For most VPN client programs, the Intra2net system can generate ready-made configuration files directly from the VPN configuration on the Intra2net system. These only need to be imported on the client. To do this, proceed as follows:
Make sure that the preparatory steps have all been carried out as described in 60. Chapter, „Preparing the configuration on the Intra2net system“.
Go to the menu "" and create a new connection. Select the type "".
Give the connection a meaningful name, e.g. the name of the employee or device that is to connect. If an employee has several devices that should be able to establish VPN connections, you need a separate connection configuration for each device.
Select the local networks to which the VPN client should establish the connection.
Here you can choose whether only the packets to configured networks should run through the VPN tunnel or whether all connections from the client to the local networks and the Internet should run through the VPN tunnel and the Intra2net system. For the latter, select the "" option "", for all other cases select the relevant networks.
The system then automatically creates a key for the client, the connection configuration and the appropriate configuration file for the client. You can either download the configuration file for the client as a file and transfer it to the client or take a photo of the displayed QR code with the client.
If required, you can also export the configuration for the client again later using the "" link or display the QR code.
![[Caution]](../images/admon/caution.png) | Caution |
|---|---|
The configuration file and the QR code contain the private key for the client and the pre-shared key for the connection. You should therefore ensure that access is strictly controlled and that the file is only transmitted in encrypted form. |