Honeywell Small SATCOM Operation, Installation, And Maintenance Manual page 72

SYSTEM DESCRIPTION, INSTALLATION, AND MAINTENANCE MANUAL
# cp /etc/easy-rsa/pki/ca.crt /etc/openvpn/
# cp /etc/easy-rsa/pki/dh.pem /etc/openvpn/
# cp /etc/easy-rsa/pki/issued/server.crt /etc/openvpn/
# cp /etc/easy-rsa/pki/private/server.key /etc/openvpn/
(11) Copy the following files to your machine: (These will be required by the client)
/etc/easy-rsa/pki/ca.crt
/etc/easy-rsa/pki/issued/smallsatcom.crt
/etc/easy-rsa/pki/private/smallsatcom.key
(12) Open port 1194 in the firewal by going to Network -> Firewall. Then "Traffi Rules" tab and
click Add on the bottom. Enter the following configuration
• Name: openvpn-udp
• Protocol: UDP
• Source zone: wan
• Destination zone: Device (input)
• Destination port: 1194
• Action: Accept
(13) Using the LUCI WebUI Select VPN -> OpenVPN. Then enter smallsatcom_tap in the instance
name below "Template Based Configuration" Select "Server configuration for an ethernet
bridge VPN" from the template list and click Add. Click Edit next to the newly added interface.
(14) (Some fields might be missing; these can be added by going to the bottom of the page and
selecting it from the "Additional-field drop-down menu.) Enter the following configuration
• verb: 3
• port: 1194
• dev_type: tap
• server_bridge: 192.168.1.1 255.255.255.0 192.168.1.128 192.168.1.254
• comp_lzo: yes
• keepalive: 10 60
• ca: [click on File not accessible and select ca.crt]
• dh: [click on File not accessible and select dh.pem]
• cert: [click on File not accessible and select server.crt]
• key: [click on File not accessible and select server.key]
• proto: udp
(15) Click Save & Apply, then Back to Overview.
(16) Tick the "Enabled" box next to the "smallsatcom_tap" line. Save & Apply and then Start the
VPN Server.
(17) Open LAN interface settings, go to "Physical Settings" tab and add "tap0" to the interfaces from
drop-down list. Save, then Save & Apply.
(18) Reboot the router to Apply all changes.
(19) Server configuration is complete.
© Honeywell International Inc. Do not copy without express permission of Honeywell.
SMALL SATCOM
Page 47
18 Feb 2021