How to Configure Remote VPN

Last updated on 2018-03-27 23:56:31

Remote VPN on the Barracuda VPN Client for Windows allows you to connect or disconnect automatically via script. The rvpn.exe file is downloadable from Barracuda Networks.

Before You Begin

Create a VPN profile as described in How to Create VPN Profiles.
Download the rvpn.exe file from Barracuda Networks.

Step 1. Allocate the Profile in the Windows Registry

Start the registry editor and navigate to HKEY_USERS > .DEFAULT > Software > Barracuda Networks > Barracuda VPN > Profile. This directory contains an explicit directory for each VPN profile.

The sequence within the registry (1, 2, 3, …) does not match the sequence in the Barracuda VPN Client's user interface. Refer to the Description entry in the registry in order to find out which profile number matches the required VPN profile.

Step 2. Create a New Remote VPN Profile

An rvpn profile contains several parameters determining the actions to be taken when a profile is executed:

Parameter	Description
`-c [X]`	Initiate a connection. `[number of retries`]. Default is `1`.
`-a [X, *]`	Local password `[certificate password]`. This parameter is only necessary if a password is set.
`-aa`	Display a pop-up for the local password.
`-cs [X]`	Client shutdown password protection. Prompts for the password [`X`] whenever a user tries to shut down the VPN client. Leaving [`X`] blank deactivates this feature.
`-d`	Initiate disconnection.
`-f "X+X"`	Process to kill `[0, KILL]`.
`-g [X]`	The IP address of the VPN server. If this parameter is given, it overrules the server IP address configured in the profile.
`-h`	Hide the console.
`-n`	Set the profile name.
`-o`	Give a proxy password.
`-p`	Give a VPN server password.
`-pp`	Display a pop-up for the VPN client password.
`-preconnector [X]`	If the VPN connection is terminated, then this preconnection is also terminated (useful for e.g., terminating a modem connection).
`-r [X]`	Profile `[registry ID]`.
`-u [X]`	User.
`-v [X]`	Verbose.
`-x [X]`	Command (`showvpn, shofw`).

Examples:

rvpn.exe -c -r 3 -a vpntest -p a12b34c56 – Connects (-c) using client profile "3" (-r 3) and certificate password "vpntest" (-a vpntest) and server password "a12b34c56" (-p a12b34c56).
rvpn.exe -c 10 -r 3 -a vpntest -p a12b34c56 – The same example as the previous one, but with 10 retries for connecting (-c 10).
rvpn.exe -c -r 3 -aa -p a12b34c56 – Starts a query for a local certificate password (-aa) via pop-up. The script does not run automatically; it requires manual user input.
rvpn.exe -c -r 3 -a * -p a12b34c56 – Starts a query for a certificate password (-aa) via a DOS window. The script does not run automatically; it requires manual user input.

Connection Procedure

After successful authentication against the VPN server, the client requests the configuration from it. When the configuration is received, the VPN Service transmits this configuration to the Barracuda Networks Secure Personal Access Client (SPAC). This enables the SPAC to answer DHCP requests.

Client Initiates Connection – The client opens a socket on the server, starts the authentication process, and requests the configuration data.
Client Receives Configuration – IP address, subnet mask, WINS, DNS, etc. are received by the client.
Client Sends Received information to the SPAC – The previously received configuration data is sent to the Barracuda Networks Secure Personal Access Client.
Client Triggers ipconfig / renew – The newly received configuration data is applied to the Barracuda VPN Virtual Adapter.
SPAC Answers DHCP Requests for the Adapter – The Barracuda Networks Secure Personal Access Client answers DHCP requests for the virtual adapter using the previously received configuration data.

The operating system now reconfigures the virtual adapter. The additional routes that become available through the VPN connection are introduced to the network, and the corresponding personal ruleset for the Barracuda Personal Firewall is implemented.