3.2.2.7. VPN

The VPN component has its own tab in the configure view. It allows the remote centralized management of the VPN Gateway nodes and its configuration. It maintains the system update packages and the object base (networks, hosts, protocols, means of authentication, etc.) to distribute among the different VPN Gateways.

It is a mandatory component for the Secure Remote Access 2SRA module, that includes the memory of the solution where all the configuration, assets, and parametrization are saved.

About the VPN License -

Before performing any configuration task, it is important to understand the terminology related to the VPN module and its corresponding concepts, representing levels of configuration and customization:

• Manage VPN farms: This section allows you to create VPN farms and nodes, configure workers and also manage the OpenVPN, WireGuard and Shorewall protocols.

• VPN data: From this section you can configure your Objects, Radius authentications, Certificate authorities, and Server certificates

• Farm: This section allows you to manage the farms and nodes you have previously created in the “Manage VPN farms” section. Note that, this menu will only be displayed in the frontend once you create your first farm.

• 3.2.2.7.1. Manage VPN farms
  • 3.2.2.7.1.1. Creating a new farm
    • 3.2.2.7.1.1.1. Configuring workers
    • 3.2.2.7.1.1.2. Adding nodes to a farm
  • 3.2.2.7.1.2. Managing options
• 3.2.2.7.2. VPN data
  • 3.2.2.7.2.1. Objects
    • 3.2.2.7.2.1.1. Creating a new VPN object
  • 3.2.2.7.2.2. RADIUS authentications
    • 3.2.2.7.2.2.1. Creating a new RADIUS authentication
  • 3.2.2.7.2.3. Certificate authorities
    • 3.2.2.7.2.3.1. Generating a Certificate authority
    • 3.2.2.7.2.3.2. Creating a new certificate authority
  • 3.2.2.7.2.4. Server certificates
    • 3.2.2.7.2.4.1. Creating a new server certificate
• 3.2.2.7.3. Farm
  • 3.2.2.7.3.1. Status
  • 3.2.2.7.3.2. Zones
    • 3.2.2.7.3.2.1. Create a new zone
    • 3.2.2.7.3.2.2. Assign an interface
    • 3.2.2.7.3.2.3. Create subzones
    • 3.2.2.7.3.2.4. Create policies
    • 3.2.2.7.3.2.5. Add rules
  • 3.2.2.7.3.3. Policies
    • 3.2.2.7.3.3.1. Creating a new policy
  • 3.2.2.7.3.4. Rules
    • 3.2.2.7.3.4.1. Creating a new rule
  • 3.2.2.7.3.5. WireGuard
    • 3.2.2.7.3.5.1. Farm configuration
    • 3.2.2.7.3.5.2. Node configuration