Home | Sitemap | deutsch  | Legals | KIT

Linux

Linux settings

Tested with Debian/Ubuntu and Fedora.

You can install and execute OpenVPN on the terminal as well as with a graphical user interface. In both cases you should download the appropriate configuration file for your system.

Download the configuration file by right clicking on the filename and then choosing "save as":

  • Debian/Ubuntu/Mint: kit.ovpn                                                         (Configuration for VPN2VLAN: kit-vpn2vlan.ovpn)
  • Fedora: kit.ovpn                                                                              (Configuration for VPN2VLAN: kit-vpn2vlan.ovpn)
  • other distributions: Use the file for Fedora and adjust the line “ca ...” for the file containing the CA certificate "T-TeleSec GlobalRoot Class 2" on your system.

Using the terminal

  1. Install the VPN client:

    The easiest way to install the OpenVPN client is using the package management system of the particular Linux distribution. Enter one of the following commands as root (or use sudo):

    • Fedora: (sudo) yum install openvpn
    • Ubuntu/Debian: (sudo) apt-get install openvpn
  2. Download the appropriate configuration file.

    Rightclick on the appropriate configuration file and choose “Save target as...”. Save the file in any folder (e.g. create a new folder in your user folder e.g. “VPN”).

  3. Start the OpenVPN client with the downloaded configuration file:

    The easiest way to install the OpenVPN client is using the - -config argument to specify the location of the configuration file. Run following command:

    • openvpn --config /pfad/zu/kit.ovpn (where /path/to/ is the folder you saved the configuration file in e.g. ~/VPN/)
    You will be asked to enter a user name. Log in with your KIT account (e.g. ab1234 or uxxxx). The VPN connection will be established. If you want to disconnect, press “Ctrl-C”.

Further information on starting the OpenVPN client from terminal can be found here. .

 

Using a graphical user interface

There is an OpenVPN plug-in for NetworkManager. Instructions on installing it are found below

Debian/Ubuntu with GNOME

It is sufficient to install the package network-manager-openvpn-gnome, the rest will be installed automatically. The required ca certificate "T-TeleSec GlobalRoot Class 2" is contained in the package ca-certificates. To update the resolver configuration the package resolvconf must be installed. The configuration file above can then be imported to the NetworkManager. Click on "Add a VPN configuration..." and then scroll down to "import a saved VPN configuration...".

Fedora with GNOME 3 (tested with Fedora 19, OpenVPN 2.3, GNOME 3.8)

It is sufficient to install the package NetworkManager-openvpn-gnome, the rest will be installed automatically. The required ca certificate "T-TeleSec GlobalRoot Class 2" is contained in the package ca-certificates. The configuration file above can then be imported to the NetworkManager:

  • Start NetworkManager
  • Network settings
  • Click "+" icon (“add”)
  • VPN
  • “Import from file”
  • Select previously saved configuration file
  • Enter user name and password
  • Save
  • Then reboot

To start VPN click on the NetworkManger icon and switch “kit” from “0” to “1” (or from “Off” to “On”)

 

Note on VPN-split

If you use VPN-split, go to the NetworkManager →  IPv4 Settings → Routes... and check "Use this connection only for resources on its network".

Note on GNOME 3

When using GNOME 3 (gnome-shell), the interface of the NetworkManager sometimes doesn't provide the option to import configuration files. You can start the old interface “nm-connection-editor” instead and import the configuration file there. This will cause the VPN connection to be displayed in the GNOME 3 network applet in the system tray.