具有静态IP或FQDN，并维护客户端列表。OpenVPN客户端可以是具有公共IP或私有IP并请求OpenVPN隧道连接的移动用户或移动站点。该产品支持OpenVPN服务器和OpenVPN客户端功能，以满足不同的应用程序要求。有两种OpenVPN连接方案。它们是TAP和TUN场景。该产品可以创建基于第3层的IP隧道（TUN）或基于第2层的以太网TAP，可以承载任何类型的以太网流量。除了将设备配置为服务器或客户端之外，请指定要采用的OpenVPN连接方案类型。OpenVPN TUN场景术语“TUN”模式是指路由模式，使用第3层数据包运行。在路由模式下，VPN客户端在与OpenVPN服务器下的本地LAN不同的子网上获得IP地址。此虚拟子网是为连接到任何远程VPN计算机而创建的。
Local Netmask Required setting Specify the Local Subnet Mask. Authentication Configuration Window Item Value setting Description Key Management 1. Required setting Select Key Management from the dropdown box for this IPsec tunnel. EW200 Industrial Cellular Gateway 223 2. Pre-shared Key 8 to 32 characters. IKE+Pre-shared Key: Set a key (8 ~ 32 characters). Local ID Optional setting Specify the Local ID for this IPsec tunnel to authenticate. Select User Name for Local ID and enter the username. The username may include but can’t be all numbers. Select FQDN for Local ID and enter the FQDN. Select User@FQDN for Local ID and enter the User@FQDN. Select Key ID for Local ID and enter the Key ID (letter or number). Remote ID Optional setting Specify the Remote ID for this IPsec tunnel to authenticate. Select User Name for Remote ID and enter the username. The username may include but can’t be all numbers. Select FQDN for Local ID and enter the FQDN. Select User@FQDN for Remote ID and enter the User@FQDN. Select Key ID for Remote ID and enter the Key ID (letter or number). Remote ID will be t available when Dynamic VPN option in Tunnel Scenario is selected. For the remaining IKE Phase, IKE Proposal Definition, IPsec Phase, and IPsec Proposal Definition settings, they are the same as that of creating an IPsec Tunnel described in previous section. Please refer to the related descriptions. EW200 Industrial Cellular Gateway 224 5.1.2 OpenVPN OpenVPN is an application that implements virtual private network (VPN) techniques for creating secure pointto-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that utilizes SSL/TLS for key exchange. It is capable of traversing network address translators (NATs) and firewalls. OpenVPN allows peers to authenticate each other using a Static Key (pre-shared key) or certificates. When used in a multi-client-server configuration, it allows the server to release an authentication certificate for every client, using signature and certificate authority. It uses the OpenSSL encryption library extensively, as well as the SSLv3/TLSv1 protocol, and contains many security and control features. OpenVPN Tunneling is a Client and Server based tunneling techlogy. The OpenVPN Server must have a Static IP or a FQDN, and maintain a Client list. The OpenVPN Client may be a mobile user or mobile site with public IP or private IP, and requesting the OpenVPN tunnel connection. The product supports both OpenVPN Server and OpenVPN Client features to meet different application requirements. There are two OpenVPN connection scenarios. They are the TAP and TUN scenarios. The product can create either a layer-3 based IP tunnel (TUN), or a layer-2 based Ethernet TAP that can carry any type of Ethernet traffic. In addition to configuring the device as a Server or Client, specify which type of OpenVPN connection scenario is to be adopted. OpenVPN TUN Scenario The term "TUN" mode is referred to routing mode and operates with layer 3 packets. In routing mode, the VPN client is given an IP address on a different subnet than the local LAN under the OpenVPN server. This virtual subnet is created for connecting to any remote VPN computers.
