Necessary parts:
----------------

        openvpn-2-gui-install.exe
                - installs OpenVPN with a GUI (if you don't already have it)
                - ignore the following message if it appears during
                  the OpenVPN installation:

                        TAP-Win32 Adapter V8 has not passed Windows Logo
                        testing to verify its compatibility with Windows XP.


        putty-installer.exe
                - installs PuTTY (if you don't already have it)

        get_splash.bat
                - only need to use this once.
                - downloads an OpenVPN configuration and certificate.
                - you'll be prompted for your SecurID passcode.


Optional part:
--------------

        chk_splash.bat
                - can be used at any time to verify that SecurID
                  authentication is still functioning as expected.

----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- -----

After running get_splash.bat you should be able to use OpenVPN as many
times as you need.

Enter your current SecurID passcode when OpenVPN prompts for a password.

When the OpenVPN tunnel is running, use the following virtual hostnames

   ... to connect to the related AMS services:

	virtual host                    SAP#	TCP#
        ------------                    ----    ----
        qna.ovpn.cns.utoronto.ca          1     3201
        hrs.ovpn.cns.utoronto.ca          2     3202
        fis.ovpn.cns.utoronto.ca          3     3203

        ams.ovpn.cns.utoronto.ca          5     3205

        tng.ovpn.cns.utoronto.ca          9     3209
        rpt.ovpn.cns.utoronto.ca         10     3210
        lrn.ovpn.cns.utoronto.ca         11     3211

        dbp.ovpn.cns.utoronto.ca         13     3213
        qbp.ovpn.cns.utoronto.ca         14     3214
        pbp.ovpn.cns.utoronto.ca         15     3215
        ssm.ovpn.cns.utoronto.ca         16     3216


   ... or to connect to the related CAN systems:

	dwh1.ovpn.cns.utoronto.ca
	dwh2.ovpn.cns.utoronto.ca
	etl3.ovpn.cns.utoronto.ca
	etl4.ovpn.cns.utoronto.ca
	utbi.ovpn.cns.utoronto.ca
	utbitest.ovpn.cns.utoronto.ca
	ams-sig.ovpn.cns.utoronto.ca
	ams-its.ovpn.cns.utoronto.ca
	agate.ovpn.cns.utoronto.ca
	hrweb.ovpn.cns.utoronto.ca
	bela.ovpn.cns.utoronto.ca
	plaut.ovpn.cns.utoronto.ca
	ams-ebp.ovpn.cns.utoronto.ca
	ams-bc.ovpn.cns.utoronto.ca
	viktor.ovpn.cns.utoronto.ca
	qits.ovpn.cns.utoronto.ca
	agate1.ovpn.cns.utoronto.ca
	agate2.ovpn.cns.utoronto.ca



For example, to connect to AMS:

  previously:
    - the SAP gui was configured to connect to port 3205 on localhost.
    - the SSH client was configured to tunnel port 3205 to splash.
  now:
    - SSH tunnels are no longer necessary.
    - the SAP gui can be configured to connect to port 3205 on
      the virtual host "ams.ovpn.cns.utoronto.ca".