VPN Connection

Only use this VPN client if the Cisco Anyconnect Client does not work.

You need an active X.500 account to download and install the VPN client.
You need an active Computer Science and Engineering (CS&E), College of Science and Engineering (CSE) Labs, or X.500 (in ece-vpn AD group) account to be able to connect to the vpn server.

The VPN client software is available from the VPN download page.

Windows

Install the VPN client

1. Uninstall any older version of the VPN client. If it asks if you want to keep your profiles, say yes. You will need to reboot your computer after uninstalling the old VPN client.
2. Go to the folder where you downloaded the client software and unpack the (.exe) file. Follow the instructions to install the VPN client. You will need to reboot your computer after the installation.

Configure the VPN client

1. Start->All Programs->Cisco Systems VPN Client->VPN Client
   *A new window called VPN Client will appear.
2. Use the "Connection Entries" menu and select "New".
   *A new window called "VPN Client | Create New VPN Connection Entry" will appear.
3. Name the connection Entry: CS&E VPN (or whatever you want)
4. Enter a description in the description field if you want.
5. Locate the Host, Username, and Password which can be found on the VPN download page.
   Enter this information on the appropriate line.
   *You will need to enter the password in the "Confirm Password" text box as well.
6. Choose the Transport Tab (next to the Authentication Tab)
   *Make sure Enable Transparent Tunneling is selected IPSec over UDP
7. Choose Save

Run the VPN client

1. Start->All Programs->Cisco Systems VPN Client->VPN Client
   *A new window called VPN Client will appear.
2. Double-click on the connection that you created in Configure the VPN client (above).
3. In the popup box that prompts you for a username and password:
   
   • CS&E
     enter your CS&E UNIX username & password
     
   • EE
     enter your X.500 username & password
     
   • CSE Labs
     enter your CSE labs UNIX username & password
4. Select "Continue" in the VPN Client Banner box. After the connection is established, you should see a closed lock icon in the System Tray.

Vista Users

Vista is pre-configured to use an LM session security level that is not compatible with our Samba shares, e.g. your Y: drive. When attempting to mount a Samba share remotely, you may get the following error: "The referenced account is currently locked out and may not be logged on to."

If you experience this problem, you may need to use regedit to modify the the following registry key:
\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
and set the REG_DWORD value to 1.

Macintosh

Install the VPN client

1. Go to the folder where you downloaded the client software and double-click the file. It will mount a virtual disk image on your desktop called CiscoVPNClient
2. Go into this new disk that was just created. Double-click on the file called 'Cisco VPN Client.mpkg'. This will start the installer.
3. Run the installer, clicking 'continue' where required.

Configure the VPN client

1. Open your Applications folder and find the new program called 'VPNClient'.
2. Double-click this file to start the client software
3. Use the 'Connection Entries' menu and select 'New'.
   *A new window called 'VPN Client | Create New VPN Connection Entry' will appear.
4. Name the connection Entry: CS&E-VPN (or whatever you want)
5. Enter a description in the description field if you want.
6. Locate the Host, Username, and Password which can be found on the VPN download page. Enter this information on the appropriate line.
   *You will need to enter the password in the "Confirm Password" text box as well.
7. Choose the Transport Tab (next to the Authentication Tab)
   *Make sure Enable Transparent Tunneling is selected IPSec over UDP
8. Choose Save
9. You can run the the VPNClient software again. Highlight the CS&E-VPN entry and click Connect. You will be prompted for your CS&E Unix username and password.
10. You are now connected to the CS&E VPN Server.
    *All CS&E connections will go through the tunnel and all non-UofM connections will go through your ISP.

Ubuntu Linux

These instructions have been tested and are supported with Ubuntu 10.04.

Install the VPN client

1. Open a GNOME terminal by hitting Ctrl-Alt-T.
2. In the terminal, run:

   sudo apt-get install network-manager-vpnc

3. Follow the prompts, enter your password and press 'Y' and enter if necessary.
4. Left-click on the network manager icon in the upper-right. It will look like a wireless icon or an up-down arrow for a wired connection.
5. Select VPN Connections -> Configure VPN...
6. Select the VPN tab and click Add.
7. Select Cisco Compatible VPN and click Create...
8. Set a Connection name for the connection (i.e. CS, CSE Labs, etc.). The Gateway is eecs-vpn.cs.umn.edu. Leave the User password selector set it to Always Ask and set the Group password selector to Saved.
9. Go to the VPN download page and find the Username entry based on your domain in the VPN Client Information section. Put that username into the Group name prompt and put the corresponding password into the Group password prompt.
10. Put your own username into the User name prompt in the Optional section and leave the rest of the settings as the defaults. Your screen should resemble the example image below.
11. Click Apply. Close your browser then log out of Ubuntu and log back in. This is necessary to fully integrate the new VPN settings into the network manager. Even if the new VPN is selectable, it won't work without this step.

Run the VPN client

1. Left-click on the network manager icon in the upper-right.
2. Select VPN Connections and click on the name of your new VPN configuration.
3. In the Authenticate VPN box that pops up, enter your UNIX password and press Enter.
4. A padlock in the lower-right of the network manager icon indicates the VPN is active.

To disconnect from the VPN, left-click on the network manager icon in the upper-right and select VPN Connections -> Disconnect VPN...