Differences between revisions 6 and 38 (spanning 32 versions)
⇤ ← Revision 6 as of 2015-01-21 17:11:13 →
Size: 919
Editor: scot
Comment:
← Revision 38 as of 2023-07-10 21:27:26 → ⇥
Size: 2725
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
= The school of Computing uses OpenVPN = = The School of Computing uses OpenVPN =
Line 3: Line 3:
If you have an account on the CS domain, you may access campus resources through our VPN server. If you have an account on the CS domain, you may access campus resources through our VPN server.

== IMPORTANT NOTE: ==
 1. As of Fall 2023, you must have '''OpenVPN GUI 2.6.X''' or later installed or your connection may fail to connect. If you get a fail to connect message, '''uninstall your version of OpenVPN and install the one below.''' If you have a MAC, make sure you are on 2.6 or later.
 1. We are using 2FA!!! If you had an account before, you probably don't anymore. See Dr. A about getting an account - needs to be in person.

== Everyone Prerequisite ==

 1. Install an authenticator app if you don't have one (Most of you will have the Microsoft Authenticator app installed.
 1. In the Authenticator app, click the + to add a new account.
 1. Select "Other Account..."
 1. Point your phone at the QR code that you received (or are looking at because you are in my office)
 1. It recognized it? Good! Move on to your specific platform directions below.
Line 7: Line 19:
 1. Install: [[attachment:firewall-udp-1194-install.exe]]
 1. Download [[attachment:firewall-udp-1194-config.ovpn]] and save it in the {{{C:\Program Files (x86)\OpenVPN\config}}} folder
 1. Restart OpenVPN GUI		  1. Install: [[attachment:OpenVPN2023-x64.exe|64-bit Version]], [[attachment:OpenVPN2023_x86.exe|32-bit Version]]
 1. '''Run OpenVPN GUI as administrator''' This is required or your connection will not work.
Line 11: Line 22:
 1. Enter your CS username and Password
 1. If you have problems try again running the program as administrator 		  1. Enter your pin followed by your Time-based One Time Password (TOTP) from the Authenticator app
 1. If you have problems try again running the program as administrator
Line 14: Line 25:
== MAC and Other == == OS X/Android and others ==
Line 16: Line 27:
 1. Download and install tunnelblick from https://code.google.com/p/tunnelblick/ or use your favorite OpenVPN client
 1. Download [[attachment:firewall-udp-1194-config.ovpn]]
 1. Double click the file and it will start OpenVPN with the configuration.
 1. Connect or disconnect using the icon running on the right side of the menu bar. 		For Mac:

 1. Download and install Tunnelblick from https://tunnelblick.net/ or use your favorite OpenVPN client
 1. Download the .opvn file [[attachment:OpenVPN2023.ovpn]]
 1. Double-click the .ovpn file. This will add the configuration to Tunnelblick.
 1. Connect or disconnect using the icon running on the right side of the menu bar.

For Linux/Android/Others:
 1. [[https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/|Ubuntu and somewhat generic instructions]]

= Troubleshooting =

'''Problem''': Your connection yo-yo's up and down every 60 seconds.

'''Solution''': You are connected to the VPN with two computers using the same account. Disconnect from the VPN on one of your computers.

----

'''Problem''': You want to use the VPN for traffic that goes to the school, but not for any other traffic.

'''Solution''': Add the following lines to your config file.

{{{
pull-filter ignore "redirect-gateway"
route 10.10.0.0 255.255.0.0 vpn_gateway
}}}

 1. Does not consider the server redirect-gateway in order to avoid all traffic through VPN Gateway
 1. Re-add the CS network you need to reach from client through VPN Gateway

The School of Computing uses OpenVPN

If you have an account on the CS domain, you may access campus resources through our VPN server.

IMPORTANT NOTE:

  1. As of Fall 2023, you must have OpenVPN GUI 2.6.X or later installed or your connection may fail to connect. If you get a fail to connect message, uninstall your version of OpenVPN and install the one below. If you have a MAC, make sure you are on 2.6 or later.

  2. We are using 2FA!!! If you had an account before, you probably don't anymore. See Dr. A about getting an account - needs to be in person.

Everyone Prerequisite

  1. Install an authenticator app if you don't have one (Most of you will have the Microsoft Authenticator app installed.
  2. In the Authenticator app, click the + to add a new account.
  3. Select "Other Account..."
  4. Point your phone at the QR code that you received (or are looking at because you are in my office)
  5. It recognized it? Good! Move on to your specific platform directions below.

Windows

  1. Install: 64-bit Version, 32-bit Version

  2. Run OpenVPN GUI as administrator This is required or your connection will not work.

  3. Right click the icon in the system tray and click connect
  4. Enter your pin followed by your Time-based One Time Password (TOTP) from the Authenticator app
  5. If you have problems try again running the program as administrator

OS X/Android and others

For Mac:

  1. Download and install Tunnelblick from https://tunnelblick.net/ or use your favorite OpenVPN client

  2. Download the .opvn file OpenVPN2023.ovpn

  3. Double-click the .ovpn file. This will add the configuration to Tunnelblick.
  4. Connect or disconnect using the icon running on the right side of the menu bar.

For Linux/Android/Others:

  1. Ubuntu and somewhat generic instructions

Troubleshooting

Problem: Your connection yo-yo's up and down every 60 seconds.

Solution: You are connected to the VPN with two computers using the same account. Disconnect from the VPN on one of your computers.

Problem: You want to use the VPN for traffic that goes to the school, but not for any other traffic.

Solution: Add the following lines to your config file. 

pull-filter ignore "redirect-gateway" 
route 10.10.0.0 255.255.0.0 vpn_gateway
  1. Does not consider the server redirect-gateway in order to avoid all traffic through VPN Gateway
  2. Re-add the CS network you need to reach from client through VPN Gateway

NetworkConfiguration/OpenVpnConfiguration (last edited 2024-10-21 15:42:02 by scot)