User Tools

Site Tools

Trace:
sdf_s_vpn_servers

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
sdf_s_vpn_servers [2021/03/20 23:58] – [Installing OpenVPN] hc9sdf_s_vpn_servers [2024/09/18 06:22] (current) – alt hc9
Line 64: Line 64:
   serial=YOUR_SERIAL_NUMBER   serial=YOUR_SERIAL_NUMBER
   SHA1 Fingerprint=YOUR_CERT_FINGERPRINT   SHA1 Fingerprint=YOUR_CERT_FINGERPRINT
-  subject= /C=US/ST=WA/L=SEATTLE/O=sdf.org/CN=YOUR_USER_NAME@sdf.lonestar.org/emailAddress=smj@sdf.org+  subject= /C=US/ST=WA/L=SEATTLE/O=sdf.org/CN=YOUR_USER_NAME@sdf.org/emailAddress=smj@sdf.org
  
 </code> </code>
Line 96: Line 96:
 ===== Setting it up ===== ===== Setting it up =====
  
-The SDF VPN is quite easy to set up. You must first choose a VPN plan that is right for you, based on assumed bandwidth usage. Pricing and more package information is available through the shell by typing '**vpn**' without the quotes.+The SDF VPN is quite easy to set up. You must first choose a VPN plan that is right for you, based on assumed bandwidth usage. Pricing and more package information is available through the shell by typing ‘**vpn**’ without the quotes.
  
-Once you've been added to the VPN membership level (you'll receive an email notification of this), you must set up your VPN access by typing '**setvpn**' in the shell, without quotes. This will allow you to configure your VPN secret (password) for connecting.+Once you've been added to the VPN membership level (you'll receive an email notification of this), you must set up your VPN access by typing ‘**setvpn**’ in the shell, without quotes. This will allow you to configure your VPN secret (password) for connecting.
  
 You should make note of the VPN's IP address when setting up your secret. You should make note of the VPN's IP address when setting up your secret.
Line 107: Line 107:
  
   - Open the Windows Control Panel.   - Open the Windows Control Panel.
-  - Open the Network Connections item in Control Panel. Generally you would click the "**Network and Internet Connections**" option, then click "**Network Connections**". A list of existing dial-up and LAN connections will be displayed. +  - Open the Network Connections item in Control Panel. Generally you would click the “**Network and Internet Connections**” option, then click “**Network Connections**”. A list of existing dial-up and LAN connections will be displayed. 
-  - Click on the "**Create a new connection**" option from the left-hand side of the window. The Windows XP New Connection Wizard will come up. +  - Click on the “**Create a new connection**” option from the left-hand side of the window. The Windows XP New Connection Wizard will come up. 
-  - Click the "**Next**" option to begin the wizard. Then choose the "**Connect to the network at my workplace**" option from the list and click "**Next**". +  - Click the “**Next**” option to begin the wizard. Then choose the “**Connect to the network at my workplace**” option from the list and click “**Next**”. 
-  - On the Network Connection page of the wizard, choose the "**Virtual Private Network connection**" option and click "**Next**". +  - On the Network Connection page of the wizard, choose the “**Virtual Private Network connection**” option and click “**Next**”. 
-  - Choose a name for this connection on the "**Connection Name**" screen. Windows will use this to reference the VPN connection. +  - Choose a name for this connection on the “**Connection Name**” screen. Windows will use this to reference the VPN connection. 
-  - Choose an option on the "**Public Network**" screen and click "**Next**". The default option, "**Automatically dial this initial connection**" can be used if the VPN connection will always be initiated when the computer is not already connected to the Internet. Otherwise, choose the "**Do not dial the initial connection**" option. This requires that the public Internet connection be established first, before this new VPN connection will be initiated. **Choose this option.** +  - Choose an option on the “**Public Network**” screen and click “**Next**”. The default option, “**Automatically dial this initial connection**” can be used if the VPN connection will always be initiated when the computer is not already connected to the Internet. Otherwise, choose the “**Do not dial the initial connection**” option. This requires that the public Internet connection be established first, before this new VPN connection will be initiated. **Choose this option.** 
-  - Enter the IP address for the VPN on the "**VPN Server Selection**" screen. This is obtained via the '**setvpn**' command (without quotes) in the shell. +  - Enter the IP address for the VPN on the “**VPN Server Selection**” screen. This is obtained via the ‘**setvpn**’ command (without quotes) in the shell. 
-  - Choose an option on the "**Connection Availability**" screen and click "**Next**". The default option, "**My Use Only**", ensures that Windows will make this VPN connection available only to the user that is currently logged in to the computer. If you don't want this, select the "**Anyone's use**" option. +  - Choose an option on the “**Connection Availability**” screen and click “**Next**”. The default option, “**My Use Only**”, ensures that Windows will make this VPN connection available only to the user that is currently logged in to the computer. If you don't want this, select the “**Anyone's use**” option. 
-  - Click "**Finish**" to complete the wizard. You may wish to select the option to create a desktop shortcut for easy access. The information for the VPN connection will be saved for current and/or future use.+  - Click “**Finish**” to complete the wizard. You may wish to select the option to create a desktop shortcut for easy access. The information for the VPN connection will be saved for current and/or future use.
  
