Applicable Version: 10.00 onwards
Overview
Tunnelblick is an open source graphic user interface for SSL VPN on Mac OS X. It comes as a ready-to-use application with all necessary binaries and drivers. It does not require any additional installation. You just need to add the VPN tunnel configuration and encryption information.
Tunnelblick Client can be used to establish SSL VPN connection between Mac OS and Cyberoam.
Scenario
Configure SSL VPN for Mac OS X using Tunnelblick VPN client.
Configuration
You can configure SSL VPN for Mac OS X using Tunnelblick VPN client by following the steps below. Configuration is to be done in Cyberoam and Mac OS using Administrator profile.
Step 1: Configure SSL VPN with Tunnel Access Mode in Cyberoam
To know how to configure SSL VPN in Cyberoam, refer to the article How To – Configure SSL VPN in Cyberoam.
Step 2: Download and Install Tunnelblick Client.
Step 3: Download Cyberoam SSL VPN Client Configuration
To download Cyberoam SSL VPN Client Configuration, follow the steps below.
· Access Cyberoam SSL VPN Portal using the URL - https://<WAN IP address of Cyberoam:port> and login to the Portal.
· Click Download SSL VPN Client Configuration to download the client configuration and save it in your system.
A compressed file called ClientBundle.tgz is downloaded and saved at your mentioned location.
Step 4: Extract ClientBundle.tgz to Tunnelblick’s Configurations folder
Extract ClientBundle.tgz to Tunnelblick’s Configurations folder in your Mac system. The following files will be added to the folder as shown below.
- UserPrivateKey.key
- UserCertificate.pem
- RootCertificate.pem
- Client.crssl
Step 5: Configure client.crssl file according to parameters given below
Double click client.crssl to open it in a text editor. Append the following parameters to it and save it with the extension .ovpn.
|
Parameter
|
Value
|
|
ca
|
RootCertificate.pem
|
|
cert
|
UserCertificate.pem
|
|
key
|
UserPrivateKey.key
|
Note:
For firmware version 10.02.0 Build 224 onwards, append the parameters given above and remove the parameters:
- dhcp-renew
- dhcp-release
Step 5: Establish SSL VPN Connection with Cyberoam
