- OpenVPN for Mac
- OpenVPN для MacOS
- Создание конфигов
- auth.cfg
- zavod.ovpn
- Импорт конфига
- Как пользоваться
- Connecting to Access Server with macOS
- Installing a client application
- OpenVPN Connect with your Access Server
- Steps: Access your client UI
- OpenVPN Connect v3
- OpenVPN Connect v2
- Alternative OpenVPN open source client: Tunnelblick
- Alternative OpenVPN client: Viscosity
- Other client GUI projects
- Helpful Resources
- Настройка OpenVPN в macOS
- Настройка для Tunelblick
- Настройка для Viscosity
- Настройка для OpenVPN Connect 3
OpenVPN for Mac
OpenVPN 2.5.1 LATEST
Mac OS X 10.8 or later
OpenVPN for Mac 2021 full offline installer setup for Mac
OpenVPN for Mac is an award-winning and fully-featured SSL VPN solution that can allow everyone from computing novices to large companies to configure the way they are accessing the internet, unlocking powerful services for safer and more stealthier browsing experience. Built from the ground up to support latest encryption methods, this app allows you to connect your Mac to VPN for macOS servers without the fear that anyone will intercept and spy on your data, from where your data requests will be distributed across the rest of the web in a safe and controlled manner.
This downloads the source code. Please download OpenVPN Connect if you need a working OpenVPN GUI client.
By default, the app can distribute your data traffic across many of its servers, making your online location masked and unrecognizable to Internet Service Providers and the rest of the internet in general. In addition to that, It also comes with the large offering of customization tools that can be used for setting up remote access privileges, site-to-site VPNs, enterprise-scale remote access, adaptive load-balancing, advanced Wi-Fi security, failover services, fine-grained user access control, and much more.
Presence of both automated VPN services and advanced tools have made OpenVPN for macOS into #1 secure browsing software of choice for both regular users, organizations of all sizes and many Fortune 500 companies.
Installation and Use
It comes in a small package that will after installation re-configure the way your computer is accessing the internet. The configuration window of this app is actually very lightweight, and it holds only the most basic of tools for setting the type of your VPN setting (config file, system proxy settings or manual configuration) and a dropdown menu for selecting user interface language (with over 15 available translations).
Originally built for use in enterprise environments, the personal tier of OpenVPN retains the highly advanced technologies and lightweight tools. The core security feature of OpenVPN is based upon OSI layer 2 or 3 secure network extension that is utilizing SSL/TLS protocols. It installs deep into the Windows OS, enabling all the user apps to take advantage of the security features, firewall rules, authentication certificates, and more.
In real-world, ordinary non-business users can encounter various roadblocks that can prevent them from taking full advantage of their home internet connection. This may include ISP data rate throttling, website content region blocking, or even government-imposed firewalls. It allows users to circumvent these issues, offering you stable and secure data stream to their servers, from which you will be re-routed to any major region in the world, and be able to access its “local” content. No matter if you want to simply access region-specific sites and services (such as streaming platforms content offering) or to read censored news outlets, It can allow you to do that in just a few clicks.
Another benefit of Open VPN is a unified virtual presence. No matter where you physically are, if you are using Open VPN, the rest of the internet will be able to detect you originating from a single region.
Features and Highlights
- Core – With over 50 million downloads, the core technology of Open VPN has proven to be one of the leaders in the field of VPN security.
- Advanced AES encryption – It encrypts all outgoing and incoming internet data with the world’s leading standard for encryption.
- Fortified privacy – Effortlessly protect your personal and online identity by location spoofing your IP address.
- Wireless hot spot protection – Prevent unauthorized access to your data while connecting to public and unsecured Wi-Fi sports.
- Travel protection – Mask your online location no matter where you are.
- Worldwide server connection – Gain access and establish your virtual presence at servers that are in 12 regions around the world.
- Unrestricted access – Access OpenVPN servers from any location in the world.
- 24/7 support – Gain access to support 24/7 via email or live web chat.
- Full Windows compatibility – Available on all modern versions of Windows, ranging from Windows 2003 to Windows 7 (both 32-bit and 64-bit).
Источник
OpenVPN для MacOS
OpenVPN — это «бронебойный» способ подключиться к локальной сети удаленно. В самой MacOS нет поддержки OpenVPN, её можно добавить только установив сторонний софт. Есть очень много клиентов openvpn для MacOS как платных, так и бесплатных. Среди них, наверное, самый продвинутый это – Tunnelblick.
