How to Use Central VPN Management (CVM)
Posted by Roy Panetta on 14 August 2015 03:53 PM
Central VPN Management (CVM) is an easier way to establish and manage VPN connections between several CPE (VPN clients).
It allows the Administrator of the CVM Router to:
In the following example, we show how to use CVM on a VPN server to manage the VPN network with CPEs.
There will be three parts of the notes,
Part A. Configuration of CVM Router and CPEs
For CVM to work, the required settings on both CVM Router(VPN server) and the CPEs need to be configured.
The following provides the configuration steps.
1. [On CVM Router] Set up CVM: Go to Central VPN Management >> General Setup
Note: URL with https and http is for CVM SSL Port and CVM Port respectively.
c. Select a WAN interface for WAN IP for Remote Connection.
d. In IPsec VPN Settings tab, enter Username and Password.
e. Select the Local Subnet to establish VPN connection.
f. Click OK to save.
2. [On CVM Router] Enable CVM Access Control: Go to System Maintenance >> Management, make sure the CVM Port is enabled.
3. [On CPEs] Set up TR-069: Go to System Maintenance >> TR-069
4. [On CPEs] Enable Internet Access Control: Go to System Maintenance >> Management.
Enable Allow management from the Internet and make sure TR069 server is enabled.
After the above configuration, the CPE is connected to CVM Router, and we can see the device appears in the Unmanaged Device List of CVM Router.
5 [On CVM Router] Edit the Managed Device List: Go to Central VPN Management >> CPE Management >> Managed Devices List.
a. Select the CPE device in Unmanaged Devices List, enter a Description Name and its Location, then click Add to add it to Managed Devices List.
b. After that, the CPE will appear in Managed Devices List with its name and IP address. Also double click on the item for detailed information.
6. [On CVM Router] Observe the location of CPEs on Google Map: Go to Central Management >> CPE Management, in Google Map tab shows the location of each CPE.
Part B. VPN Network Management
To establish VPN connection: Go to Central VPN Management >> VPN Management.
1. The VPN Management page shows all the devices in Managed Device List and their connection status.
2. Move the cursor to a device to show its detailed information.
3. Click on a device to show the VPN type options, then click on one of the options to establish VPN connection. In both PPTP and IPsec, the system will give a username and password automatically; however, Administrator could change the encryption methods by choosing “Advanced”.
4. Wait a few seconds and refresh the page, we will see the VPN connection is on and the connection information is in the CPE VPN Connection List below.
5. After that, both CPE and VPN server will create a LAN-to-LAN profile in VPN and Remote Access >> LAN to LAN.
Administrator could also change the VPN type in VPN Management page, and the settings will applied to the LAN-to-LAN profile automatically.
Part C. CPE Maintenance
In this part, we will demonstrate an example of CPE maintenance. Assuming Administrator wants a CPE to backup its configuration and stored in an USB once a day. This can be done from the VPN server with CVM.
1. Create a schedule for the configuration backup: Go to Application >> Schedule, click on an index number to add a schedule profile.
2. Go to Central VPN Management >> CPE Management >> CPE Maintenance, make sure there is a USB disk connected to the router.
3. Add a CPE Maintenance profile: In the CPE Maintenance page, click on an index number to add a new profile.
4. After the configuration backup, go to USB Application >> File Explorer to check if the configuration files has been saved successfully.