Viking VPN Guide Mac OSX (10.8+) - csuohio.edu · Viking VPN Guide Mac OSX ... Connecting with the...

VikingVPNGuideMacOSX(10.8+)

TableOfContents

1:VPNQuestionsanswered2:InstallingtheOSXClient3:ConnectingwiththeOSXClient4:ReportingProblems

Version1.0:10/27/2010InformationServices&Technology

1:VPNQuestions(andanswers)WhatisaVPN?VPNisshortfor“VirtualPrivateNetwork”.It'sawaytoconnecttoasecurenetwork(suchasCSU's)overaninsecurenetwork(suchastheInternet,oracoffeeshop'sWiFi).

WhywouldIneedit?Toconnecttoyourdesktop(workfromhome,accessfiles,etc.).Toremotelyaccessnon-publicpartsofCSU'snetworkwhileyou'reoff-campus.ToobtainastaticIPaddresswhenusingCSU'swirelessnetworkandyouneedspecialfirewallaccess.Howdoesitwork?OpenVPNusesSSLtoencryptyourtraffic.Thisisthesameunderlyingtechnologythatisusedinwebbrowserstosecureonlineshopping/banking.Technically,itusestheBlowfishstreamcipherwith128bitkeyswhicharechangedhourly.Whyisthisbetter?TheVPNactsasa“gatekeeper”toCSU'sprivatenetwork.Ifyoucurrentlyhaveremoteaccessenabled,anyoneintheworldcanattempttoguesspasswordsonyourcomputer(thishappensonadailybasis).TheuseofaVPNallowsCSUtomitigatethisrisk.CanIstillusetheInternetwhileI'mconnected?Yes.OnlyspecifcnetworksareroutedviatheVPNclientwhenyou'reconnected.Technically,thisisknownas“splittunneling”.Willitworkanywhere?Probably.OpenVPNhastwomodes: UDP:Thedefault,andusesDTLS(datagramTLS).Moreefficient,butsometimesblockedbyISPs. TCP:UsesthestandardSSLport(TCP/443).Hardlyanyoneblocksthis.BreaksUDPapplications.WillitworkonmyiPhone/iPad/?YoucandownloadtheOpenVPNclientfromboththeAppStoreorAndroidMarketandconfigureitwiththesameconfigurationfilelistedbelow.Thinkofsomethingweforgottoputhere?Letusknow!..email“security@csuohio.edu”withquestions.

2:VPNClientInstallationforMacOSX(10.8+)Usingawebbrowser,goto:

https://openvpn.csuohio.edu

Loginwithyour7-digitCSUIDnumberandCampusPASS.

Afterauthentication,youwillneedtodownloadthe“client.ovpn”file.ThisistheconfigurationfilethatisuniquetoyouruserID.

Clickonthelinkfor“client.ovpn”.Followthedialogtosavethefile(rememberwhereyousaveit,youwillneeditlater).

Rememberwhereyousavethisfile.

TheOpenVPNclientforMacintoshoperatingsystemsiscalled“TunnelBlick”.

https://tunnelblick.net/(Clickon“downloadlateststablerelease”)

AfterdownloadingTunnelBlick,double-clickthe.dmg(diskimage)filetoopenit.

Youshouldseeadialogsimilartothis.

DoubleclickontheTunnelBlickiconandfollowtheinstallationwizard

NowthatwehaveTunnelblickinstalled,wecanbeginconfiguringit.

Findtheclient.ovpnfilewedownloadedearlieranddoubleclickonit.Onceprompted,chooseOnlyMetoinstalltheCSUvpnprofileonyoursystem.

Note:IfyouhavetheCiscoAnyConnectclientinstalled,youmust“deflate”thatinstallationtoavoidanerror.

3:ConnectingwiththeMacOSXOpenVPNClient

DoubleclicktheLaunchTunnelblickicon(orfinditunder“Applications”inFinder),andyoushouldseeanewiconinyourstatusbarthatlookslikeatunnel.Clickonitandthenchoose“Connect‘client’”highlightedbelow

YouwillbepromptedforyourUsernameandPassword.

YourUsernameisyour7digitCSUIDnumber

YourPasswordisyourCampusPASS.

Onceyouhaveconnectedsuccessfullytheiconwillchangetoanopentunnelshown

YoumayreceivethefollowingWarning:

Thisisnormal,asmentionedintheQAsectionabove,weareonlyroutingCSUdestinedtrafficthroughtheVPN.Therefore,allothertrafficwillstillroutethroughyourserviceprovidersoyourpublicipaddresswillappearthesame.

4:ReportingErrorsSometimesthingsjustneverworkquiteliketheinstructionssaytheydo..it'sokay,we'reheretohelp.

TheIS&Thelpdeskcanresolvemanyproblems(passwords,etc.)overthephonebycalling(216)687-5050,howevergatheringadditionalinformationaboutexactlywhat'sbrokenishelpful.

Thebestwaytoshowuswhat'snotworkingistotakea“screenshot”oftheerrormessageyou'regetting,orwhereyou'regettingstuckduringtheinstallation,configuration,oruseoftheVPNclient.

Todothis,usethekeycombination:“Apple”+”Shift”+”3”

Afterdoingtheabove,ascreencapturewillbeautomaticallysavedtoyourDesktop.

Thefilewillbenamed“Screenshot(date).png”wheredateisthecurrentdate/time.

Emailusthepictureofwhat'sbrokenat:security@csuohio.edu.

Pleasedoyourbesttodescribethecircumstancessurroundingtheerror.