 ===== Connecting in Windows Vista ===== ===== Connecting in Windows Vista =====
Line 121: Line 121:
 Connecting to the VPN is slightly different in Windows Vista. Please use these instructions to connect to SDF's VPN through Vista. Connecting to the VPN is slightly different in Windows Vista. Please use these instructions to connect to SDF's VPN through Vista.
  
-  - Click on the "**Start**" button and then choose "**Connect to**". +  - Click on the “**Start**” button and then choose “**Connect to**”. 
-  - Click on the "**Set up a connection or network**" option on the window that follows. It's near the bottom. +  - Click on the “**Set up a connection or network**” option on the window that follows. It's near the bottom. 
-  - On the window that comes up, scroll down and click on the "**Connect to a workplace**" option. Then click "**Next**". +  - On the window that comes up, scroll down and click on the “**Connect to a workplace**” option. Then click “**Next**”. 
-  - A question asking "**Do you want to use a connection you already have?**" may appear. Select "**No, create a new connection.**" if it does and then click "**Next**". +  - A question asking “**Do you want to use a connection you already have?**” may appear. Select “**No, create a new connection.**” if it does and then click “**Next**”. 
-  - Next you'll be asked "**How do you want to connect?**" Select "**Use my Internet connection (VPN)**". +  - Next you'll be asked “**How do you want to connect?**” Select “**Use my Internet connection (VPN)**”. 
-  - You'll then be asked for the Internet address. Enter the address you remembered when accessing '**setvpn**' (without quotes) in the SDF shell. +  - You'll then be asked for the Internet address. Enter the address you remembered when accessing ‘**setvpn**’ (without quotes) in the SDF shell. 
-  - Enter a name for this VPN connection in the "**Destination name:**" field. This is how Windows Vista will reference the VPN. +  - Enter a name for this VPN connection in the “**Destination name:**” field. This is how Windows Vista will reference the VPN. 
-  - If you don't want to connect immediately, check the "**Do not connect now; just set it up so I can connect later.**" option. +  - If you don't want to connect immediately, check the “**Do not connect now; just set it up so I can connect later.**” option. 
-  - Do not check the "**Use a smart card.**" option. +  - Do not check the “**Use a smart card.**” option. 
-  - When finished, click "**Next**" +  - When finished, click “**Next**” 
-  - You'll then configure the username and password needed to authenticate to the VPN. The username is your SDF username and the password is the secret you set up via the '**setvpn**' command in the shell. +  - You'll then configure the username and password needed to authenticate to the VPN. The username is your SDF username and the password is the secret you set up via the ‘**setvpn**’ command in the shell. 
-  - Leave the "**Domain**" field blank. +  - Leave the “**Domain**” field blank. 
-  - Click the "**Create**" button once you are done. You should then see a window pop up saying that "**The connection is ready to use.**" Click on "**Close**".+  - Click the “**Create**” button once you are done. You should then see a window pop up saying that “**The connection is ready to use.**” Click on “**Close**”.
  
