MaikelK
Hello,
Im having trouble figuring out the best way to achieve the following.
We sell gensets which use B&R automation PLC's. We have bought the source code for the PLC's from our Italian distributor becuase there main man overthere left the company and they cant support us anymore.
They used to sell the units together with Teltonika RUT240 routers to use as VPN client so that they could login to that VPN and connect to the PLC and remote computer for ease of programming and fault finding etc.
What i have figured out so far on this setup:
-Each RUT240 router has exactly the same setup. Only thing that seems to change is the ip address of the LAN, for example:
--Unit 1: 10.10.24.1
--Unit 2: 10.10.25.1
--Unit 3: etc. etc.
What is have setup now:
-Server on Windows 7, working
-Client on Windows 7, working
-Client on RUT240, working.
Working as in, they are all connecting and with CCD files i can give them the same ip everytime.
mode server
port 1111
;proto tcp4-server
proto udp4
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\serverkeys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\serverkeys\\SandfirdenVPN.crt"
key "C:\\Program Files\\OpenVPN\\config\\serverkeys\\SandfirdenVPN.key"
dh "C:\\Program Files\\OpenVPN\\config\\serverkeys\\dh2048.pem"
topology subnet
tls-server
tls-auth "C:\\Program Files\\OpenVPN\\config\\serverkeys\\ta.key" 0
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
server 10.10.30.0 255.255.255.0
client-to-client
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
client-config-dir "C:\\Program Files\\OpenVPN\\config\\ccd"
verb 3
route-delay 5
route-method exe
client
dev tun
proto udp4
remote ----- 1111
connect-retry 10
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\laptopmaikel.crt"
key "C:\\Program Files\\OpenVPN\\config\\laptopmaikel.key"
remote-cert-tls server
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
cipher AES-256-CBC
tls-client
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
comp-lzo
verb 3
mute 20
float
auth-nocache
client
dev tun
proto udp4
remote ----- 1111
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
key-direction 1
cipher AES-256-CBC
tls-client
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
comp-lzo
verb 3
mute 20
float
auth-nocache
<ca>
-----BEGIN CERTIFICATE-----
=
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
=
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
=
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
ifconfig-push 10.10.30.3 255.255.255.0
#iroute 192.168.182.0 255.255.255.0
#disable
Im a bit puzzled on how to get this to working properly and i hope you guys can help me out to find the best stratergy for this setup.