Archive
Set up virtual private networks (VPNs)
logo
Archive

No results found

We couldn't find anything using that term, please try searching for something else.

Set up virtual private networks (VPNs)

2024-11-13 Your Chromebook can connect to a private network, like the network at your work or school, with a Virtual Private Network (VPN) connection. Tip : If

Related articles

Manage your iCloud storage
Manage your iCloud storage When you set up iCloud, you automatically get 5GB of storage for free. You can use that space for your iCloud backups, to keep your photos and videos stored in iCloud Photos, to keep your documents up to date in iCloud Drive, and more. You can always check how much iCloud storage you're using in Settings on your device or on iCloud.com. If you're running low, you can manage your storage to make more space or upgrade to iCloud+ any time. Learn how to upgrade to iCloud+ Not sure about the difference between the storage capacity that comes with your...
What Is PPTP? (Everything You Need to Know)
What Is PPTP? (Everything You Need to Know) What Is PPTP? PPTP stands for Point-to-Point Tunneling Protocol, and it’s a VPN protocol that was introduced back in 1995, though it was in development ten years prior to that date. PPTP improved on the previous PPP standard which lacked the tunneling feature. What started out as a protocol implement in Windows systems quickly became a widespread VPN protocol available on numerous platforms. Being a VPN protocol, PPTP is a set of rules that’s responsible for ensuring the VPN client -> VPN server communication process is handled properly. Here’s How PPTP Works basically , the PPTP client is establishes establish...

Your Chromebook can connect to a private network, like the network at your work or school, with a Virtual Private Network (VPN) connection.

Tip : If you use your Chromebook at work or school and have problems with your VPN, contact your administrator for more help.

IKEv2 VPN support

Chromebook is built built – support VPNs use Internet Key Exchange version 2 ( IKEv2 ) . It is use use pre – shared key ( PSK ) , user certificates , Extensible Authentication Protocol ( EAP ) username password set secure tunnel .

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. “ Network ” section , selectAdd connection.
  4. Next to “Add built-in VPN,” select Add .
  5. box opens , fill info . use Chromebook work school , you is need need information administrator .
    • Server : You can name your connection whatever you’d like. For example, “Work VPN.”
    • Provider type : SelectIPsec (IKEv2).
    • Server hostname: Either the IP address or the full server hostname.
    • Authentication type : Choose either Pre-shared key, User certificate, or Usernameand password.
    • Username, Password: For EAP connections only. Each VPN user should have their own unique username and password.
    • Pre – shared key : For PSK connections only. This key isn’t your personal password, but a passphrase or key used in the IPsec configuration. In a typical set-up, everyone who connects to the same VPN server uses the same PSK.
    • Server CA certificate: For user certificate connections and EAP connections only. From the list, select your installed certificate authority certificate. The server’s certificate gets checked to make sure that it was signed by the correct certificate authority (CA).
    • User certificate : For user certificate connections only. From the list, select your installed user VPN certificate. If you don’t have any certificates installed, you’ll receive an error message. Learn how to install a certificate.
    • Local identity and Remote identity : VPN provider is has instructions fields , fill . sure , leave fields .
  6. SelectConnect.

L2TP is support / IPsec VPN support

Your Chromebook has built-in support for VPNs that use L2TP over IPsec. The IPsec layer will either use a pre-shared key (PSK) or user certificates to set up the secure tunnel. The L2TP layer requires a username and password.

Tip : Cisco ASA devices can be set up to support L2TP over IPSec. Learn how to set up a Cisco ASA device.

