Page History

...

Login as the user to start OpenVPN
Double click the "OpenVPN GUI" icon on the desktop. This will not do anything other than to put the OpenVPN systray icon in the systray.
In the systray, double click the OpenVPN icon. This will start OpenVPN on the config files you created earlier.
For AUTH username, enter your netid
For AUTH password, enter in a code from your DUO token, or enter in an alias for the device you want DUO to call or push via the DUO app
1. Aliases for devices can be found at: https://twostep.netid.cornell.edu
You can now Map the CNF510 server.
To disconnect, again double click the OpenVPN icon in the system tray.
1. Click "Disconnect"

Macintosh

Store, someplace you know where they are (eg your Desktop) the configuration and key files received from CNF Computing
Download the latest stable release of Tunnelblick from https://tunnelblick.net/downloads.html
Open the downloaded DiskImage
1. To start the install, double-click the TunnelBlick installer icon in the DiskImage
GateKeeper will ask you to confirm Open ing the application. Click "Open".
1. If you are upgrading from a previous version, you will be prompted for an administrative username and password to replace the old version of Tunnelblick.
2. If you are upgrading, you will be prompted to confirm shutting down the old version of Tunnelblick.
On the "Welcome to Tunnelblick" screen, leave "Check for updates" checked and uncheck Check for IP address changes
1. Enter in an administrative username and password to install Tunnelblick.
On the "Welcome to Tunnelblick" screen, click "I have configuration files"
1. Click "OK" on the information screen for howto Add a Configuration
Open the folder where you stored your configuration and key files.
1. Drag the configuration file (usually named something like cnf510-dwb7.ovpn) to the Tunnelblick icon in the top menu bar – release the mouse when the green plus sign appears on top of the icon you are dragging
2. Select Install Configuration for "Only Me"
3. Enter in an administrative username and password to install the configuration

Left click the Tunnelblick icon in the menu bar
Click "Connect cnf510-netid" where netid is your netid
For the username, enter in your Cornell NetID
For the password, enter in a code from your DUO token, or enter in an alias for the device you want DUO to call or push via the DUO app
1. Aliases for devices can be found at: https://twostep.netid.cornell.edu
Click "OK"
The Tunnelblick icon in your menu bar will change from grey to black to indicate that you are connected.
You can now connect to the CNF510 server

Either install OpenVPN if available as a package from your distribution, or download from: https://openvpn.net/index.php/open-source/downloads.html
Obtain configs and certificates from CNF Computing
Place the configs and certificates in a directory
1. This can either be the OpenVPN system config directory, usually /etc/openvpn
2. OR a local directory

If you placed the OpenVPN configs in the system directory, just start the openvpn client with:

sudo openvpnor your choice of OpenVPN GUI.

If you placed the OpenVPN configs in a different directory, cd to that directory and then (the configfile will usually be named something like: cnf510-netid.conf):
```
sudo openvpn --config confgfile
```
When prompted, enter your netid for the AUTH username
When prompted, for the AUTH password, enter in a code from your DUO token, or enter in an alias for the device you want DUO to call or push via the DUO app
1. Aliases for devices can be found at: https://twostep.netid.cornell.edu
You can now connect to the CNF510 server.
1. Note you will need Samba4 to be able to connect.
2. You may need to add to the "[global]" portion of your smb.conf file the following two lines:
```
client min protocol = SMB2
```
```
client max protocol = SMB3
```
3. OR if running smbclient from the commandline, specify "-m SMB3" to use the SMB3 protocol.
To disconnect, either use the Disconnect option in your OpenVPN gui or press CTRL-C in the OpenVPN terminal window in which you started the openvpn client.

...