How to set up VPN connection to the server

From Supporting Role Wiki
Jump to navigationJump to search

We use OpenVPN as a VPN system. There is client software for Windows, OS-X and Linux, and it works very well from behind firewalls, especially from places like China, and hotels with cheap routers.

OpenVPN can only be enabled when our server is set to be the network manager. In most cases we do this when we install the server. We also have to add the users who want to use VPN added to the VPN security group.

Installing the software

On our servers there is a share called NETLOGON. In there is a folder called OPENVPN, and in there are installers (client software) and configuration files for both Windows and OS-X computers. You can also download the software from the OpenVPN web site.

Copying the Config File

Windows

Basic Install

Configuration

  • Download configuration from Remote Web Access > Shared Files > Netlogon > OPENVPN > vpn-to-office.ovpn
  • Save it on the Desktop
  • Then go on Desktop, cut the file
  • Paste the vpn-to-office.ovpn into the OpenVPN config folder on your PC usually:
    • C:\Program Files\OpenVPN\config\ for 64bits version
    • or C:\Program Files (x86)\OpenVPN\config\ for 32bits

Connect

  • Right-click on the openvpn-gui systray icon (if it does not appears, click on OpenVPN GUI program) you will have an option to connect.
  • The software will prompt you for a username and password. This is the same as you normally use to access the server.

OS X

Basic Install

Configuration

Copy the two files called fabit.ca.crt and vpn-to-office-AppleMac.conf from the OpenVPN folder in the NETLOGON share into the OpenVPN config folder on your Mac (usually ~/Library/Application Support/Tunnelblick/Configurations (~ means your home directory)). To launch Tunnelblick after setting up configuration and other files, double-click "Launch Tunnelblick" in the Configurations folder, or double-click Tunnelblick in the Applications folder. Once Tunnelblick has been launched, you control it from the Tunnelblick icon in the Status Bar at the top of your screen. The Tunnelblick icon is usually placed between the time and the Spotlight icon. When no VPN connection is active, the icon is dark, indicating a closed tunnel. If you click on the icon, you'll see a drop down menu. One of these options is "connect". The software will prompt you for a username and password. This is the same as you normally use to access the server.