Revision as of 10:32, 20 November 2024

VPN Access to the Company Network

Connecting via a Virtual Private Network (VPN) allows access to the company network from almost anywhere in the world. All employees have the option to connect to the network via VPN. All you need is your personal Windows login (Active Directory account) and a configuration file stored securely in 1Password.

When You Need (or Don’t Need) VPN

Most of our systems are fully functional even without a VPN connection.

Accessible Without VPN

OS/
Google Workspace
Asana
Parsec
…

Requires VPN

File Servers: pslsrv10 / pslsrv75

Software

OpenVPN

Install OpenVPN Connect
- Download and install the OpenVPN Connect application on your device.
- The application is available for multiple platforms, including Windows, macOS, iOS, and Android.
Obtain the VPN Profile
- The VPN profiles for Düsseldorf and Berlin are securely stored in 1Password.
- Open 1Password, search for "OpenVPN" and download the configuration file (.ovpn).
Import the VPN Profile
- Launch the OpenVPN Connect application.
- Click on Import Profile and select the configuration file you downloaded from 1Password.
- You can also drag and drop the file into the application for quick import.
Enter Your Credentials
- When prompted, enter your Active Directory username and password to authenticate.
- If you lost your credentials, contact IT support.
Connect to the VPN
1. After importing the profile, select either Düsseldorf or Berlin as your preferred connection.
2. Click Connect to establish a secure VPN connection.
Verify the Connection
1. Once connected, you should see a status indicator confirming the active VPN connection.
2. You can now access resources that require VPN, such as file servers (pslsrv10 / pslsrv75).

If you encounter any issues during setup or connection, reach out to IT support for assistance.

WireGuard

You can request a WireGuard account for VPN access via email. Please note that a separate account is required for each computer and for each VPN gateway (Düsseldorf or Berlin). Request your WireGuard account.