 ===== Connecting in Linux ===== ===== Connecting in Linux =====
  
-  - Make sure PPP and PPTP are installed. The can be accomplished in Debian or Ubuntu by entering '**sudo apt-get install pptp-linux**' into a terminal. +  - Make sure PPP and PPTP are installed. The can be accomplished in Debian or Ubuntu by entering ‘**sudo apt-get install pptp-linux**’ into a terminal. 
-  - Create a file named sdfpptp in /etc/ppp/peers by entering '**sudo gedit /etc/ppp/peers**'. Replace gedit with your choice of text editor. Add the following to the file: (Be sure to replace **//username//** with your username.) +  - Create a file named sdfpptp in /etc/ppp/peers by entering ‘**sudo gedit /etc/ppp/peers**’. Replace gedit with your choice of text editor. Add the following to the file: (Be sure to replace **//username//** with your username.) 
-    - Note: Make sure to replace **//IP Address//** with the IP address/hostname provided when running '**setvpn**' in the shell. <file config /etc/ppp/peers>+    - Note: Make sure to replace **//IP Address//** with the IP address/hostname provided when running ‘**setvpn**’ in the shell. <file config /etc/ppp/peers>
 remotename sdfpptp remotename sdfpptp
 linkname sdfpptp linkname sdfpptp
Line 161: Line 161:
 </file> </file>
   - Save the file.   - Save the file.
-  - Edit /etc/ppp/chap-secrets by entering '**sudo gedit /etc/ppp/chap-secrets**'. Add the line **//username// stfpptp //password// *** replacing //username// and //password// with your SDF username and your password set by **'setvpn'**. +  - Edit /etc/ppp/chap-secrets by entering ‘**sudo gedit /etc/ppp/chap-secrets**’. Add the line **//username// stfpptp //password// *** replacing //username// and //password// with your SDF username and your password set by **‘setvpn’**. 
-  - Make sure a specific route to the VPN exists. Run '**sudo route add **//VPN-IP//** gw **//GW-IP//****' replacing **//VPN-IP//** with the IP address/hostname provided when running '**setvpn**', and replace **//GW-IP//** with your gateway IP address. If you do not know the IP address of your gateway, enter '**route**'. It is the gateway IP next to the destination **default**. +  - Make sure a specific route to the VPN exists. Run ‘**sudo route add **//VPN-IP//** gw **//GW-IP//****’ replacing **//VPN-IP//** with the IP address/hostname provided when running ‘**setvpn**’, and replace **//GW-IP//** with your gateway IP address. If you do not know the IP address of your gateway, enter ‘**route**’. It is the gateway IP next to the destination **default**. 
-  - Enter '**sudo pppd call sdfpptp**' into a terminal. Wait for it to show the local and remote IP addresses. You should now be connected. Do not close the terminal until you are ready to disconnect. +  - Enter ‘**sudo pppd call sdfpptp**’ into a terminal. Wait for it to show the local and remote IP addresses. You should now be connected. Do not close the terminal until you are ready to disconnect. 
-  - Open another terminal. Enter '**sudo route add -net 192.94.73.0/24 dev ppp0**'. This will route all your connections to SDF through the VPN.+  - Open another terminal. Enter ‘**sudo route add -net 192.94.73.0/24 dev ppp0**’. This will route all your connections to SDF through the VPN.
     - Alternatively to steps 5 and 6, you might use a wrapper script like this: <code>     - Alternatively to steps 5 and 6, you might use a wrapper script like this: <code>
 #!/bin/bash #!/bin/bash
Line 178: Line 178:
 </code> </code>
  
-This automatically detects the default gateway and adds appropriate routes, starts the VPN and deletes the routes after VPN has been stopped. If you do not use a custom routing table dedicated to the SDF VPN you should delete the lines ending in "table sdftun".+  * This automatically detects the default gateway and adds appropriate routes, starts the VPN and deletes the routes after VPN has been stopped. If you do not use a custom routing table dedicated to the SDF VPN you should delete the lines ending in “table sdftun”.
  
