How to Configure the Barracuda VPN Client for macOS

After installing the Barracuda VPN Client for macOS, configure your VPN connection settings. In the Barracuda VPN Client, your VPN connection settings are saved in a VPN profile. You can create a new VPN profile or edit an existing VPN profile.

Configure the VPN Client

In the Barracuda VPN Configuration window, you can specify the settings for a new VPN profile or edit the settings for an existing VPN profile. In the Profile section, you can delete or rename the profile by clicking Delete or Rename.

1. Launch the Barracuda VPN Client. You can access it through the Finder and the Launchpad. It resides in the Applications folder. 

   

2. To create a new VPN profile, select New from the Profile Name drop-down list. To edit an existing VPN profile, select it from the Profile Name list and click Configure.

3. Enter a name for your new profile and click OK.
   
   
   The Barracuda VPN Configuration window opens.

   

4. Select the Authentication Type from the drop-down list.

   If the authentication method is certificate-based but you select Public Key or User + Pass only, the imported certificate will be removed. Any imported licenses will remain in the file system. If the authentication method is license-based but you select X509 Cert, X509 Cert + User/Pass, or User + Pass only, the imported license will be removed. Any imported certificates will remain in the file system.

5. In the Server Address field, enter the IP address or host name of the VPN server. You can also enter a comma-delimited list of VPN servers.

6. Enter the VPN Server Port.

7. If a proxy is required, configure it in the Proxy Settings section. You can specify the following settings:

   • Proxy Type – Select one of the following types:
     
     • No Proxy
     • HTTP (disables all tunnel modes except TCP)
     • Socks4 (disables all tunnel modes except TCP)
     • Socks5
   • Proxy Server – The IP address or host name of the proxy server. 
   • Proxy Port – The proxy server port. Examples for common port numbers are 3128 or 8080. Your network administrator can provide you with the correct port number.

   • Proxy User – The username to authenticate at the proxy server.

     The IP address and port number are required. In some cases, the username is also required. If the server requires a password, you are prompted for it when you initiate a VPN connection. The proxy server’s password cannot be set in the profile configuration. It must be set in the main window. The password is not stored locally unless you activate the Save in Keychain check box.

8. In the License Settings section, import your licenses and certificates.

   If you selected Public Key or User + Pass only from the Authentication Type list, a certificate cannot be imported. If you selected X509 Cert, X509 Cert + User/Pass, or User + Pass only from the Authentication Type list, a license file cannot be imported.

9. To import a license, click Choose next to the License Path field and select the required license.
   
10. To import a certificate, click Choose next to the Certificate Path field and select the required certificate.

11. Click Save.

Your VPN profile configuration is saved to a plain text ASCII file: /System/Library/barracudavpn/barracudavpn.conf

Configure Advanced Settings

In the Advanced Settings section, you can specify more detailed settings for the Barracuda VPN Client. In this section, not all settings are mandatory. Some settings depend on the proxy type for the VPN profile.

In this section, you can specify the following settings:

• Special Mode – To deactivate tunnel probing, select Silent. For normal operation, select None.
  This setting is dependent on the VPN server.
• Source IP – The IP address that is assigned to the client for the TAP device.
  This setting is dependent on the VPN server.

• Tunnel Mode – The protocol for the VPN tunnel. You can select TCP, UDP, or Hybrid.

  If you selected Socks4 or HTTP from the Proxy Type list, you can only select TCP.

• Tunnel Encryption Hash – The hash algorithm to be used. You can select MD5 or SHA1.
  The selected option must be supported by the VPN server.

• Tunnel Encryption – The tunnel encryption method. You can select AES128, AES256, CAST, BlowFish, 3DES, or DES.
  The selected option must be supported by the VPN server.
• TAP Device – The TAP device that is used for the VPN tunnel. In most cases, the required TAP device is /dev/tun0.
• Keep Alive – The interval in seconds to send keepalive signals.

After configuring your VPN profiles, you can start using your VPN connections. Continue with How to Establish a VPN Connection Using Barracuda VPN Client for macOS.