VPN Instructions

Connection

1. Open the Applications folder by pressing Command-Shift-A.
2. Double-click the “VPNClient” icon.
3. Select the Connection entry.

a. Select the second entry “UAlbany from home” unless you have a router installed or are using a wireless connection on your home network. You would then select "UAlbany from home using Router”.

4. Select Connect and you will be prompted for a username and password. The username is your NetID and the password is your Windows Network Access password.
5. When you have finished your VPN session, click on the VPN icon in the dock and click on Disconnect.

To download VPN ver 4.9.0 1 from home for Intel-based Mac OS 10.4 and higher including Leopard, click here

To download VPN ver 4.9 from home for Intel-based MACs OS 10.3 or less, click here

Problem: After the computer wakes up from sleep, I get one of the following errors:

Secure VPN Connection terminated locally by the Client.
Reason 422: Lost contact with the security gateway. Check your network connection.
Warning 201: The necessary VPN sub-system is not available. You can not connect to the remote VPN server.

Solution: When the computer goes into “Sleep” mode, your VPN connection is terminated. You must reconnect and re-enter your NetID and password.

Problem: On my MAC the VPN client displays an error message window and I can't close it.

Solution: If the VPN client doesn't respond, go to the Apple menu, select “Force Quit”, click “VPNClient”, and click the “Force Quit” button. Re-open the VPN Client program and try again.

Problem: After I enter my NetID and password, the VPN client's status bar says “Contacting the security gateway” and it takes a long time to connect.

Solution: You may have entered your NetID and password incorrectly. Click “Cancel connect” and try again.

Solution: You entered either your username or password incorrectly. The username is your NetID and the password is the Windows Network Access password you use to logon to the network when using your office computer on campus. If you do not remember your password, you may reset it. Go to the ITS page at www.albany.edu/its and select “Password Set/Reset”.

Solution: “UAlbany from home” is for remote users who need to access their Windows Network Access drives. Please note that you must have your own Internet Service Provider. This VPN Connection Entry does not provide internet service.

The second entry, “UAlbany from home using Router”, is for remote users who have a router or wireless service at home.

If you install the Cisco VPN client and attempt to connect with the Windows XP SP2 firewall enabled (the default setting) the VPN client cannot connect to the VPN server. You will get an error message similar to the one below:

NOTE: By default Windows Firewall will ask you if you want to add a program to the exception list the first time you use the program. You will see a message with three choices: Keep Blocking, Unblock, or Ask Me Later.

Keep Blocking: Adds the application to the Exceptions list but in a Disabled state so that the ports are not opened. By adding the application to the Exceptions list, Windows Firewall does not prompt you every time it is run.

Unblock: Adds the application to the Exceptions list in an Enabled state so that the ports are opened.

Ask Me Later: Blocks unsolicited incoming traffic and does not add it to the Exceptions list. You will be prompted again the next time the application is run.

These are the general steps to add a program to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" applications.

These are the general steps to add a port to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" ports.

If you have any other firewall enabled (including Windows XP prior to SP2), please see your software's instructions for adding the port to the exceptions list.

o Connect to the network.
o Select Start > right click on My Computer, click on Map Network Drive.
o In the Map Network Drive window, the first line will have a letter. You can change this to any letter you want as long as it is a letter not already in use.
o On the second line type labeled Folder, enter \\ followed by the IP of the Server you wish to map. i.e. \\169.226.63.45\yourgroupshare

o Select the Connect using a diferent user name link located in the window. On the Username line, enter ualbany\NetID. The password is your UAlbany Windows Network Access password. Then click OK.
o Click OK again in the Map Network Drive window. The added drive will appear in the window.