 ==== GUI Setup With NetworkManager ==== ==== GUI Setup With NetworkManager ====
Line 194: Line 194:
 Once installed, restart the NetworkManager service (///etc/init.d/NetworkManager restart//) and left-click on the network manager icon in your taskbar. Highlight **VPN Connections** and click on **Configure VPN**: Once installed, restart the NetworkManager service (///etc/init.d/NetworkManager restart//) and left-click on the network manager icon in your taskbar. Highlight **VPN Connections** and click on **Configure VPN**:
  
-{{ :sdf_s_vpn_servers:vpn1.png?nolink |}}+{{ :sdf_s_vpn_servers:vpn1.png?nolink |image alternative text goes here}}
  
-{{ :sdf_s_vpn_servers:vpn4.png?nolink |}}+{{ :sdf_s_vpn_servers:vpn4.png?nolink |image alternative text goes here}}
  
-Click on the **Add** button, and choose **Point-to-Point Tunneling Protocol (PPTP)**, then click **Create**. Fill out the **User name**, **Password** and **Gateway** fields with appropriate values ([[#setup|from when you ran //setvpn//]]):+Click on the **Add** button, and choose **Point-to-Point Tunneling Protocol (PPTP)**, then click **Create**. Fill out the **User name**, **Password** and **Gateway** fields with appropriate values ([[#setting_it_up|from when you ran setvpn]]):
  
-{{ :sdf_s_vpn_servers:vpn2.png?nolink |}}+{{ :sdf_s_vpn_servers:vpn2.png?nolink |image alternative text goes here}}
  
 Now click on **Advanced**: Now click on **Advanced**:
  
-{{ :sdf_s_vpn_servers:vpn3.png?nolink |}}+{{ :sdf_s_vpn_servers:vpn3.png?nolink |image alternative text goes here}}
  
 Under **Authentication**, **de-select all the methods except MSCHAPv2**. Then select **Use Point-to-Point Encryption (MPPE)** and choose **128-bit (most secure)** in the **Security** dropdown. Click **OK**, then **Apply** and close all other configuration dialogs. Now when you left-click on the network manager icon, you should have your PPTP VPN listed under **VPN Connections**. Just select it and wait. If it is successful, you'll see a little lock icon appear over the usual network manager icon. If not, check your system log for errors. This will be ///var/log/messages// or ///var/log/syslog//, depending on your distro. Under **Authentication**, **de-select all the methods except MSCHAPv2**. Then select **Use Point-to-Point Encryption (MPPE)** and choose **128-bit (most secure)** in the **Security** dropdown. Click **OK**, then **Apply** and close all other configuration dialogs. Now when you left-click on the network manager icon, you should have your PPTP VPN listed under **VPN Connections**. Just select it and wait. If it is successful, you'll see a little lock icon appear over the usual network manager icon. If not, check your system log for errors. This will be ///var/log/messages// or ///var/log/syslog//, depending on your distro.
Line 212: Line 212:
 If you use network manager, all traffic will be routed through the PPTP VPN for you once you are connected. If that's not what you want, you can click on **IPV4 Settings** and then **Routes** to have simple static routes added for you automatically when the VPN connects. You can also check **Use this connection only for resources on this network**, which in our case means only connections to SDF hosts will be encrypted. If you use network manager, all traffic will be routed through the PPTP VPN for you once you are connected. If that's not what you want, you can click on **IPV4 Settings** and then **Routes** to have simple static routes added for you automatically when the VPN connects. You can also check **Use this connection only for resources on this network**, which in our case means only connections to SDF hosts will be encrypted.
  