@@ Line 1: / Line 1: @@
 [[File:Parasol_VPN_Route.png|right|400x400px]]
-Die Verbindung per '''virtuellen privaten Netzwerk (VPN)''' ermöglicht den '''Zugriff auf das Firmennetzwerk''' von nahezu jedem Ort auf der Welt. '''Alle Mitarbeiter''' haben die Möglichkeit sich per VPN mit dem Firmennetzwerk zu verbinden. Du benötigst lediglich deinen persönlichen [[Accounts#Windows Login (ActiveDirectoryAccount)|Windows Login (Active Directory Account)]] und eine personalisierte Konfigurationsdatei, die im [[Virtual Private Network (VPN)#UserPortale|UserPortal]] heruntergeladen werden kann.<br>
-<br>
-<br>
-<br>
-=== Wozu du VPN (nicht) brauchst ===
+=== VPN Access to the Company Network ===
-Die Meisten unserer Systeme sind auch ohne VPN Verbindung uneingeschränkt nutzbar.<br>
+Connecting via a Virtual Private Network (VPN) allows access to the company network from almost anywhere in the world. All employees have the option to connect to the network via VPN. All you need is your personal [[Accounts#Windows Login (Active Directory Account) p5l.io|Windows login (Active Directory account)]] and a configuration file stored securely in 1Password.<br>
-==== auch ohne VPN ====
+==== '''When You Need (or Don’t Need) VPN''' ====
-* OS/
+Most of our systems are fully functional even without a VPN connection.
-* Google
-* Asana
-* Parsec
-* ...
-==== nur mit VPN ====
+===== '''Accessible Without VPN''' =====
-* Fileserver pslsrv10 / pslsrv75
-=UserPortale=
+* '''OS/'''
-Beide Standorte, Düsseldorf und Berlin, bieten einen Zugangspunkt zum VPN. Jeder dieser Zugangspunkte hat ein '''eigenes UserPortal''' und auch die heruntergeladenen Konfigurationsdateien sind unterschiedlich. Entscheide dich am besten immer für den näheren Zugangspunkt. Es ist aber auch möglich beide zu konfigurieren.<br>
+* '''Google Workspace'''
-<br>
+* '''Asana'''
-https://vpn.dus.parasol-island.com (Düsseldorf)<br>
+* '''Parsec'''
-https://vpn.ber.parasol-island.com (Berlin)<br>
+* …
-<br>
-* Logge dich mit deinem [[Netzwerk, Accounts & Administration#Active Directory Account|Active Directory Account]] ein. Beispiel: jDoe@p5l.io
-[[File:Screenshot 2020-04-09 at 19.14.53.png|800px]]<br>
-* Wechsel auf die Seite "Fernzugriff".
-[[File:Screenshot 2020-04-09 at 19.15.04.png|800px]]<br>
-* Lade dir für deinen Windows Computer oder Mac das Installationspaket bzw. die Konfigurationsdatei herunter. Welcher Link für dich der richtige ist wird auch noch im nächsten Abschnitt beschrieben.
-[[File:Screenshot 2020-04-09 at 19.15.17.png|800px]]<br>
-==Windows User==
+===== '''Requires VPN''' =====
-Als Windows User lade dir bitte das "vollständige Installationspaket" herunter. In dem Paket ist neben der Konfigurationsdatei auch die benötigte Software.<br>
-[[File:Screenshot 2020-04-09 at 19.15.17_win.png|800px]]<br>
-==macOS User==
+* '''File Servers''': pslsrv10 / pslsrv75
-macOS und Linux User laden sich bitte nur dir Konfigurationsdatei herunter.<br>
-[[File:Screenshot 2020-04-09 at 19.52.26_mac.png|800px]]<br>
-Zudem benötigen macOS User die Software Tunnelblick.
 =Software=
-==Windows==
-Die benötigte Software kann aus dem UserPortal heruntergeladen werden.
-==Tunnelblick (macOS)==
-Für die Installation unter macOS wird die Software Tunnelblick benötigt.<br>
-* Tunnelblick herunterladen und installieren (https://tunnelblick.net)
-* Tunnelblick starten
+=== OpenVPN ===
-* Eure persönliche Konfigurationsdatei auf das Tunnelblick-Symbol schieben
-<br>[[File:Bildschirmfoto 2023-11-28 um 11.28.49.png|frameless|714x714px]]
-* '''<font color=red>UPDATE: Ab Tunnelblick 4.0.0 (build 5970) ist es notwendig die OpenVPN Version auf 2.5.9 zu stellen.</font>'''
-[[File:Tunnelblick OpenVPN Version.png|frameless|500x500px]]<br>
-* Einloggen und verbinden
-= Experimentell =
+# Install OpenVPN Connect
+#* Download and install the [https://openvpn.net/client/ OpenVPN Connect] application on your device.
+#* The application is available for multiple platforms, including Windows, macOS, iOS, and Android.
+# Obtain the VPN Profile
+#* The VPN profiles for [https://start.1password.com/open/i?a=HMMAXSRMWVE7FDFVUJ34APZMUE&v=bzbkhnu5rkuhy3si43hy67cc2u&i=jp6nxey2b7pyxnjmq27hkrf35i&h=parasolisland.1password.eu Düsseldorf] and [https://start.1password.com/open/i?a=HMMAXSRMWVE7FDFVUJ34APZMUE&v=bzbkhnu5rkuhy3si43hy67cc2u&i=jp6nxey2b7pyxnjmq27hkrf35i&h=parasolisland.1password.eu Berlin] are securely stored in 1Password.
+#* Open 1Password, search for "OpenVPN" and download the configuration file (.ovpn).
+# Import the VPN Profile
+#* Launch the OpenVPN Connect application.
+#* Click on Import Profile and select the configuration file you downloaded from 1Password.
+#* You can also drag and drop the file into the application for quick import.
+# Enter Your Credentials
+#* When prompted, enter your [[Accounts#Windows Login (Active Directory Account) p5l.io|Active Directory]] username and password to authenticate.
+#* If you lost your credentials, contact [mailto:service@parasol-island.com?cc=peter.norenkemper@parasol-island.com&subject=ActiveDirectory%20account%20credentials IT support].
+# Connect to the VPN
+## After importing the profile, select either Düsseldorf or Berlin as your preferred connection.
+## Click Connect to establish a secure VPN connection.
+# Verify the Connection
+## Once connected, you should see a status indicator confirming the active VPN connection.
+## You can now access resources that require VPN, such as file servers (pslsrv10 / pslsrv75).
-=== OpenVPN ===
-Install [https://openvpn.net/client/ OpenVPN Connect], import the Profile for [https://start.1password.com/open/i?a=HMMAXSRMWVE7FDFVUJ34APZMUE&v=bzbkhnu5rkuhy3si43hy67cc2u&i=jp6nxey2b7pyxnjmq27hkrf35i&h=parasolisland.1password.eu Düsseldorf] or [https://start.1password.com/open/i?a=HMMAXSRMWVE7FDFVUJ34APZMUE&v=bzbkhnu5rkuhy3si43hy67cc2u&i=jp6nxey2b7pyxnjmq27hkrf35i&h=parasolisland.1password.eu Berlin]and enter your credentials.
+If you encounter any issues during setup or connection, reach out to [mailto:service@parasol-island.com?cc=peter.norenkemper@parasol-island.com&subject=VPN%20-%20Assistance%20needed%20 IT support] for assistance.
 === WireGuard ===
-Request your WireGuard account via [mailto:service@parasol-island.com?cc=peter.norenkemper@parasol-island.com&subject=Request%20a%20WireGuard%20account&body=Hey%2C%0A%0AI%20would%20like%20to%20have%20a%20WireGuard%20account%20for%20the%20computer%20name%20____________.%0A%0AThanks%20in%20advance%0A%0AAverage%20guy e-Mail].
+You can request a WireGuard account for VPN access via [mailto:service@parasol-island.com?cc=peter.norenkemper@parasol-island.com&subject=WireGuard%20account%20request&body=Hey%2C%0A%0AI%20would%20like%20to%20sign%20up%20for%20a%20WireGuard%20account.%0A%0AComputer%20name%20____________%0AVPN%20gateway%20D%C3%BCsseldorf%20%5B%20%5D%20Berlin%20%5B%20%5D%0A%0A%0AThanks%20in%20advance%0A%0AAverage%20guy email]. Please note that a separate account is required for each computer and for each VPN gateway (Düsseldorf or Berlin). [mailto:service@parasol-island.com?cc=peter.norenkemper@parasol-island.com&subject=WireGuard%20account%20request&body=Hey%2C%0A%0AI%20would%20like%20to%20sign%20up%20for%20a%20WireGuard%20account.%0A%0AComputer%20name%20____________%0AVPN%20gateway%20D%C3%BCsseldorf%20%5B%20%5D%20Berlin%20%5B%20%5D%0A%0A%0AThanks%20in%20advance%0A%0AAverage%20guy Request your WireGuard account.]