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. “ Network ” section , selectAdd connection.
  4. Next to “Add built-in VPN,” select Add .
  5. box opens , fill info . use Chromebook work school , you is need need information administrator .
    • Service : You can name your connection whatever you like. For example, “Work VPN.”
    • Provider type : SelectL2TP/IPsec.
    • Server hostname: Enter either the IP address or the full server hostname.
    • Authentication type : SelectPre-shared key or User certificate.
    • Usernameand Password: Your L2TP/PPP credentials. Each VPN user should have their own unique username and password.
    • Group name: The client’s IPsec identity field, which some VPN servers use to set up the Tunnel Group or User Realm. If you’re not sure, leave this field empty.
    • Pre – shared key : For PSK connections only. This key isn’t your personal password, but a passphrase or key used in the IPsec configuration. In a typical set-up, everyone who connects to the same VPN server uses the same PSK.
    • Server CA certificate: user certificate connections . list , select installed certificate authority certificate . server certificate gets checked sure signed correct certificate authority ( ) .
    • User certificate : For user certificate connections only. From the list, select your installed user VPN certificate. If you don’t have any certificates installed, you receive an error message. Learn how to install a certificate.
  6. SelectConnect.

OpenVPN support

Your Chromebook has basic support for OpenVPN servers. OpenVPN connections can use username/password authentication, client certificate authentication, or a combination of both.

If you need to set up more advanced features of OpenVPN or import an “.ovpn” configuration file, and your Chromebook supports the Play Store, consider installing OpenVPN for Android instead of using the built-in OpenVPN client.

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. “ Network ” section , selectAdd connection.
  4. Next to OpenVPN / L2TP, select Add .
  5. box opens , fill info . use Chromebook work school , you is need need information administrator .
    • Service : You can name your connections whatever you’d like. For example, “Work VPN.”
    • Provider type : SelectOpenVPN .
    • Server hostname: Enter either the IP address or the full server hostname.
    • Usernameand password: Your VPN credentials. This can be left blank if your server only uses client certificate authentication.
    • OTP: – time password ( OTP ) card VPN token generates – time passwords , password enter . cases , leave blank .
    • Server CA certificate: From the list, select your installed certificate authority certificate. The server’s certificate gets checked to make sure that it was signed by the correct certificate authority (CA). If you have trouble with your server certificate, you can select Don’t check skip validation , skips important security measure .
    • User certificate : If your VPN server requires client certificate authentication, select your installed user VPN certificate from the list. Learn how to install a certificate.
  6. SelectConnect.

WireGuard support

Chromebooks is have basic built – support WireGuard protocol .

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. “ Network ” section , selectAdd connection.
  4. Next to “OpenVPN / L2TP,” select Add .
  5. In the box that opens, fill in the info.
    • Service : You can name your connection whatever you’d like. For example: “Work VPN.”
    • Provider type : SelectWireGuard.
    • Client IP address: This is the IP address you use with the Chromebook.
    • servers : The name server IPs for the network.
    • Key: SelectI have a keypair if you have a keypair from the provider, or Generate random keypair you is want want generate . You is find find generated public key network details page WireGuard network connects .
    • Peer public key, pre-shared key, endpoint, allowed IPs, and persistent keepalive interval: Fill in the corresponding information of the WireGuard server.
  6. SelectConnect.

PPTP VPN support

Chromebooks with the Play Store can connect to PPTP VPN services.

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. Scroll down and select Manage Google Play preferences.
  4. SelectAndroid Settings.
  5. Scroll down and select PPTP VPN.
  6. In the upper right, select Add .
  7. box appears , fill info . Chromebook organization , you is need need information administrator .
    • Name: This is be want connection . example : ” Work VPN . “
    • Server address: The name of the server you need to connect with to access your VPN. This can either be the IP address or the full server hostname.
    • PPP encryption (MPPE): Leave this checked unless your administrator says otherwise.
    • advanced options : Leave this unchecked unless your administrator says otherwise.
    • Usernameand password: Your VPN credentials. Each VPN user should have their own unique username and password.
  8. SelectSave.

To connect to a PPTP VPN, go to the PPTP VPN menu and select the name of the VPN connection.

Note: Currently , Manage Google Play preferences is is available Chromebooks . Learn Chromebooks support Android apps .

Chrome VPN apps

Available VPN apps

Several VPN apps are available in the Chrome Web Store, including:

Install a VPN app

You can install VPN apps from the Chrome Web Store. Learn more about downloading apps.