-{{ :sdf_s_vpn_servers:vpn5.png?nolink |}}+{{ :sdf_s_vpn_servers:vpn5.png?nolink |image alternative text goes here}}
  
 ===== Connecting in OpenWRT ===== ===== Connecting in OpenWRT =====
Line 237: Line 237:
   option 'defaultroute'   '0'   option 'defaultroute'   '0'
 </code> </code>
 +
   - Open ///etc/ppp/options.pptp// with the editor of your choice. Example: //vi /etc/ppp/options.pptp//. Add the following lines to the end of the file (the //plugin// may need to be changed to match your system): <code>   - Open ///etc/ppp/options.pptp// with the editor of your choice. Example: //vi /etc/ppp/options.pptp//. Add the following lines to the end of the file (the //plugin// may need to be changed to match your system): <code>
   noipdefault   noipdefault
Line 254: Line 255:
   idle 0   idle 0
 </code> </code>
 +
   - Restart networking to connect to the VPN: ///etc/init.d/networking restart//.   - Restart networking to connect to the VPN: ///etc/init.d/networking restart//.
   - If everything worked correctly, the //ifconfig// command should display a new interface named //pptp-vpn// looking something like this: <code>   - If everything worked correctly, the //ifconfig// command should display a new interface named //pptp-vpn// looking something like this: <code>
Line 264: Line 266:
           RX bytes:1159 (1.1 KiB)  TX bytes:128 (128.0 B)           RX bytes:1159 (1.1 KiB)  TX bytes:128 (128.0 B)
 </code> </code>
-  - Routing can be set up like any Linux OS, so follow the routing instructions found above: [[#linux|Linux]].+ 
 +  - Routing can be set up like any Linux OS, so follow the routing instructions found above: [[#connecting_in_linux|Linux]].
  
 ==== PPTP Userspace Utility ==== ==== PPTP Userspace Utility ====
Line 270: Line 273:
   - Login to your OpenWRT device via SSH.   - Login to your OpenWRT device via SSH.
   - Install the required userspace tools and module for MPPE: //opkg install pptp kmod-mppe//   - Install the required userspace tools and module for MPPE: //opkg install pptp kmod-mppe//
-  - Follow the [[#linux|Linux]] directions above like normal.+  - Follow the [[#connecting_in_linux|Linux]] directions above like normal.
   - If you are still having trouble, look over the official OpenWRT documentation found here: http://wiki.openwrt.org/doc/howto/vpn.client.pptp   - If you are still having trouble, look over the official OpenWRT documentation found here: http://wiki.openwrt.org/doc/howto/vpn.client.pptp
  
 ===== Connecting in FreeBSD ===== ===== Connecting in FreeBSD =====
  
-  * Install mpd4 from ports or packages. +  * Install ''mpd4'' from ports or packages. 
-  * Add the following section to your /usr/local/etc/mpd4/mpd4.conf: +  * Add the following section to your ''/usr/local/etc/mpd4/mpd4.conf'': <code>
- +
-<code> +
   sdfvpn:   sdfvpn:
           new -i ng1 sdfvpn sdfvpn           new -i ng1 sdfvpn sdfvpn
Line 311: Line 311:
           set ccp yes mpp-stateless           set ccp yes mpp-stateless
           open           open
- 
 </code> </code>
  
Line 317: Line 316:
     - Your USERNAME     - Your USERNAME
     - Your PASSWORD     - Your PASSWORD
-    - The local address of SDF's VPN host. This can be found in /etc/hosts on SDF. The local IP will start with 10.0.0, but have the same last octet as the public IP. +    - The local address of SDF's VPN host. This can be found in ''/etc/hosts'' on SDF. The local IP will start with 10.0.0, but have the same last octet as the public IP.
- +
-  * Add this in your /usr/local/etc/mpd4/mpd4.links file: +
- +
-<code>+
  
 +  * Add this in your ''/usr/local/etc/mpd4/mpd4.links'' file: <code>
   sdfvpn:   sdfvpn:
           set link type pptp           set link type pptp
Line 328: Line 324:
           set pptp enable originate outcall           set pptp enable originate outcall
           set pptp disable incoming           set pptp disable incoming
- 
 </code> </code>
  
