Local VPN Client settings

19 Mar 2025
Knowledge

Description

The VPN client is a lightweight application, running in the background on your computer, that enables you to make a secure VPN connection to your devices (IXrouter / IXagent) from within your browser. This article explains the available settings in the VPN Client.

Proxy server
Connection type
Advanced settings

Proxy server

In some networks a proxy server is used to connect to the internet. If you're unsure whether your (company) network uses a proxy server, please contact your IT administrator.

If your computer is located in such a network, the proxy server needs to be configured in the VPN Client settings (this article). If the IXrouter is located in such a network, the proxy server needs to be configured in the IXrouter settings. If both the IXrouter and your computer are in such a network, the proxy server needs to be configured in both.

The proxy server settings are not available in the IXON Portal mobile app.

Open the VPN Client settings.
Turn on Proxy server.

Enter the requested information (details below). If you're unsure what to enter, please contact your IT administrator.

Field	Description
Host	The IP address of the proxy server. Host names are not supported.
Port	The port number of the proxy server.
Proxy type	Only HTTP is supported.
Authentication method	The method of authentication of the proxy server. If there is no authentication, select None. If a username and password is required, select Basic and enter the credentials.

The configuration is automatically saved. No need to confirm the changes.

Connection type

The connection type can be changed to better suit certain conditions.

Connection type

Description

TCP (default)

The default connection type, using port number 443.

UDP

Benefit: may improve the data transfer speed when the VPN connection is unstable or slow.

In unstable or slow connections a phenomenon may occur that is called a TCP meltdown, which effectively causes delays and problems with the transfer of data. To prevent this from happening, the connection type can be changed to UDP.

A few important notes:

To fully benefit from this, the connection type needs to be set to UDP in both your VPN Client and in the IXrouter.
UDP uses a different port (1194). If you are unable to set up a VPN connection after changing to UDP, please contact your IT administrator and make sure that you are allowed to use this port. More information: How does the VPN client connect to the IXON Cloud?
UDP is not compatible with stealth mode. More information about stealth mode below.

Stunnel (stealth mode)

Benefit: enables the use of VPN in censored countries or networks, but may result in a minor decrease in VPN performance.

Some countries censor their inhabitants' internet connection and, as enforcement, have banned or restricted VPN usage. These include, but are not limited to: China, Egypt, Russia, Iran, United Arab Emirates, Oman, Turkey, Iraq, Turkmenistan, Belarus, North Korea, and Uganda.

Turning on stealth mode will legally bypass this, because IXON VPN can only be used to remotely access the machine network, not the internet itself. On a technical level this is done by encapsulating the OpenVPN traffic in HTTPS.

A few important notes:

Stealth mode uses a different port (8443). If you are unable to set up a VPN connection after changing to stealth mode, please contact your IT administrator and make sure that you are allowed to use this port. More information: How does the VPN client connect to the IXON Cloud?
Stealth mode is not compatible with UDP. More information about UDP above.

In some countries Stealth Mode won't work. Instead, the VPN connection will need to be registered at the provider or an authority before a VPN connection is possible.

In Pakistan, the Pakistan Telecommunication Authority (PTA) requires that every VPN connection to the outside world needs to be registered for VPN to work.

Information about the procedure can be found on the PTA website: https://www.pta.gov.pk/category/ip-whitelisting-&-vpn-registration. For assistance in this process, contact the PTA themselves or a local authority.

Part of the form that you will receive is about the VPN connection. Click below for help.

Form help

Parameters	A-end	B-end
IP addresses used	Enter the internet IP address of the local customer business	Contact us for an up-to-date list of IXON VPN server IP addresses
Location (Country)	Pakistan	The Netherlands
Business name	Enter the local customer business name	IXON B.V. Zuster Bloemstraat 20 5835 DW Beugen The Netherlands
Type of non-standard communication	MQTTS, OpenVPN
Type of compression	None
Rate of compression (in bits)	-
If standard VPN, then mention standard of VPN	OpenVPN
If VPN is proprietary, mention product detail	-

If you're in a different country that you know or suspect to have banned or restricted VPN usage (e.g. Egypt), contact your local Internet Service Provider (ISP) for assistance in allowing VPN for the edge gateway.

The UDP and Stealth mode options are not available in the IXON Portal mobile app.

Open the VPN Client settings.
At Connection type, select the desired connection type.
- If stunnel (stealth mode) is selected, the additional fields Host (127.0.0.1) and Port (9255) can be left unchanged.
The configuration is automatically saved. No need to confirm the changes. If you already had an active VPN connection, you'll need to reconnect to use the new connection type.

Advanced settings

OpenVPN dev-node

If you have multiple different VPN products and wish to use them at the same time or just don't want each service to use the same VPN network adapter (TAP adapter), then you can specify which adapter the VPN Client should use.

Do you wish to add a separate VPN adapter for IXON? Follow this article instead: How to add a second VPN adapter dedicated for IXON.

Open the VPN Client settings and turn on Advanced Mode in the bottom left corner.
Under OpenVPN, at dev-node, enter the name of the TAP adapter.
- The configuration is automatically saved. No need to confirm the changes. If you already had an active VPN connection, you'll need to reconnect to use the new adapter.

SSL

These settings control the SSL settings of the VPN Client and should remain unchanged.

Log

The severity level of the VPN Client log determines the amount of detail in its log. This log may be requested by IXON Support for troubleshooting purposes. Leave the severity level to its default value debug unless you're instructed otherwise by IXON Support.

Title

Local VPN Client settings

URL Name

Local-VPN-Client-settings

Local VPN Client settings

Proxy server

Connection type

Advanced settings

OpenVPN dev-node

SSL

Log

Introduction

Remote Access

Fleet Management

User Management

Customer Portal

Machine Data

Notifications

Hardware

Open Innovation

Security and Availablility

Release Notes

Knowledge

Local VPN Client settings

Article Details

Proxy server

Connection type

Advanced settings

OpenVPN dev-node

SSL

Log

Properties

Introduction

Getting Started

Remote Access

VPN connection

VPN Client

Web Access

Connect to your machine

Connection details

M2M Cloud Cluster

Fleet Management

Edge gateway registration

IXagent registration

WAN Settings

LAN Settings

Edge gateway firewall

General device settings

User Management

Setup

Invite and manage users

My account

External Identity And Access Management

Customer Portal

Custom login page and homepages

White labeling

Machine Data

Live Data

Historical Data

Data Source protocols

Pages, cards, and reports

Components

AI assistant

Notifications

Alarms & Notifications

Hardware

Edge gateways and accessories

Open Innovation

Custom development

Marketplace

Security and Availablility

Security

Availability

Release Notes

IXON Cloud

Knowledge

Highlighted Articles

Tips

Related Articles