| |
||
![]()
Cisco's VPN Client 4.x for Macintosh OS X 10.2 through 10.5
Table of Contents
Reconfigure Installations Made Prior to August 1, 2009
What is a VPN and who can use it
Installation
Configuration
Making Your VPN Connection
Disconnecting
Reconfigure Installations Made Prior to August 1, 2009
The Division of Information Technology has upgraded the SF State VPN server. If you have already installed and configured the Cisco VPN client you must reconfigure the settings in order to connect to the new VPN server:
- Have an administrative user name and password available.
- Open the VPN Client by clicking on :
Finder > Applications> VPN Client.app
- Click on the Modify icon to edit the Properties for "SFSUVPN.
- In the Connection Entry field, replace "SFSUVPN" with "SFSU_VPN".
- In the Host field, replace the the existing IP number (130.212.199.5) with 130.212.253.75
- Select the Backup Servers tab and make certain the Enable Backup Servers checkbox is unchecked.
- Click on Save.
- You may make a VPN connection or close the VPN client.
What is a VPN and who can use it
Some networked university resources available to faculty and staff can only be accessed from a computer using a San Francisco State University IP Address. Among other things, this includes access to departmental Local Area Networks. Networked computers on campus always have an SFSU IP address, while computers connected to the Internet through a commercial ISP (Internet Service Provider) do not have an SFSU IP address. In other words, if you connect to the Internet from off campus using a commercial ISP you do not have access to certain on-campus resources. A VPN, or Virtual Private Network, makes a second connection to the Internet through an existing connection. The second connection is assigned a second IP address by a VPN server. Using Cisco's VPN client, faculty and staff can make a VPN connection to the university and be assigned an SFSU IP address. As an additional benefit, information passed through the VPN is encrypted from the client machine (your computer) to the VPN server.
Cisco VPN access has four requirements:
- You must be employed as faculty or staff at San Francisco State University.
- You must install and configure the Cisco VPN Client on your computer.
- Your Internet connection must be through a non-SFSU provider or through the campus-wide wireless network.
- You must have a San Francisco State University email/Internet account.
Benefits
- Access to networked resources available only to computers using a San Francisco State University IP address.
- Sensitive information (e.g., your LAN password) is encrypted using the IPSec protocol while passing through the VPN. This provides security between your off campus computer and our on campus VPN server.
Installation
1. For MacOS X 10.4 or 10.5, click on the Download Cisco VPN Client 4.9.01... button. For Mac OS X 10.2 or 10.3, click on the Download Cisco VPN Client 4.7... button. MacOS X 10.0 and 10.1 are not supported. You will need to enter your University ID number and PAC number, then save the client installer onto your desktop.
2. Double click on vpnclient4.9..01.dmg (OSX 10.4 or 10.5) or vnpclient4.7.dmg (OSX 10.2 or 10.3) to mount a disk image on the desktop named CiscoVPNClient then double click the disk image icon on the desktop to open the disk image.
3. Double click the Cisco VPN Client.mpkg icon to initiate the installer. On some versions of Mac OS X, the installer will ask for you to enter your username and password for the computer before you can continue with the installation.
4. The first dialog tells you the minimum version of Mac OS X you need to install the VPN client. If you have Mac OS X version 10.4 or 10.5 you should be using the Cisco VPN 4.9.01 installer and this screen will specify Mac OS X version 10.4 or greater. If you have Mac OS X 10.2 or 10.3 you should be using the Cisco VPN 4.7 installer and this screen will specify Mac OS X version 10.2 or greater.
5a. In the next dialog box will be the Software License Agreement. Read the Terms of the license, click continue.
5b. Another smaller dialog box will appear and prompt if you agree or disagree to the license. If you agree to the terms, click Agree.
6. Select your primary hard drive in the next dialog box. If you have multiple drives or have disk images mounted, these will be displayed at this time. Choose your primary (main) hard drive. Note that this screen tells you how much disk space you need for the version of the installer you are using.
7. Click Install.
8. Next, a dialog box will prompt for your username and password to your computer. This user must have administrative rights to the Macintosh.
9. The message "The software was successfully installed" will be displayed If the installation was successful, click Close.
10. The next step will be to configure the VPN client.
Configuration
- Locate the VPN Client.
( In OS X 10.2 and 10.3 the icon displays "VPN" instead of "CISCO"
) It should reside in your Applications folder. For your convenience, you may want to drag the VPN Client icon
to your dock. In the future you will be able to launch the VPN client from that location.
- Launch the VPN client.
- Click on the "New" icon to open a "Create New VPN Connection Entry" window.
- Fill in the top three fields of the "Create New VPN Connection Entry" window as follows:
- Connection Entry: SFSU_VPN note: there is an underscore between SFSU and VPN
- Description: Secure VPN to SFSU
- Host: 130.212.253.75
- Select the Authentication tab, enable Group Authentication, then enter the following settings:
- Name: vpnuser
- Password: sfsu
- Confirm Password: sfsu (Note: You will see "****" where you type in "sfsu")
- Select the Transport tab. Verify that:
- "Enable Transparent Tunneling" is checked.
- "IPSec over UDP (NAT / PAT) is selected.
- Click on "Save" to save the configuration for your SFSU VPN connection entry and return to the main "VPN Client" window. You should see "SFSU_VPN" listed as an entry under the "Connection Entries" column.
- If you are installing version 4.7 in OS X 10.2 or 10.3, reboot your machine after the installation is complete.
Making your VPN connection
- If you use a dial-up modem to connect to the Internet, make your Internet connection before opening the Cisco VPN Client.
- Open the VPN Client by clicking on the VPN icon that you created in the Dock or by clicking on the VPN icon in the Applications folder.
- Select the connection entry that was created earlier and click "Connect" in the Cisco VPN client dialog box.
- Once a connection is made, you will be prompted for your username and password in an authentication window. Use your San Francisco State University email account name and password. Remember, your account name does not include the "@sfsu.edu" that is in your email address. Click on "OK" to continue.
- Once you are connected, there will be a picture of a lock next to your "Connection Entry"
. The "Connect" button will also be transformed into "Disconnect". When finished using the VPN, click the "Disconnect" button and the VPN connection will be terminated.
- Disconnects Due to Timeouts!
- You will be disconnected if you don't transfer information over your VPN connection for more than one hour.
- You will be disconnected three hours after you make your VPN connection.
- You can double-click on the "unlocked padlock" icon on the task bar to open the VPN Client window then reconnect.
HOME
Site Home | What We Do | Help Desk | Account Services | Software | Hardware | Network
Telephone Services | Training | Computer Labs | Web Publishing | Policies | Sitemap | Contact Us
Last Modified: 07 August 2009
doit@sfsu.edu