← amrhein.info Deutsch
Manual · 03

VPN

With the VPN, you can securely connect the SD Migrator to your home network while on the road, e.g. to your own pfSense, or to a VPN provider. You will find the feature under Settings → VPN (OpenVPN).

Profiles

You can create several profiles, e.g. “Home” and “NordVPN”. Exactly one profile is always active.

The profile list shows the result of the last check for each profile:

  • ✔ – checked
  • ✘ – failed, with error message
  • ○ – not yet checked

If you tap Connect on a different profile, that profile becomes active.

Note: Automatic connection is disabled for now. The VPN only connects when you tap the button – and never when the device starts up.

Importing a profile from a file

  1. Open Settings → VPN (OpenVPN).
  2. Select your .ovpn file, e.g. the pfSense export “Android/Inline” or a file from NordVPN.
  3. If the profile refers to further files (with CyberGhost, e.g. ca.crt, client.crt and client.key), select these at the same time. They are incorporated into the profile.
  4. Enter your credentials (see below).

Creating a profile manually

Alternatively, you can create a profile yourself. To do so, enter:

  • Server
  • Port
  • UDP or TCP
  • CA certificate
  • optionally tls-auth or tls-crypt

Credentials

Enter your username and password. The password is stored securely on the device and is never shown in the interface again.

Caution: For security reasons, the SD Migrator rejects profiles that try to start programs or read or write files (e.g. directives such as up, script-security, plugin or management). Remove any such lines from your profile file if necessary.

Choosing routing

You decide which traffic goes through the VPN:

  • Home network only – only the networks specified by the VPN server go through the VPN. You can also add further networks. Internet traffic goes direct.
  • All traffic – all traffic goes through the VPN, including that of devices on the SD Migrator’s hotspot.

Networks that the SD Migrator itself is currently connected to always remain reachable locally. Example: your pfSense routes the home network into the tunnel, but the SD Migrator is currently at home on the home network – the home network still remains directly reachable.

Connecting

  1. Connect your tablet or browser to the SD Migrator’s Wi-Fi hotspot.
  2. Open Settings → VPN (OpenVPN).
  3. Tap Connect on the profile you want.

Caution: You can only connect if your tablet or browser is on the SD Migrator’s Wi-Fi. Via the home network, the VPN would cut exactly the connection you are using to operate the device.

Reading the status

When a connection is active, the status bar shows:

  • connected profile
  • server
  • tunnel address
  • gateway
  • DNS
  • networks routed through the VPN
  • connected since

In addition, you will see a 🔒 and the name of the active profile in the header at the top.