Tunnelblick — это бесплатный OpenVPN-клиент для MacOS со всем нужным функционалом.
Скачать Tunnelblick можно с официального сайта здесь
Создание конфигов
В любом удобном месте создаем папку, в которой положим все необходимые файлы. В итоге должно получиться 3 файла:
- auth.cfg — текстовый файл с логин/паролем пользователя на OpenVPN-сервере;
- cert_export_user1.p12 — экспортированный клиентский сертификат;
- zavod.ovpn – обычный текстовый файл с конфигурационными настройками.
auth.cfg
В папке создаем новый текстовый файл с содержимым:
Где на первой строчке логин, а на второй пароль. Файл должен иметь название auth.cfg
zavod.ovpn
Создаем новый текстовый файл с любым названием и расширением .ovpn. В нашем случае это zavod.ovpn . Название нужно давать осмысленное, так как это название вы будете видеть в меню программы при подключении к серверу. Можно использовать русский язык.
- remote 92.189.141.111 1194 — IP-адрес сервера и порт;
- pkcs12 cert_export_user1.p12 — файл сертификатов;
- auth SHA1 — протокол авторизации;
- cipher AES -256- CBC — протокол шифрования;
- auth-user-pass auth.cfg — файл логин/пароля пользователя для аутентификации на сервере;
- route 192.168.0.0 255.255.255.0 192.168.0.1 — маршрутизация для доступа к ресурсам удаленной сети. Роутов может быть несколько. Каждый роут на новой строке. Если у Вас и у удаленной сети одинаковые подсети, то работать без доп. настроек или смены вашей подсети на другую вы не сможете.
Конфиг приведен для сертификата в формате pkcs12, где всего 1 файл. Если у вас 3 файла: user1.crt, user1.key и ca.crt, то нужно заменить:
Импорт конфига
Для того, чтобы импортировать наш конфиг в программу достаточно кликнуть на файле zavod.ovpn 2 раза. Программа запросит пароль и добавит все сама.
Как пользоваться
В трее выбираем нужное соединение из выпадающего списка. Программе нужно примерно 30 сек. для подключения. При повторном клике происходит отключение от удаленной сети.
Источник
Connecting to Access Server with macOS
Each macOS device needs a client application to connect with your OpenVPN Access Server. We recommend using OpenVPN Connect, which is pre-configured to connect with your Access Server. This document provides information on using OpenVPN Connect as well as alternative solutions.
Installing a client application
The OpenVPN protocol is not built into macOS. Therefore, you must install a client app to handle communication with Access Server. A client app is required to capture the traffic you want to send through the OpenVPN tunnel, encrypt it, pass it on to the server, and decrypt the return traffic.
OpenVPN Connect with your Access Server
Your installation of OpenVPN Access Server includes a copy of OpenVPN Connect, which is a separate package called openvpn-as-bundled-clients that is updated when new versions of OpenVPN Connect are released. OpenVPN Connect is our official client app and your users can download it directly from your client UI, pre-configured to connect with your server, or download it separately from our website and import a connection profile.
Steps: Access your client UI
- Open a browser and enter your Access Server IP address or the custom hostname if you have set that up (recommended).
- Enter your username and password.
- Once you have signed in, the recommended OpenVPN Connect app for your device displays at the top. Also shown are downloads for other platforms as well as connection profiles.
OpenVPN Connect only supports one active VPN tunnel at a time. It was purposely designed to not support connections to two or more servers simultaneously. Connecting to two servers at the same time requires two different adjustments to the routing table on the client computer. Therefore, it is very easy to make a mistake and break connectivity or cause traffic to flow to the wrong destination. Limiting connections to one server ensures connectivity and traffic flow. OpenVPN Connect can store many profiles for different servers, but you can only actively connect to one at a time.
OpenVPN Connect also supports client-side scripting, importing connection profiles directly from Access Server, and connecting with a server-locked profile. A server-locked profile enables you to authenticate any valid user on your Access Server without installing unique connection profiles for each user.
OpenVPN Connect v3
We recommend and support OpenVPN Connect v3 as the official app for OpenVPN Access Server and OpenVPN Cloud. The client software offers client connectivity across four major platforms: Windows, macOS, Android, and iOS. For Linux, we recommend the open source OpenVPN client.
