How to set up VPN connection to the server
We use OpenVPN as a VPN system. There is client software for Windows, OS-X and Linux, and it works very well from behind firewalls, especially from places like China, and hotels with cheap routers.
OpenVPN can only be enabled when our server is set to be the network manager. In most cases we do this when we install the server. We also have to add the users who want to use VPN added to the VPN security group.
Installing the software
On our servers there is a share called NETLOGON. In there is a folder called OPENVPN, and in there are installers (client software) and configuration files for both Windows and OS-X computers. You can also download the software from the OpenVPN web site.
There are some guides here for the following versions
Copying the Config File
Windows
Copy fabit.ca.crt and vpn-to-office.ovpn from the NETLOGON share into the OpenVPN config folder (usually C:\Program Files\OpenVPN\config\ ). Now, when you right-click on the openvpn-gui systray icon you will have an option to connect. The software will prompt you for a username and password. This is the same as you normally use to access the server.
OS X
Copy fabit.ca.crt and vpn-to-office-AppleMac.conf from the NETLOGON share into the OpenVPN config folder (usually ~/Library/Application Support/Tunnelblick/Configurations (~ means your home directory)). To launch Tunnelblick after setting up configuration and other files, double-click "Launch Tunnelblick" in the Configurations folder, or double-click Tunnelblick in the Applications folder. Once Tunnelblick has been launched, you control it from the Tunnelblick icon in the Status Bar at the top of your screen. The Tunnelblick icon is usually placed between the time and the Spotlight icon. When no VPN connection is active, the icon is dark, indicating a closed tunnel. If you click on the icon, you'll see a drop down menu. One of these options is "connect". The software will prompt you for a username and password. This is the same as you normally use to access the server.
