Setting up and using MILESIGHT VPN

Discovering the menus

“Device” menu

View information about Milesight devices connected to MilesightVPN. You can change the “Name” and “Remote Subnet” when the subnet allocation method is “Manual”.

Characteristic	Description
Name: Name	Show device name. Users can click on it to change the name.
Status: Status	Shows the connection status of the device.
Serial number: Serial number	Displays the serial number of the device.
Virtual IP: Virtual IP	View the device's virtual IP address.
Real IP: Real IP	Shows the actual IP address of the device's WAN/cellular port.
Time: Hour	Show the connection time of the control device.
Remote subnet: Remote subnet	Show subnet segment and device mask. Users can click on it to edit it.
Historical: See the history	Click to view the historical statistics record.
Clear: Erase	Click to clear logout device records.

.

“Control” menu

View information about control devices (PC, laptop, etc.) connected to MilesightVPN. You can change the “Name” and “Remote Subnet” for subnet allocation

Characteristic	Description
Name: Name	Displays the name of the control device.
Status: Status	Displays the connection status of the control device.
Virtual IP: Virtual IP	View the device's virtual IP address.
Real IP: Real IP	Show the real IP address of the controlling device.
Time: Hour	Show the connection time of the control device.
Clear: Erase	Click to clear logout device records.

“VPN” menu

Configure basic VPN settings and import the extension license. After changing VPN settings, please reconnect Milesight devices for it to take effect.

Characteristic	Description	Default value
Listen IP: Listening IP	Enter the MilesightVPN IP address.	NULL
Protocol: Protocol	Select the communication protocol (TCP/UDP).	UDP
Port	Port of service	1194
Client Subnet: Client subnet	Set the virtual address pool segment and mask.	10.8.0.0/16
Subnet allocation method: Subnet allocation method	Select from “Manual” or “Auto” options. Manual: Manually change the remote subnet from the Device page Auto: Automatically configure the remote subnet via “Subnet behind the customer. Manual Subnet Behind the customer	Manual
Subnet behind client: Subnet behind the client.	Configure the subnet of the Milesight device.	NULL
Ping interval: Ping interval	Set the ping interval (in seconds)	60
Ping Restart: Ping reconnection	Reconnect interval (in seconds)	150
Compression	Select from the “None” or “LZO” options. LZO: Lempel-Ziv-Oberhumer (or LZO) is a lossless algorithm that compresses data to ensure high decompression speed.	LZO
Encryption: Encryption	Select from "NONE", "BF-CBC", "DES-EDE3-CBC", "AES-128-CBC", "AES-192-CBC" and "AES-256-CBC".	BF-CBC
Authorization Code: authorization code	Enter the authorization code for Milesight device connection (5 to 31 alphanumeric combinations).	Random
License: License	Import the license to expand managed devices.	None

“Certificate” menu

After clicking "Create and Upload", it will generate a unique ovpn file with control certificate

devices to connect to MilesightVPN.

“Account” menu

You can edit user account information on this page

Characteristic	Description
Username: Identifier	Enter a new username. You can use characters like az, 0-9, "_", "-", "$". The first character cannot be a number
Old Password: Old password	Enter the old password
New Password: New password	Enter the new password to change the password
Confirm New Password: Confirm the new password	Confirm the new password.

“Ping Tool” menu

The Ping tool is used to check the network connection between MilesightVPN and other devices.

Application examples

Connect Milesight devices to MilesightVPN

1. Make sure the network between the routers and the MilesightVPN platform is functional.
2. Go to the “ System → Device Management → MilesightVPN ” page to fill in the MilesightVPN server information.

• Server: address or domain name of the MilesightVPN server
• Port: 18443 (fixed)
• Authorization code: this code can be found on the VPN page of the MilesightVPN server
• Device name: user-defined name

3. Click "Connect" and after a while you can check that it shows "connected".

The router connection status can also be checked on MilesightVPN's web GUI.

Note: Time synchronization is required between MilesightVPN and routers.

4. Go to " Network → Firewall → Security " to enable remote access services if you need to access routers remotely. You can also change service ports here.

Connect the device to MilesightVPN

This example mainly shows how to connect a Windows 10 laptop to the MilesightVPN platform.

1. Install the OpenVPN software. You can select OpenVPN Connect or Community OpenVPNasOpenVPN client.
2. After installation, open Windows Service Manager to ensure OpenVPN services are running
3. Go to the MilesightVPN “Certificate” page, enter a certificate name, click “Create and Upload” to download the certificate.

Noticed :

• If the IP address of the Milesight VPN server is not included in the certificate, check that you have entered it correctly in the “VPN” menu

• If you use a default certificate, all traffic will go through VPN tunnels and the laptop may not have access to the Internet. In order to set a specific tunnel and not affect normal Internet access, please open the certificate and replace "redirect-gateway defl" with "route 192.168.0.0 255.255.0.0" (192.168.0.0 is the routers subnet Milesight).

4. Run the OpenVPN software with the certificate

Run OpenVPN GUI, select this file and click Connect.

2) If you are using OpenVPN Connect, run the software and import the certificate, then connect the device to MilesightVPN.

Communication with devices

Method 1: Virtual IP Access

Users can use the virtual IP address to access the router from a laptop.

If you need to access devices under the router's subnet, you can add a port mapping rule in the router's web GUI and use the address: “Virtual IP:port” (example 10.8.0.2:80 ) to access the device.

Method 2: Real IP Access

Users can use a real subnet IP (bridge0) to access the router from a laptop. To do this, make sure the subnet is different from your laptop and your laptop's routing table must include the subnet.

You need help ?

Our pre-sales team is available to answer your questions and guide you through your projects.

View the products on our shop by clicking below:

You can contact us directly, we can define a tailor-made solution and equipment with you thanks to our network of partners.

Contact form

sales@sparwan.com

02 51 99 13 03