Selects virtual VPN interface type. TUN is most often used in typical IP-level VPN connections,
however, TAP is required to some Ethernet bridging configurations.
This setting enables LZO compression. With LZO compression, your VPN connection will
generate less network traffic; however, this means higher router CPU loads. Use it carefully
with high rate traffic or low CPU resources.
Sets authentication mode, used to secure data sessions. Two possibilities you have here:
“Static” means, that OpenVPN client and server will use the same secret key, which must be
uploaded to the router using “Static pre-shared key” option. “Tls” authentication mode uses
X.509 type certificates. Depending on your selected OpenVPN mode (client or server) you have
to upload these certificates to the router:
For client: Certificate Authority (CA), Client certificate, Client key.
For server: Certificate Authority (CA), Server certificate, Server key and Diffie-Hellman (DH)
certificate used to key exchange through unsafe data networks.
All mention certificates can be generated using OpenVPN or OpenSSL utilities on any type host
machine. Certificate generation and theory is out of scope of this user manual.
