Zentyal servers and then, introduce a Password for Zentyal-to-Zentyal tunnels to establish the connection between the two offices in a First, enable theĪllow Zentyal-to-Zentyal tunnels to exchange routes between However, you need to make two small changes. To do this, you need to configure a VPN server similarly as explained previously. The goal is to connect multiple offices, their Zentyal servers and their internal networks, creating one single network infrastructure in a secure way through the Internet. Office interconnection with Zentyal through VPN tunnel
#Openvpn conf file for mac client download
The ZentyalĪdministrator will download the configuration bundles to the clients using the most In addition, if the selected system is Windows, you can also add an OpenVPN™ installer. Depending on the defined Connection strategy, the connection can be established in a specific order or in random order. When you create a bundle, select thoseĬertificates that will be used by the clients and set the external IP addressesĪs you can see the image below, you can have one main VPN server and up to two secondary servers. VPN ‣ Servers, by clicking the Download button in theĭownload client bundle section. The bundles are available in the table at Packages that include the VPN configuration file specific to each user and To configure a VPN client is by using the Zentyal bundles.
Once you have done this, it is time to configure the clients. If Zentyal server is both the VPN server and the gateway (most common These internal networks will use the Zentyal VPN as gateway, instead of their default gateway. Networks to which you can access from the VPN. Network Address Translation (NAT): It is recommended to enable this translation if the Zentyal server thatĪccepts the VPN connections is not the default gateway of the internal You can also use a TUN type interface, more similar to a TUN interface: By default a TAP type interface is used, more similar to a Bridge With the selected string of characters to authorize the connection. Client authorization by common name: Requires that the Common name of the client certificate will start Unless you want to import an external certificate, Issues a certificate for the server by default, with the name Server certificate: Certificate that will show the server to its clients. Not overlap with any other and for the purposes of firewall, it You must take care that this network does In case more advanced configuration is necessary: VPN address: Indicates the virtual subnet where the VPN server and its clients will be located.
In most of the cases, you can leave the rest of the configuration options with their Using their VPN addresses, you must enable the option If you want the VPN clients to be able to connect between themselves by Only two interfaces are required, one internal for LAN and one external Therefore, you must set at least one of your interfaces asĮxternal at Network ‣ Interfaces. The networks connected directly to the network interfaces of the host,Īs you can see, the VPN server will be listening on all external InĪddition, you will automatically be notified of local networks, i.e. You must make sure that there is no conflict with a local network. If you need to change the Network address, The VPN network addresses are assigned both
(Zentyal will create one automatically using the VPN server name) and The following configuration parameters are added automatically and can beĮdited if necessary: Port/Protocol, Certificate
0 kommentar(er)
