Configuration files for the Chemistry OpenVPN service

For more information about the VPN service and instructions on how to install these files please go to https://www.ch.cam.ac.uk/computing/openvpn-service.

Standard configuration files

Most people will want one of the options from this section. These configurations will attempt to send traffic for the University network via the VPN, and everything else via your usual network connection.

• Android: Standard Chemistry VPN config file for Linux, iOS, Android, ChromeOS
• ChromeOS: Standard Chemistry VPN config file for Linux, iOS, Android, ChromeOS
• iOS: Standard Chemistry VPN config file for Linux, iOS, Android, ChromeOS
• Linux: Standard Chemistry VPN config file for Linux, iOS, Android, ChromeOS
• Windows: Standard Chemistry VPN config file for Windows. You also need to download the separate external credentials file and add your token to it.
• MacOS: Standard Chemistry VPN config file for Tunnelblick on Macs
• External credentials file template. Requires editing before use

TCP configuration files

These are only for use if you find the VPN is blocked on the network you are connected to, or you are having network issues. They use an alternative protocol which is slower but more reliable, and unlikely to be blocked.

• Android: Config file using alternative TCP protocol for Linux, iOS, Android, ChromeOS.
• ChromeOS: Config file using alternative TCP protocol for Linux, iOS, Android, ChromeOS.
• iOS: Config file using alternative TCP protocol for Linux, iOS, Android, ChromeOS.
• Linux: Config file using alternative TCP protocol for Linux, iOS, Android, ChromeOS.
• Windows: Config file using alternative TCP protocol for Windows. You also need to download the separate external credentials file and add your token to it.
• MacOS: Config file using alternative TCP protocol for Tunnelblick on Macs.
• External credentials file template. Requires editing before use

Full tunnel configuration files

These send all your traffic via the VPN and so can be slower than the standard config files. They are useful if you need to access resources outside the University network that use IP-based access control.

• Android: Full tunnel config file for Linux, iOS, Android, ChromeOS
• ChromeOS: Full tunnel config file for Linux, iOS, Android, ChromeOS
• iOS: Full tunnel config file for Linux, iOS, Android, ChromeOS
• Linux: Full tunnel config file for Linux, iOS, Android, ChromeOS
• Windows: Full tunnel config file with additional settings for Windows machines. Requires external credentials file.
• MacOS: Full tunnel config file for Tunnelblick on Macs
• External credentials file template. Requires editing before use

Specialist configuration files

These are specialist files for use with unusual clients, or in unusual situations. Most people won't need these.

• chemistry-no-certs.ovpn Standard config file without embedded certificates. You will also need to download the CA certificate, the client certificate, and the client key files. Only use this if your OpenVPN software cannot deal with an all-in-one config file.
• chemistry-full-tunnel-tcp.ovpn Full tunnel TCP config file for Linux, iOS, Android, ChromeOS
• chemistry-full-tunnel-token-win10-tcp.ovpn Full tunnel TCP config file with additional settings for Windows machines. Requires external credentials file.
• chemistry-full-tunnel-tcp.tblk.tar Full tunnel TCP config file for Tunnelblick on Macs
• chemistry-split-tunnel-private-nets.ovpn Split tunnel config file for Linux, Android, ChromeOS, iOS with additional private Chemistry routes. Only useful for IT staff.
• chemistry-split-tunnel-private-nets.tblk.tar Split tunnel config file for TunnelBlick on Macs with additional private Chemistry routes. Only useful for IT staff.
• chemistry-split-tunnel-private-nets-token-win10.ovpn Split tunnel config file for Windows machines with additional private Chemistry routes. Only useful for IT staff.
• External credentials file template. Requires editing before use
• ca.crt Certificate Authority. Only needed for setting up clients which cannot import one of the all in one config files.
• openvpn2027-2.client1.crt Client certificate. Only needed for setting up clients which cannot import one of the all in one config files.
• openvpn2027-2.client1.key Client key. Only needed for setting up clients which cannot import one of the all in one config files.