Question

Dears,

I want help configuring VPN on my RUT950 , I had followed the below links:

https://wiki.teltonika-networks.com/view/RUT950_VPN

& this

https://wiki.teltonika-networks.com/view/OpenVPN_configuration_examples

What server IP & client IP should I use also?

How should I generate ca files in order to upload them to the RUT through WebUI?

Thank you

Answer 1

Hi,

What Server IP and Client IP should be depends what are you going to run, TAP or TUN?

If it's TAP then they must be in the same subnet, but different, if it's TUN then make sure they're in the different subnets.

Also, make sure you have Public IP on your SIM card / WAN.

And about certificates, you can find how to generate them here: https://wiki.teltonika-networks.com/view/How_to_generate_TLS_certificates_(Windows)%3F

EB.

Comments

Dear,

The router & the RUT are on the same subnet, then I should select TUN.

I am connecting through WAN, so I should do port forwarding on the DSL router?

Those are essential before I do the certificate?

If I chose password and not TLS, then can I skip the certificate step?

Thank you

---

If they are on the same subnet - choose TAP, it will be easier for you, just make sure both devices LAN IP are different, e.g 192.168.1.1 and 192.168.1.2.

If your main WAN is Wired WAN - make sure DSL router has the ports for OpenVPN opened and check if there's anything else in the firewall that could be blocking the connection.

If you want to use the static key, you will have to import the same key on both sides.

EB.

---

Ah sorry for my mistake, I am connecting to the RUT from different network (over the Internet).

I want to configure RUT to accept connections to it over OpenVpn over the Internet.

So, I need to allow Port forwarding on the DSL router to the port 1194, right?

What about setting up the VPN server & VPN client?

Thank you

---

If it's a different network with a different subnet - use TUN then, yes.

Yes, allow that port.

And configure RUT950 as it says in the configuration example page that I've mentioned above.

Is it going to be a server or client is up to you, I don't know which of your devices have public IP on the SIM card. The one with the Public IP should be the server.

EB.

---

I had DSL router & the RUT connected to it. The DSL router had public IP.

I want to connect to the RUT from outside and from different locations.

So what are the steps to follow?

Thank you so much