Get started with AWS Client VPN
Before you can establish a VPN session, your Client VPN administrator must create and configure a Client VPN endpoint. Your administrator controls which networks and resources you can access when you establish a VPN session. You then use a VPN client application to connect to a Client VPN endpoint and establish a secure VPN connection.
If you're an administrator who needs to create a Client VPN endpoint, see the AWS Client VPN Administrator Guide.
Topics
Prerequisites for using Client VPN
To establish a VPN connection, you must have the following:
-
Access to the internet
-
A supported device
-
For Client VPN endpoints that use SAML-based federated authentication (single sign-on), one of the following browsers:
-
Apple Safari
-
Google Chrome
-
Microsoft Edge
-
Mozilla Firefox
-
Step 1: Get a VPN client application
You can connect to a Client VPN endpoint and establish a VPN connection using the AWS provided client or another OpenVPN-based client application.
The AWS provided client is supported on Windows, macOS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
You can download the Client VPN application through one of two methods, depending on whether the administrator created the endpoint configuration file for the application:
-
If your administrator did not set up the endpoint configuration file, download and install the client from AWS Client VPN download
. After downloading and installing the application, proceed to Step 2: Get the Client VPN endpoint configuration file to get the endpoint configuration file from your administrator. -
If your administrator has already preconfigured the endpoint configuration file, you can download the Client VPN application, along with the configuration file, from the self-service portal. For the steps to download the client and configuration file from the self-service portal, see Download the AWS Client VPN from the self-service portal. After downloading and installing the application and file, go to Step 3: Connect to the VPN.
Alternatively, download and install an OpenVPN client application on the device from which you intend to establish the VPN connection.
Step 2: Get the Client VPN endpoint configuration file
You get the Client VPN endpoint configuration file from your administrator. The configuration file includes the information about the Client VPN endpoint and the certificates that are required to establish a VPN connection.
Alternatively, if your Client VPN administrator has configured a self-service portal for the Client VPN endpoint, you can download the latest version of the AWS provided client and the latest version of the Client VPN endpoint configuration file yourself. For more information, see Download the AWS Client VPN from the self-service portal.
Step 3: Connect to the VPN
Import the Client VPN endpoint configuration file to the AWS provided client or to your OpenVPN client application and connect to the VPN. For steps to connect to a VPN, including importing the endpoint configuration file, see the following topics:
For Client VPN endpoints that use Active Directory authentication, you will be prompted to enter your user name and password. If multi-factor authentication (MFA) has been enabled for the directory, you will also be prompted to enter your MFA code.
For Client VPN endpoints that use SAML-based federated authentication (single sign-on), the AWS provided client opens a browser window on your computer. You'll be prompted to enter your corporate credentials before you can connect to the Client VPN endpoint.
