Configuring Server Side

• Navigate to VPN > OpenVPN, Server tab
• Click   Add to create a new server entry
• Fill in the fields as follows, with everything else left at defaults:

Server Mode Select Peer to Peer (Shared Key).

Description Enter text here to describe the connection (e.g. ExampleCo Site B VPN)

Shared key Check Automatically generate a shared key, or paste in a pre- existing shared key for this connection.

Tunnel Network Enter the previously chosen network, 10.3.100.0/30

Remote network Enter the LAN on the Site B side, 10.5.0.0/24

• Click Save
• Click  to edit the server that was created a moment ago
• Find the Shared Key box
• Select all text inside the Shared Key box
• Copy the text to the clipboard
• Save the contents to a file, or paste into a text editor such as Notepad temporarily Next, add a firewall rule on WAN allowing access to the OpenVPN server.
• Navigate to Firewall > Rules, WAN tab
• Click  Add to create a new rule at the top of the list
• Set Protocol to UDP
• Set the Source address to match the client. If it has a dynamic IP address, leave it set to Any, otherwise set the rule to only allow from the WAN IP address of the client:
  • Select Single Host or Alias in Source
  • Enter the WAN address of the client as the Source address (e.g. 203.0.113.5)
• Set the Destination to WAN Address
• Set the Destination port to 1194 in this instance
• Enter a Description, such as OpenVPN from Site B
• Click Save and the rule will look like Figure 79: OpenVPN Example Site-to-Site WAN Firewall Rule

Fig. 79: OpenVPN Example Site-to-Site WAN Firewall Rule

• Click Apply Changes

A rule must also be added to the OpenVPN interface to pass traffic over the VPN from the Client-side LAN to the Server-side LAN. An “Allow all” style rule may be used, or a set of stricter rules. In this example allowing all traffic is OK so the following rule is made:

• Navigate to Firewall > Rules, OpenVPN tab
• Click  Add to create a new rule at the top of the list
• Set Protocol to any
• Enter a Description such as Allow all on OpenVPN
• Click Save
• Click Apply Changes

The server configuration is finished.