Page History

...

1. Login as the user to start OpenVPN
2. Double click the "OpenVPN GUI" icon on the desktop. This will not do anything other than to put the OpenVPN systray icon in the systray.
3. In the systray, double click the OpenVPN icon. This will start OpenVPN on the config files you created earlier.
4. For AUTH username, enter your netid
5. For AUTH password, enter in a code from your DUO token, or enter in an alias for the device you want DUO to call or push via the DUO app
   1. Aliases for devices can be found at: https://twostep.netid.cornell.edu
6. You can now Map the CNF510 server.
7. To disconnect, again double click the OpenVPN icon in the system tray.
   1. Click "Disconnect"

Macintosh

Installing

1. Download the latest stable release of Tunnelblick from https://tunnelblick.net/downloads.html
2. Open the downloaded DiskImage
3. To start the install, double-click the TunnelBlick installer icon in the DiskImage
4. GateKeeper will ask you to confirm Open ing the application. Click "Open".
5. If you are upgrading from a previous version, you will be prompted for an administrative username and password to replace the old version of Tunnelblick.
6. If you are upgrading, you will be prompted to confirm shutting down the old version of Tunnelblick.

Linux

Installing

1. Either install OpenVPN if available as a package from your distribution, or download from: https://openvpn.net/index.php/open-source/downloads.html
2. Obtain configs and certificates from CNF Computing
3. Place the configs and certificates in a directory
   1. This can either be the OpenVPN system config directory, usually /etc/openvpn
   2. OR a local directory

...

1. If you placed the OpenVPN configs in the system directory, just start the openvpn client with:

   sudo openvpnor your choice of OpenVPN GUI.

2. If you placed the OpenVPN configs in a different directory, cd to that directory and then (the configfile will usually be named something like: cnf510-netid.conf):

   sudo openvpn --config confgfile

3. When prompted, enter your netid for the AUTH username

4. When prompted, for the AUTH password,  enter in a code from your DUO token, or enter in an alias for the device you want DUO to call or push via the DUO app
   1. Aliases for devices can be found at: https://twostep.netid.cornell.edu
5. You can now connect to the CNF510 server.
   1. Note you will need Samba4 to be able to connect.
   2. You may need to add to the "[global]" portion of your smb.conf file the following two lines:
      

      client min protocol = SMB2

      client max protocol = SMB3

       

   3. OR if running smbclient from the commandline, specify "-m SMB3" to use the SMB3 protocol.

6. To disconnect, either use the Disconnect option in your OpenVPN gui or press CTRL-C in the OpenVPN terminal window in which you started the openvpn client.

Macintosh

More information coming soon.