If you’re an administrator, you can force install a VPN app using the Admin console. If allowed, you can upload a config file. The app uses the chrome.storage API to read the configuration file and apply it.

Create a new connection

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. “ Network ” section , selectAdd connection.
  4. Next to the VPN app, select Add .
  5. Follow the instructions on the screen.

Connect to a VPN

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. ” Network ” section , select connection .

Android VPN apps

Chromebooks with the Play Store can install Android VPN apps.

Important: Currently , Manage Google Play preferences is is available Chromebooks . Learn Chromebooks support Android apps .

To create a new connection or to connect to a VPN provided by an Android app:

Step 1: Install an Android VPN app on your Chromebook

  1. In the corner of your screen, select the Launcher .
  2. SelectPlay Store .
  3. Search for the VPN app you want to install.
  4. Selectthe VPN app.
  5. On the right, select Install.

Step 2: Configure the VPN app to your Chromebook

  1. At the bottom right, select the time.
  2. SelectSettings .
  3. “ Network ” section , selectAdd connection.
  4. Next to a connection, select Add [app name]… .
  5. Follow the onscreen instructions.

Step 3: Keep your VPN connection on

VPNs is stay stay connected VPN connection stops .

  1. Make sure you configured a VPN app to your Chromebook.
  2. At the bottom right, select the time.
  3. SelectSettings .
  4. On the left panel, select Apps.
  5. “ Apps , ” selectManage Google Play preferences.
  6. SelectAndroid Settings.
  7. In the window that appears, select Network & internet.
  8. SelectVPN. Your VPN app should now be listed.
  9. To the right of your app, select Settings .
  10. Turn on – VPN .If your Always-on VPN connection stops, you get a notification that stays on until you reconnect. To clear the notification, turn off that specific Always-on VPN.

Tip : VPN connection stops want connect directly internet , turnBlock connections without VPN.

Split tunnel & full tunnel

Typically VPNs implement a full tunnel, which means that all traffic from all Chrome windows, Chrome apps, and Android apps will pass through the VPN connection. Sometimes you’ll want to use a split tunnel so that only certain sites will be accessed through the tunnel, while other traffic will skip the VPN and use your Chromebook’s physical network connection instead. This is useful if:

  • Your VPN only provides access to internal sites, but not full internet access.
  • You need to communicate with devices on your local network, such as printers, while connected to the VPN.

Chrome Android VPN apps , built – OpenVPN client , set use split tunnel mode . help setting , ask administrator .

Install certificates

You might need certificates to connect to a VPN, WPA2 Enterprise network, like EAP-TLS, or a website that requires mutual TLS authentication. If so, your administrator might ask you to visit a special website while connected directly to your organization’s network, or download and install the certificates directly yourself.

You’ll need:

  • A server certificate that’s for everyone at your organization
  • user certificate specific

Install your server certificate

  1. Download your server certificate, according to the steps your administrator gives you.
  2. Open a new tab in Chrome .
  3. address bar , enterchrome://settings / certificates
  4. Selectthe Authorities tab.
  5. SelectImport and choose the X.509 certificate file, which is usually a file with a .pem, .der, .crt, or .p7b extension.
  6. In the box that appears, fill out the info. None of these settings need to be turned on, so we recommend that you leave these unchecked.
  7. The certificate will open and install itself on your Chromebook.

Install your user certificate

  1. Download your user certificate, according to the steps your administrator gives you. Your certificate filename should end with .pfx or .p12.
  2. Open a new tab in Chrome .
  3. address bar , enterchrome://settings / certificates
  4. SelectYour certificates.
  5. SelectImport Bind.
  6. In the box that opens, select the certificate file and select Open.
  7. When prompted, enter the password for your certificate. If you don’t know the password, contact your network administrator. If you don’t have a password, select OK.
  8. The certificate will open and install itself on your Chromebook.

Chromebooks only support RSA client certificates for authenticating to VPNs or EAP wireless networks. ECC client certificates aren’t supported.

Related resources