---
title: "Client sub-tab"
slug: "client-sub-tab"
updated: 2023-04-14T18:35:33Z
published: 2023-04-14T18:35:33Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zpesystems.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Client sub-tab

The VPN client configuration settings are generally used for failover scenarios. This is when a main secure connection fails over to a less secure connection type. The VPN tunnel is used to secure traffic. When the Nodegrid device is configured as an VPN client, it is bound to a network interface (optional) and the VPN tunnel is automatically established when the bounded interface starts. Multiple client configurations can be added that support different connection and interface details.

**NOTE**Depending on the configuration, multiple files are required and must be available in the /etc/openvpn/CA folder.

![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/image-1678713087265.png)

### Add Client

1. Go to *Network :: VPN drop-down :: SSL VPN :: Client*.
2. Click **Add** (displays dialog). ![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/image-1678713664921.png)
  1. Enter **Name**
  2. On **Network Connection** drop-down, select one (None, ETH0, ETH1, hotspot)
3. In *Remote Server*menu, select one:
  - **Single Gateway**radio button, enter details:
    - **Gateway IP Address**
    - **Gateway Port** (default: 1194)
    - **Connection Protocol** drop-down, select one (UDP, TCP)
  - **Multiple Gateway** radio button (expands dialog) ![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/image-1678713739427.png)
    - **Gateways** (comma separated).
4. Enter details:
  1. **Tunnel MTU** (MTU size for tunnel interface) (default: 1500)
  2. **Use LZO data compress Algorithm** checkbox
  3. **Ignore obtained default gateway** checkbox
  4. **HMAC/Message Digest Alg** drop-down, select one
  5. **Cipher Alg** drop-down, select one
5. On *Authentication Method*drop-down, select one.
  - **TLS**selection
    - **TLS Authentication Key** drop-down, select one
    - **TLS Authentication Direction** drop-down, select one
    - **CA Certificate** drop-down, select one
    - **Client Certificate** drop-down, select one
    - **Client Private Key** drop-down, select one
  - **Static Key**selection:
    - **Secret**drop-down, select one
    - **Local Endpoint (Local IP)**
    - **Remote Endpoint (Remote IP)**
  - ****Password****selection:
    - **Username**
    - **Password**
    - **CA Certificate**drop-down, select one.
  - **Password plus TLS**selection:
    - **Username**
    - **Password**
    - **TLS Authentication Key** drop-down, select one
    - **TLS Authentication Direction** drop-down, select one
    - **CA Certificate** drop-down, select one
    - **Client Certificate** drop-down, select one
    - **Client Private Key** drop-down, select one
6. Click **Save**.

### Edit Client

1. Go to *Network :: VPN drop-down :: SSL VPN :: Client*.
2. On *Subnet/Netmask* column, click a name.
3. Make changes, as needed.
4. Click **Save**.

### Delete Client

1. Go to *Network :: VPN drop-down :: SSL VPN :: Client*.
2. Select checkbox to be deleted.
3. Click **Delete**.

### Start Client VPN

1. Go to *Network :: VPN drop-down :: SSL VPN :: Client*.
2. Select checkbox next to client to be started.
3. Click **Start VPN**.

### Stop Client VPN

1. Go to *Network :: VPN drop-down :: SSL VPN :: Client*.
2. Select checkbox next to client to be stopped.
3. Click **Stop VPN**.

### Import OVPN

1. Go to *Network :: VPN drop-down :: SSL VPN :: Client*.
2. Click **Import OVPN** (displays dialog). ![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/image-1678713543954.png)
  1. Enter **Name**
  2. On **Network Connection** drop-down, select one (NONE, ETH0, ETH1, hotspot)
3. In *OVPN File*menu, select one
  - **Local Computer** radio button (expands dialog), click **Choose File**. Locate and select the file.
  - **Local System** radio button (expands dialog). On **OVPN filename** drop-down, select one.![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/image-1678713963185.png)
  - **Remote Server** radio button (expands dialog), enter details:![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/image-1678713932852.png)Enter **URL** (URL can be the IP address or hostname/FQDN. If using IPv6, use brackets [ ... ]. Supported protocols: FTP, TFTP, SFTP, and SCP.)  
Enter **Username** and **Password**(optional) Select **The path in url to be used as absolute path name** checkbox.
4. Click **Save**.