How to use Central VPN Management (CVM)

To make CVM work, it requires configurations on both Central Router (VPN server) and the branch routers (VPN Clients). For DrayOS router, a central router can manage up to 8 branch routers.

Central Router Configuration

1. Go to Central VPN Management >> General Setup, in General Settings tab, 

1. Enable CVM SSL Port, and enter a port number
2. Select a WAN interface/ IP for the remote routers to connect
3. Write down the URL of the ACS server. We will need this for the branch router configuration.
4. (Note: URL with https and http is for CVM SSL Port and CVM Port respectively.)
5. Define the Username and Password　

2. Go to IPsec tab, select the Local Subnet to establish LAN-to-LAN VPN connection. Click OK to save.

3. Go to System Maintenance >> Management, make sure the CVM Port is enabled.

Branch Router (CPE) Configuration

1. Go to System Maintenance >> TR-069

1. Select ACS Server On Internet
2. Enter the URL of the ACS server copied from the central router.
3. Enter Username and Password as the same as in CVM settings of the central router
4. Enable CPE Client
5. Enable Periodic Inform Settings
6. Click OK to save

2. Go to System Maintenance >> Management, enable Allow management from the Internet and make sure TR069 Server is enabled.

After the above configuration, the branch router will register to the Central Router, and we should see the device appears in the Unmanaged Device List of the Central Router.

Editing the Managed Device List

Now the Central Router should see the branch router at Central VPN Management >> CPE Management >> Managed Devices List. To add the router to Managed Device List,

1. select the device from Unmanaged Devices List,
2. enter a Description Name and its Location,
3. click Add to move it to Managed Devices List.

After that, the router will appear in Managed Devices List with its name and IP address. To check the detailed information, double-click on it.

If you have entered the exact address, you may check its location in Google Map tab.

Establishing VPN connections

1. To establish VPN connection: Go to Central VPN Management >> VPN Management. The VPN Management page shows all the devices in the Managed Device List and their connection status.

2. Click on a device to show the VPN type options, then click on one of the options to establish the VPN connection. In PPTP, IPsec and SSL, the system will give a username and password automatically; however, Administrator could change the encryption methods by choosing “Advanced.”

3. Wait a few seconds and refresh the page, we will see the VPN connection is on, and the connection information is in the CPE VPN Connection List below.

4. After that, both the branch router and central router will create a LAN-to-LAN profile in VPN and Remote Access >> LAN to LAN. Network Administrator could also change the VPN type there, and the settings will be applied to the LAN-to-LAN profile automatically.

Branch Router (CPE) Maintenance

If Network Administrator wants the Brach router to back up its configuration once a day, it can be done from the central router with CVM.

1. Create a schedule for the configuration backup: Go to Application >> Schedule, click on an index number to add a schedule profile.

1. Enable Schedule Setup
2. Select the Start Date and Start Time for the configuration backup
3. Set Duration Time to 5 minutes. (NOTE: Longer duration gives router more retrying time in case that the branch router loses connection with the central router.)
4. Select How Often does the configuration backup should happen.

2. Go to Central VPN Management >> CPE Management >> CPE Maintenance, make sure there is a USB disk connected to the router.

3. Add a CPE Maintenance profile: In the CPE Maintenance page, click on an index number to add a new profile.

1. Enter the Profile Name.
2. Check Enable
3. For Device Name, select the MAC address of the branch router.
4. Select Config Backup for Action Type
5. Enter the Schedule profile index
6. Click OK to save

4. After the configuration backup, go to USB Application >> File Explorer to check if the configuration files have been saved successfully.