We recommend downloading OpenVPN Connect v3 directly from your Access Server web client UI. You can also download the installation file for OpenVPN Connect v3 from the download page on our site or with the link below. The app installation from our site does not contain any connection settings, so you’ll need to take additional steps to configure the connection to your Access Server. If you are installing the below file on a computer that already has OpenVPN Connect v3 installed and configured, it simply updates it to the latest version and retains all settings.
OpenVPN Connect v2
This is the previous generation of OpenVPN Connect client software for OpenVPN Access Server. It is still supported but we recommend people to use OpenVPN Connect v3 instead.
Alternative OpenVPN open source client: Tunnelblick
The open source project also has a client for macOS called Tunnelblick. Tunnelblick supports the option to connect to multiple OpenVPN servers simultaneously, which can cause connection issues if not configured correctly. You must not implement conflicting routes and subnets. Unlike on Windows platform, however, you don’t need to add multiple virtual network adapters because they are provisioned automatically.
Tunnelblick also supports drag-and-drop for adding OpenVPN connection profiles, which can be .conf or .ovpn file extensions. For example, you can download a user-locked or auto-login profile from the OpenVPN Access Server web interface and drag-and-drop it on the Tunnelblick icon. The system tray menu then shows you the options for using the connection profile. Tunnelblick doesn’t support client-side scripting, importing connection profiles directly from an Access Server, or connecting with a server-locked profile.
Alternative OpenVPN client: Viscosity
Viscosity is a third-party OpenVPN client that is created by SparkLabs. Viscosity is available for Windows and macOS and is compatible with OpenVPN Access Server.
Other client GUI projects
There are many VPN clients built for the OpenVPN protocol that will also work with OpenVPN Access Server. Refer to the community website for the current list.
Helpful Resources
For further information on VPN configuration details, refer to this documentation:
Источник
Настройка OpenVPN в macOS
Настройка для Tunelblick
Если ваша версия macOS старшее MacOS X Leopard, вы можете воспользоваться клиентом OpenVPN Tunnelblick.
Tunnelblick также работает и на современных версиях macOS. Для настройки работы Tunellblick выполните следующие действия:
1. Скачайте инсталятор Tunelblick Tunnelblick и установите его.
2. Распакуйте конфигурационные файлы, выданные техподдержкой. Вы также можете их скачать в личном кабинете.
3. Откройте файл с конфигурационного файла ovpn в программе Tunnelblick.
4. Выберите в меню Tunelblick пункт Connect config. При запросе логина и пароля, ввести их, взяв из файла pass.txt,
который также был в архиве с конфигурационными файлами.
5. Для проверки работы сервиса, можете обратитесь к странице https://whoer.net/ru. В отчете Вы можете увидеть текущий IP-адрес.
После окончания работы с VPN, кликните в меню Tunelblick выберите Disconnect config.
Настройка для Viscosity
Если у Вас Mac OS X Leopard или новее, наиболее удобной в использовании является клиент OpenVPN Viscosity.
В этом случае настройка VPN-сервиса сводится к следующим действиям:
1. Скачайте последнюю версию программы Viscosity и установите.
2. Распакуйте конфигурационные файлы, доступные в ваших заказах, в любой каталог.
3. Откройте конфигурационный файл ovpn в программе Viscosity.
4. Далее в верхнем меню рядом с часами кликаем на икноку Viscosity и в выпадающем меню программы выбираем Connect,
в диалоговом окне вводим имя пользователя и пароль (находятся в файле pass.txt в архиве в Ваших заказах).
5. Для проверки работы сервиса, можете обратитесь к странице https://whoer.net/ru. В отчете Вы можете увидеть текущий IP-адрес.
После окончания работы с VPN, кликните в меню Viscosity выберите Disconnect.
Настройка для OpenVPN Connect 3
1. Скачайте дистрибутив OpenVPN Connect 3 с официального сайта openvpn.net и установите его.
2. Скачайте конфигурационные файлы из личного кабинете и распакуйте их
3. Чтобы добавить конфигурационный файл в OpenVPN Connect просто переместите файл на приложение.
4. Отметье галочкой — Connect after import и нажмите Add
5. При появлении ошибки Connection error — Missing external certificate, нажмите Continue.
6. Вы можете избежать появления данной ошибки в будущем, добавив в конфигурационый файл ovpn строчку
после этого, изменённый конфигурационный файл нужно снова передобавить в OpenVPN Connect.
7. Впн подключение активируется, вы сможете управлять им в OpenVPN Connect.
Источник