OpenVPN Access Server System Administrator Guide

Note that to avoid security warnings with Web browsers, the server certificate must have a Subject
Name with a “Common Name” field equal to the FQDN or IP address that clients will use to access
the server. That is the purpose of specifying the FQDN in the “openssl req” step above.
5.5 Server-locked Profile
The server-locked profile allows any VPN User the ability to connect with the profile. This was
created for a one size fits all solution. This profile is now offered to all users by default.
6 Additional Information on RADIUS Support
As of OpenVPN Access Server version 1.1 the RADIUS support includes support for RFC2865
and RFC2866. Please note that extensions beyond the previous mentioned RFC‟s, such as
Microsoft extension MS-CHAP V2 are not supported at this time. This should be kept in mind
when configuring a RADIUS server to interoperate with OpenVPN Access Sever.
6.1 RADIUS Authentication Attributes
As of OpenVPN Access Server version 1.1 the RADIUS support includes the following
Authentication Attributes as prescribed by RFC2865 and RFC2866:
1. User-Name
2. User-Password
3. NAS-Identifier
4. NAS-Port-Type
5. NAS-Port
6. NAS-IP-Address
7. Service-Type
8. Framed-Protocol
9. Framed-IP-Address
10. Framed-IP-Netmask
6.2 RADIUS Accounting Attributes
As of OpenVPN Access Server version 1.1 the RADIUS support includes the following
Accounting Attributes as prescribed by the RFC2865 and RFC2866:
1. Acct-Status-Type
2. Acct-Session-Id
3. Acct-Session-Time
4. Acct-Terminate-Cause
5. Acct-Input-Octets
6. Acct-Output-Octets
OpenVPN Access Server System Administrator Guide
51