Installing
Download the stable latest version of Tunnelblick from https://tunnelblick.net/downloads.html .
After installing tunnelblick, download the config file. The configuration file is compressed, so double-click it to expand it: you should then get a file 'chemistry.tblk'. ('chemistry.tblk' will not run from the Downloads folder. Copy to the Desktop). Double-click 'chemistry.tblk' to install the configuration.
Connecting
Select 'Connect Chemistry' from the TunnelBlick icon. The credentials you should use are your ChemNet credentials. These can be collected from https://apps.ch.cam.ac.uk/ssms/collectchemnet and it is OK to tell Tunnelblick to save them. If you are using Chrome as your web browser please type the credentials in, do not cut and paste as this has been proved not to work. Please note that the ChemNet username is your CRSID followed by @ch.2021.cam.ac.uk , not @cam.ac.uk . (There is an option for a Security Code, please ignore, we don't use that.)
Dealing with the warning: 'apparent public IP address was not different after connecting'
This warning appears when connecting using newer versions of Tunnelblick with our latest configuration files. It is a warning, not an error. It happens because in Chemistry and SPRI we configure the VPN to only send network traffic destined for the University of Cambridge over the VPN link, and all other traffic goes direct to its destination. This setup gives the best network performance for videoconferencing, while still allowing you to access University-only resources. There are two ways to avoid the warning:
- Disable the IP address checking feature using the checkbox on the "Preferences" panel of Tunnelblick's "VPN Details" window.
- Switch to using a 'Full Tunnel' configuration file. This will send all your network traffic via Chemistry's network when the VPN is on and may be slower. Full tunnel configuration can be downloaded from https://downloads.ch.cam.ac.uk/vpn/latest/mac/chemistry-full-tunnel.tblk...
