SSL VPN - How to Create a Roadwarrior Connection

The diagram above is a simple illustration of the configuration example covered in this guide. We'll be creating a remote user (roadwarrior) connection to allow communication between any external remote computer and the internal Site A Green network. This will allow the user to act as though they were locally (direct) connected to the Green network of the Site A Endian device and access the same internal resources.

From the Endian main menu, select VPN and immediately you will be taken to the SSL VPN (OpenVPN) server configuration page. The first thing to do is to ensure the OpenVPN server is enabled by checking the first box (1).

The next step is to choose whether you want the OpenVPN server to run in bridged mode (i.e. included in the interface bridge) or you want it to run in non-bridged mode with a separate, unique VPN IP pool. The default is to run in bridged mode (2) to the Green zone and this is recommended for most common VPN deployments. If you choose to run in bridged mode (as we are), you may also specify which network zone you want to be bridged to the VPN interface.

The last thing is to set aside a range of IP's within the bridged interface network to be used exclusively by the VPN server (2). Keep in mind that these IP's shouldn't be allocated anywhere else on the Endian device (e.g. DHCP range, Static IP's , etc.). Once you're done, you can click Save and restart to enable the VPN server.

Select Accounts from the VPN Server Menu and then select Add account button to create a new remote user VPN account

The main things to configure for the new Roadwarrior VPN account are the Username and Password (1).

Some of the other options you can specify include the client routing options (2) where you can determine specifics about routes behind pushed to the remote VPN device as well as some custom push configuration options (3) that allow you to override these settings from the global options [VPN > Advanced]. Remember anything provided here will override the settings you configured for the VPN global options so only use these if this client account requires a different configuration.

Once you've completed the necessary fields, click Save to proceed.

From the Endian main menu, select VPN > VPN client download and then click the link to download the VPN client software. You will be taken (in a new window) to Endian Network where you should already have created your user account. Once logged in you should see the available VPN installer files, at which point you can click the file for your specific operating system -- Windows, Mac OS X, Redhat Linux (.rpm), or Ubuntu Linux (.deb).

https://network.endian.com/downloads.php

Once the download is complete, follow your operating system's normal installation procedure to run the Endian VPN installation package.

When you open the client the first time you will need to configure the appropriate settings to the client successfully connected. To do this, click the [ + ] icon to add a new VPN account profile.

Now all that's left is to configure the VPN account information. For Description, you can provide any brief string to identify the VPN account. Under Server, you need to specify the IP address or fully-qualified DNS name of the VPN server (e.g. vpn.example.com). Next, you must choose the server certificate file you previously downloaded (.cer or .pem). Last, you must provide the VPN account Username and Password you completed earlier.

Select the VPN account and click Connect to establish your VPN connection.

You should a message saying "Connected to <vpn server>" as this indicates a successful VPN connection. You can click the Info button to get basic statistics or click View Log to view the full OpenVPN logs.

You can close the VPN manager at any point and it will remain running. You must click Disconnect to terminate the VPN.