Embed Size (px)
Citation preview
VikingVPNGuideMacOSX(10.8+)
TableOfContents
1:VPNQuestionsanswered2:InstallingtheOSXClient3:ConnectingwiththeOSXClient4:ReportingProblems
Version1.0:10/27/2010InformationServices&Technology
1:VPNQuestions(andanswers)WhatisaVPN?VPNisshortfor“VirtualPrivateNetwork”.It'sawaytoconnecttoasecurenetwork(suchasCSU's)overaninsecurenetwork(suchastheInternet,oracoffeeshop'sWiFi).
WhywouldIneedit?Toconnecttoyourdesktop(workfromhome,accessfiles,etc.).Toremotelyaccessnon-publicpartsofCSU'snetworkwhileyou'reoff-campus.ToobtainastaticIPaddresswhenusingCSU'swirelessnetworkandyouneedspecialfirewallaccess.Howdoesitwork?OpenVPNusesSSLtoencryptyourtraffic.Thisisthesameunderlyingtechnologythatisusedinwebbrowserstosecureonlineshopping/banking.Technically,itusestheBlowfishstreamcipherwith128bitkeyswhicharechangedhourly.Whyisthisbetter?TheVPNactsasa“gatekeeper”toCSU'sprivatenetwork.Ifyoucurrentlyhaveremoteaccessenabled,anyoneintheworldcanattempttoguesspasswordsonyourcomputer(thishappensonadailybasis).TheuseofaVPNallowsCSUtomitigatethisrisk.CanIstillusetheInternetwhileI'mconnected?Yes.OnlyspecifcnetworksareroutedviatheVPNclientwhenyou'reconnected.Technically,thisisknownas“splittunneling”.Willitworkanywhere?Probably.OpenVPNhastwomodes: UDP:Thedefault,andusesDTLS(datagramTLS).Moreefficient,butsometimesblockedbyISPs. TCP:UsesthestandardSSLport(TCP/443).Hardlyanyoneblocksthis.BreaksUDPapplications.WillitworkonmyiPhone/iPad/?YoucandownloadtheOpenVPNclientfromboththeAppStoreorAndroidMarketandconfigureitwiththesameconfigurationfilelistedbelow.Thinkofsomethingweforgottoputhere?Letusknow!..email“[email protected]”withquestions.
2:VPNClientInstallationforMacOSX(10.8+)Usingawebbrowser,goto:
https://openvpn.csuohio.edu
Loginwithyour7-digitCSUIDnumberandCampusPASS.
Afterauthentication,youwillneedtodownloadthe“client.ovpn”file.ThisistheconfigurationfilethatisuniquetoyouruserID.
Clickonthelinkfor“client.ovpn”.Followthedialogtosavethefile(rememberwhereyousaveit,youwillneeditlater).
Rememberwhereyousavethisfile.
TheOpenVPNclientforMacintoshoperatingsystemsiscalled“TunnelBlick”.
https://tunnelblick.net/(Clickon“downloadlateststablerelease”)
AfterdownloadingTunnelBlick,double-clickthe.dmg(diskimage)filetoopenit.
Youshouldseeadialogsimilartothis.
DoubleclickontheTunnelBlickiconandfollowtheinstallationwizard
NowthatwehaveTunnelblickinstalled,wecanbeginconfiguringit.
Findtheclient.ovpnfilewedownloadedearlieranddoubleclickonit.Onceprompted,chooseOnlyMetoinstalltheCSUvpnprofileonyoursystem.
Note:IfyouhavetheCiscoAnyConnectclientinstalled,youmust“deflate”thatinstallationtoavoidanerror.
3:ConnectingwiththeMacOSXOpenVPNClient
DoubleclicktheLaunchTunnelblickicon(orfinditunder“Applications”inFinder),andyoushouldseeanewiconinyourstatusbarthatlookslikeatunnel.Clickonitandthenchoose“Connect‘client’”highlightedbelow
YouwillbepromptedforyourUsernameandPassword.
YourUsernameisyour7digitCSUIDnumber
YourPasswordisyourCampusPASS.
Onceyouhaveconnectedsuccessfullytheiconwillchangetoanopentunnelshown
YoumayreceivethefollowingWarning:
Thisisnormal,asmentionedintheQAsectionabove,weareonlyroutingCSUdestinedtrafficthroughtheVPN.Therefore,allothertrafficwillstillroutethroughyourserviceprovidersoyourpublicipaddresswillappearthesame.
4:ReportingErrorsSometimesthingsjustneverworkquiteliketheinstructionssaytheydo..it'sokay,we'reheretohelp.
TheIS&Thelpdeskcanresolvemanyproblems(passwords,etc.)overthephonebycalling(216)687-5050,howevergatheringadditionalinformationaboutexactlywhat'sbrokenishelpful.
Thebestwaytoshowuswhat'snotworkingistotakea“screenshot”oftheerrormessageyou'regetting,orwhereyou'regettingstuckduringtheinstallation,configuration,oruseoftheVPNclient.
Todothis,usethekeycombination:“Apple”+”Shift”+”3”
Afterdoingtheabove,ascreencapturewillbeautomaticallysavedtoyourDesktop.
Thefilewillbenamed“Screenshot(date).png”wheredateisthecurrentdate/time.
Emailusthepictureofwhat'sbrokenat:[email protected].
Pleasedoyourbesttodescribethecircumstancessurroundingtheerror.
