Changes for page VPN Access
Last modified by Thomas Coelho (local) on 2024/09/03 14:41
From version 3.1
edited by Thomas Coelho
on 2022/10/18 14:57
on 2022/10/18 14:57
Change comment:
There is no comment for this version
To version 1.2
edited by Thomas Coelho
on 2022/10/18 14:55
on 2022/10/18 14:55
Change comment:
There is no comment for this version
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -8,12 +8,11 @@ 8 8 9 9 It is available for Windows and MacOS too. 10 10 11 -=== Install OpenVPN === 11 +=== Install OpenVPN === 12 12 13 - 14 14 It is not part of the default installation, but can easily installed using apt. Enter the following commands: 15 15 16 - {{{sudo apt install openvpn}}}15 + sudo apt install openvpn 17 17 18 18 This requires to enter your password to get super user privileges. 19 19 ... ... @@ -24,7 +24,8 @@ 24 24 This configuration routes all traffic trough ITP. This is useful if you want to download papers, which are restricted to the university network. 25 25 The second examples only routes the traffic going directly to the ITP trough the VPN and leaves your default gateway untouched. The only difference is the missing 'redirect-gateway' statement [http://th.physik.uni-frankfurt.de/~thw/vpn/all-via-itp.ovpn] 26 26 27 -{{{client 26 +<pre> 27 +client 28 28 dev tun 29 29 proto udp 30 30 nobind ... ... @@ -36,7 +36,7 @@ 36 36 ca private-ca-itp.crt 37 37 # Comment this, if you don't want to redirect the default gateway 38 38 redirect-gateway def1 39 - }}}39 +</pre> 40 40 41 41 Download our CA (Certificate of Authority) [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and store it in the same place. This file is needed for the verification of the authenticity of the server. 42 42 ... ... @@ -59,7 +59,7 @@ 59 59 === Start the VPN connection === 60 60 61 61 Open a terminal and change to the path where the vpn config file is stored. Start the connection with 62 - 62 + 63 63 sudo openvpn itp.ovpn 64 64 65 65 where itp.ovpn is the name of the config file. openvpn needs root access, therefore you must enter your local password for sudo. After this you have to enter your ITP credentials (Username and Password). ... ... @@ -77,13 +77,13 @@ 77 77 Fri Dec 7 15:03:02 2012 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 78 78 Fri Dec 7 15:03:02 2012 /sbin/ifconfig tap0 10.63.131.1 netmask 255.255.0.0 mtu 1500 broadcast 10.63.255.255 79 79 Fri Dec 7 15:03:02 2012 Initialization Sequence Completed 80 -</pre> --80 +</pre> 81 81 82 82 Termiate the session by pressing Ctrl-C in this terminal. 83 83 84 -== 84 +==OpenVPN for Windows 10== 85 85 86 -At the time of writing, you can download OpenVPN on ' [[https:~~/~~/openvpn.net/community-downloads/'.>>https://openvpn.net/community-downloads/'.]]86 +At the time of writing, you can download OpenVPN on 'https://openvpn.net/community-downloads/'. 87 87 Download the exe-file for Windows 10 and install OpenVPN. 88 88 Start 'OpenVPN GUI'. You will get a message that no config file was found. But starting 'OpenVPN GUI' creates a directory to put the config files into. 89 89 ... ... @@ -107,7 +107,7 @@ 107 107 108 108 [[File:Openvpn-win10-4.png|center]] 109 109 110 -== 110 +==MacOS (tunnelblick)== 111 111 112 112 First download the itp certificate [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and configuration file [http://th.physik.uni-frankfurt.de/~thw/vpn/all-via-itp.ovpn]. If a '.txt' was added to the configuration file name, remove the ending '.txt'. At the end the two files should normally be namend 'private-ca-itp.crt' and 'all-via-itp.ovpn'. 113 113 ... ... @@ -131,12 +131,11 @@ 131 131 132 132 In this case the configuration file and the certificate are located in '/Library/Application Support/Tunnelblick/Shared/all-via-itp.tblk/Contents/Resources'. If you need to edit or replace the configuration file or the certificate, this can be done in this directory. If there is just the configuration file in the directory, then copy the certificate to the in the log mentioned directory. 133 133 134 -== 134 +==Problems changing the vpn settings in tunnelblick (macOS)== 135 135 136 -There were problems reported when switching in tunnelblick from the old vpn (vpn.th.physik.uni-frankfurt.de with tap) to the new one (vgw.itp.uni-frankfurt.de with tun). You also have this problem if, after applying the new configuration file itp.ovpn, the vpn does not work and the output contains a line containing 'vpn.th.physik.uni-frankfurt.de'. Search the output for a line beginning with '--config' and ending on '.ovpn'. This line specifies which configuration file (.ovpn) is used to establish the vpn connection and where it is located. Edit this file to have the same content as the itp.ovpn [http://th.physik.uni-frankfurt.de/~thw/vpn/itp.ovpn] (most likely the lines 2, 5 and 6 need to be edited). --136 +There were problems reported when switching in tunnelblick from the old vpn (vpn.th.physik.uni-frankfurt.de with tap) to the new one (vgw.itp.uni-frankfurt.de with tun). You also have this problem if, after applying the new configuration file itp.ovpn, the vpn does not work and the output contains a line containing 'vpn.th.physik.uni-frankfurt.de'. Search the output for a line beginning with '--config' and ending on '.ovpn'. This line specifies which configuration file (.ovpn) is used to establish the vpn connection and where it is located. Edit this file to have the same content as the itp.ovpn [http://th.physik.uni-frankfurt.de/~thw/vpn/itp.ovpn] (most likely the lines 2, 5 and 6 need to be edited). 137 137 138 -== Warning in tunnelblick (macOS) == 139 - 138 +==Warning in tunnelblick (macOS)== 140 140 If you get the following warning, you can check the box and click OK. 141 141 [[File:Tb-warn.png|center|500px]] 142 142 ... ... @@ -145,3 +145,4 @@ 145 145 When importing the configuration, the crt file is copied to somewhere in the system (see above). If you replace the crt file in your download or whatever folder it will not be used. The simpliest way to fix this is to delete the configuration from Tunnelblick and reimport it. Make sure the option "Route all traffic through the VPN" is checked (see instrcutions above). 146 146 147 147 This is needed after the replacment of the CA certificate in Nov 2020. This lives for 5 years. Next replacment will be in 2025, if we are still using openVPN then. 147 +