Download the .tar.gz I send you. It has a config file, as well as your keys, inside of it. Keep the key files safe - do not share them!
Once the VPN has started, you can ssh to: 192.168.100.* (our desktops). There might just be some other tricks here, ask Richard.
This VPN is currently in testing phases for the time being, and thus is subject to change. Since it doesn't officially exist, it is limited to people in the Reichman group for now. In the future, bridging and getting an ip address directly on the theory network is planned.
Be sure that openvpn is installed (for non-Debian based systems, install openvpn through whatever package management system you use):
aptitude install openvpn
sudo openvpn openvpn-YourName.ovpn
Install openvpn: http://openvpn.net/download.html. Get whatever the latest version is.
To start openvpn, right click on the openvpn-YourName.ovpn file and select Start OpenVPN on this config file. Clever people will realize that this is why it has the .ovpn extension.
Alternatively (and preferably) place the files sent by Richard in the folder "C:\Program Files\OpenVPN\config\" or the similar installation path that you chose in the previous step. This will allow you to use the OpenVPN gui (which can appear in your taskbar)to connect in a more convenient way
An extra step is necessary in Windows 7 (and probably Vista). After installing, right click on the openvpn executable (openvpn.exe) and click Properties. Click the "compatability" tab. Click the box at the bottom labled "Run this program as administrator" and then click apply. The above directions should now work.
OpenVPN is open source and widely supported, see http://en.wikipedia.org/wiki/OpenVPN or http://openvpn.net/index.php/open-source/downloads.html or search for other packages for your preferred client.
- Your keys only allow you to connect one client at a time. Ask me to create a new client if you want multiple connections
- If you key files get compromised (such as someone copies them or you lose your computer), tell Richard so that he can disable your keys. I can make new ones.
- In the future, the VPN will bridge onto the theory network (allowing a 192.168.100.* ip address directly) instead of routing.
- Infrastructure is not as reliable as it could be, while awaiting a more permanent setup.
- Like I said above, this doesn't officially exist! Don't tell anyone.