   * You will have to replace one (1) thing in this config:   * You will have to replace one (1) thing in this config:
-    - The public address of SDF's VPN host. You can get this by running setvpn at the shell. +    - The public address of SDF's VPN host. You can get this by running ''setvpn'' at the shell. 
-  * Now, as root, run mpd4 sdfvpn.+  * Now, as root, run ''mpd4 sdfvpn''.
   * You should now be connected to SDF over a layer 3 tunnel across the Internet.   * You should now be connected to SDF over a layer 3 tunnel across the Internet.
-  * Your new routes are only for SDF's hosts, and use their internal IP addresses. These are the 10.0.0.x ones. I'm working on how to route to the public ones over the VPN without creating a routing loop to the VPN host. I copied SDF's /etc/hosts file to my machine so that I can run 'ssh sdf1' to connect through the tunnel.+  * Your new routes are only for SDF's hosts, and use their internal IP addresses. These are the 10.0.0.x ones. I'm working on how to route to the public ones over the VPN without creating a routing loop to the VPN host. I copied SDF's /etc/hosts file to my machine so that I can run ‘ssh sdf1’ to connect through the tunnel.
  
 ===== Connecting in Mac OS X ===== ===== Connecting in Mac OS X =====
Line 341: Line 336:
   - Open /Applications/Internet Connect.app   - Open /Applications/Internet Connect.app
   - Click on the **VPN** button.   - Click on the **VPN** button.
-  - Click on the Configuration dropdown and go to "**Edit Configurations...**"+  - Click on the Configuration dropdown and go to “**Edit Configurations...**”
   - Press the **+** button at the bottom left of the window to add a configuration.   - Press the **+** button at the bottom left of the window to add a configuration.
-  - Under "**Description**" put whatever you want. SDF VPN is a good choice. +  - Under “**Description**” put whatever you want. SDF VPN is a good choice. 
-  - Under the "**Server Address**," Enter the IP address for the VPN on the "**VPN Server Selection**" screen. This is obtained via the '**setvpn**' command (without quotes) in the shell. +  - Under the “**Server Address**,” Enter the IP address for the VPN on the “**VPN Server Selection**” screen. This is obtained via the ‘**setvpn**’ command (without quotes) in the shell. 
-  - Under Username put your SDF username and the password is the secret you set up via the '**setvpn**' command in the shell. +  - Under Username put your SDF username and the password is the secret you set up via the ‘**setvpn**’ command in the shell. 
-  - Choose "**Automatic**" encryption. +  - Choose “**Automatic**” encryption. 
-  - Click "**OK**". +  - Click “**OK**”. 
-  - Then, whenever you want to connect you can return to this **Internet Connect Application** and go to the VPN, choose the SDF VPN and click connect. Optionally, you can click "**Show VPN status in the menu bar**" and you can connect to the VPN from the menu bar icon.+  - Then, whenever you want to connect you can return to this **Internet Connect Application** and go to the VPN, choose the SDF VPN and click connect. Optionally, you can click “**Show VPN status in the menu bar**” and you can connect to the VPN from the menu bar icon.
  
