Skip to Content

Changes for page VPN Access

Last modified by Thomas Coelho (local) on 2024/09/03 14:41
From version 3.1
edited by Thomas Coelho
on 2022/10/18 14:57
Change comment: There is no comment for this version
To version 1.2
edited by Thomas Coelho
on 2022/10/18 14:55
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -8,12 +8,11 @@
8 8  
9 9  It is available for Windows and MacOS too.
10 10  
11 -=== Install OpenVPN ===
11 +=== Install OpenVPN ===
12 12  
13 -
14 14  It is not part of the default installation, but can easily installed using apt. Enter the following commands:
15 15  
16 -{{{ sudo apt install openvpn}}}
15 + sudo apt install openvpn
17 17  
18 18  This requires to enter your password to get super user privileges.
19 19  
... ... @@ -24,7 +24,8 @@
24 24  This configuration routes all traffic trough ITP. This is useful if you want to download papers, which are restricted to the university network.
25 25  The second examples only routes the traffic going directly to the ITP trough the VPN and leaves your default gateway untouched. The only difference is the missing 'redirect-gateway' statement [http://th.physik.uni-frankfurt.de/~thw/vpn/all-via-itp.ovpn]
26 26  
27 -{{{client
26 +<pre>
27 +client
28 28  dev tun
29 29  proto udp
30 30  nobind
... ... @@ -36,7 +36,7 @@
36 36  ca private-ca-itp.crt
37 37  # Comment this, if you don't want to redirect the default gateway
38 38  redirect-gateway def1
39 -}}}
39 +</pre>
40 40  
41 41  Download our CA (Certificate of Authority) [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and store it in the same place. This file is needed for the verification of the authenticity of the server.
42 42  
... ... @@ -59,7 +59,7 @@
59 59  === Start the VPN connection ===
60 60  
61 61  Open a terminal and change to the path where the vpn config file is stored. Start the connection with
62 -
62 +
63 63   sudo openvpn itp.ovpn
64 64  
65 65  where itp.ovpn is the name of the config file. openvpn needs root access, therefore you must enter your local password for sudo. After this you have to enter your ITP credentials (Username and Password).
... ... @@ -77,13 +77,13 @@
77 77  Fri Dec 7 15:03:02 2012 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
78 78  Fri Dec 7 15:03:02 2012 /sbin/ifconfig tap0 10.63.131.1 netmask 255.255.0.0 mtu 1500 broadcast 10.63.255.255
79 79  Fri Dec 7 15:03:02 2012 Initialization Sequence Completed
80 -</pre>--
80 +</pre>
81 81  
82 82  Termiate the session by pressing Ctrl-C in this terminal.
83 83  
84 -== OpenVPN for Windows 10 ==
84 +==OpenVPN for Windows 10==
85 85  
86 -At the time of writing, you can download OpenVPN on '[[https:~~/~~/openvpn.net/community-downloads/'.>>https://openvpn.net/community-downloads/'.]]
86 +At the time of writing, you can download OpenVPN on 'https://openvpn.net/community-downloads/'.
87 87  Download the exe-file for Windows 10 and install OpenVPN.
88 88  Start 'OpenVPN GUI'. You will get a message that no config file was found. But starting 'OpenVPN GUI' creates a directory to put the config files into.
89 89  
... ... @@ -107,7 +107,7 @@
107 107  
108 108  [[File:Openvpn-win10-4.png|center]]
109 109  
110 -== MacOS (tunnelblick) ==
110 +==MacOS (tunnelblick)==
111 111  
112 112  First download the itp certificate [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and configuration file [http://th.physik.uni-frankfurt.de/~thw/vpn/all-via-itp.ovpn]. If a '.txt' was added to the configuration file name, remove the ending '.txt'. At the end the two files should normally be namend 'private-ca-itp.crt' and 'all-via-itp.ovpn'.
113 113  
... ... @@ -131,12 +131,11 @@
131 131  
132 132  In this case the configuration file and the certificate are located in '/Library/Application Support/Tunnelblick/Shared/all-via-itp.tblk/Contents/Resources'. If you need to edit or replace the configuration file or the certificate, this can be done in this directory. If there is just the configuration file in the directory, then copy the certificate to the in the log mentioned directory.
133 133  
134 -== Problems changing the vpn settings in tunnelblick (macOS) ==
134 +==Problems changing the vpn settings in tunnelblick (macOS)==
135 135  
136 -There were problems reported when switching in tunnelblick from the old vpn (vpn.th.physik.uni-frankfurt.de with tap) to the new one (vgw.itp.uni-frankfurt.de with tun). You also have this problem if, after applying the new configuration file itp.ovpn, the vpn does not work and the output contains a line containing 'vpn.th.physik.uni-frankfurt.de'. Search the output for a line beginning with '--config' and ending on '.ovpn'. This line specifies which configuration file (.ovpn) is used to establish the vpn connection and where it is located. Edit this file to have the same content as the itp.ovpn [http://th.physik.uni-frankfurt.de/~thw/vpn/itp.ovpn] (most likely the lines 2, 5 and 6 need to be edited).--
136 +There were problems reported when switching in tunnelblick from the old vpn (vpn.th.physik.uni-frankfurt.de with tap) to the new one (vgw.itp.uni-frankfurt.de with tun). You also have this problem if, after applying the new configuration file itp.ovpn, the vpn does not work and the output contains a line containing 'vpn.th.physik.uni-frankfurt.de'. Search the output for a line beginning with '--config' and ending on '.ovpn'. This line specifies which configuration file (.ovpn) is used to establish the vpn connection and where it is located. Edit this file to have the same content as the itp.ovpn [http://th.physik.uni-frankfurt.de/~thw/vpn/itp.ovpn] (most likely the lines 2, 5 and 6 need to be edited).
137 137  
138 -== Warning in tunnelblick (macOS) ==
139 -
138 +==Warning in tunnelblick (macOS)==
140 140  If you get the following warning, you can check the box and click OK.
141 141  [[File:Tb-warn.png|center|500px]]
142 142  
... ... @@ -145,3 +145,4 @@
145 145  When importing the configuration, the crt file is copied to somewhere in the system (see above). If you replace the crt file in your download or whatever folder it will not be used. The simpliest way to fix this is to delete the configuration from Tunnelblick and reimport it. Make sure the option "Route all traffic through the VPN" is checked (see instrcutions above).
146 146  
147 147  This is needed after the replacment of the CA certificate in Nov 2020. This lives for 5 years. Next replacment will be in 2025, if we are still using openVPN then.
147 +