 ===== Connecting On An iPad ===== ===== Connecting On An iPad =====
  
-  - Log into SDF and run the 'setvpn' command. +  - Log into SDF and run the ‘setvpn’ command. 
-  - Hit 'p' to set up your password.+  - Hit ‘p’ to set up your password.
   - Enter your password twice. The password must be 14 characters or less, and ideally should contain letters, numbers, upper and lower case, and a special symbol, though there are no actual complexity requireme nts.   - Enter your password twice. The password must be 14 characters or less, and ideally should contain letters, numbers, upper and lower case, and a special symbol, though there are no actual complexity requireme nts.
   - After you have set up your password, the setvpn wizard will tell you what IP address to connect to. It will be 192.94.73.X. Write this whole IP address down. You will need it in a later step.   - After you have set up your password, the setvpn wizard will tell you what IP address to connect to. It will be 192.94.73.X. Write this whole IP address down. You will need it in a later step.
-  - Hit 'q' to exit the configuration.+  - Hit ‘q’ to exit the configuration.
   - Turn on your iPad and go to the Settings.   - Turn on your iPad and go to the Settings.
   - Go into the Network subsection.   - Go into the Network subsection.
-  - Go into the VPN subsection. This will bring up the 'Add Configuration' window. +  - Go into the VPN subsection. This will bring up the ‘Add Configuration’ window. 
-  - Select "PPTP" at the top. +  - Select “PPTP” at the top. 
-  - In the Description field, label this connection something useful to identify it, such as 'SDF VPN'. +  - In the Description field, label this connection something useful to identify it, such as ‘SDF VPN’. 
-  - In the 'Server' field, put in the IP address that you wrote down earlier. +  - In the ‘Server’ field, put in the IP address that you wrote down earlier. 
-  - In the 'account' field, put your SDF user name. +  - In the ‘account’ field, put your SDF user name. 
-  - In the 'Password' field, put the password that you set up while running the setvpn wizard in the set above. This will cause the iPad to remember your password for you. If you wish to type it in each time you connect, leave this field blank. +  - In the ‘Password’ field, put the password that you set up while running the setvpn wizard in the set above. This will cause the iPad to remember your password for you. If you wish to type it in each time you connect, leave this field blank. 
-  - Set the encryption level to 'Maximum' +  - Set the encryption level to ‘Maximum’ 
-  - Leave the 'Send All Traffic' slider set to 'On', unless you specifically want to (and know how to) set up VPN usage in individual applications. +  - Leave the ‘Send All Traffic’ slider set to ‘On’, unless you specifically want to (and know how to) set up VPN usage in individual applications. 
-  - Hit the 'Save' button at the top +  - Hit the ‘Save’ button at the top 
-  - To turn on VPN, slide the VPN slider to 'On' for the connection called SDF and open the browser. Connect to http://sdf.org/ip and verify that the IP address it shows as your source.+  - To turn on VPN, slide the VPN slider to ‘On’ for the connection called SDF and open the browser. Connect to http://sdf.org/ip and verify that the IP address it shows as your source.
  
 ==== Connecting with Viscosity ==== ==== Connecting with Viscosity ====
Line 376: Line 371:
   - Open Viscosity's preferences window.   - Open Viscosity's preferences window.
   - Create a new connection   - Create a new connection
-    - {{:sdf_s_vpn_servers:viscosity1.png?nolink&500|}}+    - {{:sdf_s_vpn_servers:viscosity1.png?nolink&500|image alternative text goes here}}
   - In the New Connection window,   - In the New Connection window,
     - Give your connection a name     - Give your connection a name
Line 382: Line 377:
     - Make sure protocol is set to **tap** not **tun**     - Make sure protocol is set to **tap** not **tun**
     - Uncheck **Enable DHCP**.     - Uncheck **Enable DHCP**.
-    - {{:sdf_s_vpn_servers:viscosity2.png?nolink&500|}}+    - {{:sdf_s_vpn_servers:viscosity2.png?nolink&500|image alternative text goes here}}
   - Move on to the Authentication tab|   - Move on to the Authentication tab|
     - You will need to copy the certificates and keys you received in e-mail to a //SECURE// location on your //local// disk.     - You will need to copy the certificates and keys you received in e-mail to a //SECURE// location on your //local// disk.
     - Select the appropriate certificate or key for each of the three SLL file locations     - Select the appropriate certificate or key for each of the three SLL file locations
-    - {{:sdf_s_vpn_servers:viscosity4.png?nolink&500|}}+    - {{:sdf_s_vpn_servers:viscosity4.png?nolink&500|image alternative text goes here}}
   - Now move to the Options tab   - Now move to the Options tab
   - Set LZO Compression to **On** or **On (Adaptive)**   - Set LZO Compression to **On** or **On (Adaptive)**
-    - {{:sdf_s_vpn_servers:viscosity5.png?nolink&500|}}+    - {{:sdf_s_vpn_servers:viscosity5.png?nolink&500|image alternative text goes here}}
  
 That's it! Hit Save, and you're ready to roll securely through the SDF VPN. That's it! Hit Save, and you're ready to roll securely through the SDF VPN.
Line 398: Line 393:
  
 ---- ----
 +
 [[http://sdf.org/?tutorials/VPN|SDF's VPN servers]] - traditional link (using [[wp>Revision_Control_System|RCS]]) [[http://sdf.org/?tutorials/VPN|SDF's VPN servers]] - traditional link (using [[wp>Revision_Control_System|RCS]])
  
sdf_s_vpn_servers.1616284704.txt.gz · Last modified: 2021/03/20 23:58 by hc9