VPN Instructions VPN Instructions for Windows users VPN Instructions for MAC users FAQs and Troubleshooting Mapping Network Drives Configuring Outlook for Exchange VPN for Windows Installation It is recommended that all other applications be closed during the install so that your work is not lost. During an install, network connectivity may be temporarily dropped causing some applications to fail. Connection 1. Download and install the VPN Client. Accept all defaults during the install. Once the installation has finished, you may be required to restart your computer. 2. To access your Windows network folders, you connect to the internet using your ISP and then start the VPN client. 3. Select Start -> Programs -> UAlbanyVPN client -> VPN client (Vista users will select Start -> All Programs -> Cisco Systems VPN Client -> VPN client) 4. Select the connection entry. a. Select " UAlbany from home", unless you have a router installed or are using a wireless connection on your home network. You would then select "UAlbany from home using Router". 5. Select Connect and you will be prompted for a username and password. The username is your NetID and the password is your Windows Network Access password. 6. When you have finished the VPN session, click the VPN icon in your Windows system tray (usually located at the bottom right corner next to the clock) and select disconnect. You must start the VPN client each time you wish to access your campus files remotely. If you do not start VPN before launching your browser, you will be unable to connect to your network drives or access your Exchange mail. Download the VPN Client for your Windows computer. VPN for Windows 2000, XP 32 Bit and Vista 32 Bit More Information Mapping Network Drives Configuring your Exchange Account VPN for Macintosh Installation 1. Download the VPN client for your Mac. 2. Open the disk image file “macvpn4901.dmg” or "macvpn49.dmg" or "macvpn48.dmg" on your Desktop by double-clicking it. Note: some web browsers do this step automatically after download. 3. Double-click the newly mounted image “CiscoVPNClient” on your Desktop. In the window that appears, double-click the “Cisco VPN Client” package. 4. Follow the instructions for installing the software. Connection 1. Open the Applications folder by pressing Command-Shift-A. 2. Double-click the “VPNClient” icon. 3. Select the Connection entry. a. Select the second entry “UAlbany from home” unless you have a router installed or are using a wireless connection on your home network. You would then select "UAlbany from home using Router”. 4. Select Connect and you will be prompted for a username and password. The username is your NetID and the password is your Windows Network Access password. 5. When you have finished your VPN session, click on the VPN icon in the dock and click on Disconnect. To download VPN ver 4.9.0 1 from home for Intel-based Mac OS 10.4 and higher including Leopard, click here To download VPN ver 4.9 from home for Intel-based MACs OS 10.3 or less, click here To download VPN ver 4.8 from home for PowerPC MACs, click here Troubleshooting and FAQ's Problem: After the computer wakes up from sleep, I get one of the following errors: Secure VPN Connection terminated locally by the Client. Reason 422: Lost contact with the security gateway. Check your network connection. Warning 201: The necessary VPN sub-system is not available. You can not connect to the remote VPN server. *Solution:* When the computer goes into “Sleep” mode, your VPN connection is terminated. You must reconnect and re-enter your NetID and password. *Problem:* On my MAC the VPN client displays an error message window and I can't close it. *Solution:* If the VPN client doesn't respond, go to the Apple menu, select “Force Quit”, click “VPNClient”, and click the “Force Quit” button. Re-open the VPN Client program and try again. *Problem:* After I enter my NetID and password, the VPN client's status bar says “Contacting the security gateway” and it takes a long time to connect. Solution: You may have entered your NetID and password incorrectly. Click “Cancel connect” and try again. *Problem:* I can’t get past the login box. *Solution:* You entered either your username or password incorrectly. The username is your NetID and the password is the Windows Network Access password you use to logon to the network when using your office computer on campus. If you do not remember your password, you may reset it. Go to the ITS page at www.albany.edu/its and select “Password Set/Reset”. Problem: What is the difference between the Connection Entries? Solution: “UAlbany from home” is for remote users who need to access their Windows Network Access drives. Please note that you must have your own Internet Service Provider. This VPN Connection Entry does not provide internet service. The second entry, “UAlbany from home using Router”, is for remote users who have a router or wireless service at home. Problem: VPN does not work with Windows XP SP2 If you install the Cisco VPN client and attempt to connect with the Windows XP SP2 firewall enabled (the default setting) the VPN client cannot connect to the VPN server. You will get an error message similar to the one below: Solution: Add Cisco VPN Client to the Exceptions list NOTE: By default Windows Firewall will ask you if you want to add a program to the exception list the first time you use the program. You will see a message with three choices: Keep Blocking, Unblock, or Ask Me Later. Keep Blocking: Adds the application to the Exceptions list but in a Disabled state so that the ports are not opened. By adding the application to the Exceptions list, Windows Firewall does not prompt you every time it is run. Unblock: Adds the application to the Exceptions list in an Enabled state so that the ports are opened. Ask Me Later: Blocks unsolicited incoming traffic and does not add it to the Exceptions list. You will be prompted again the next time the application is run. Select Unblock from the above choices. To Add Cisco VPN Client to the Exceptions List - Do one of the following: By Program: These are the general steps to add a program to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" applications. 1. Click Start, and then click Control Panel. 2. Double-click Windows Firewall (or click Security Center and then Windows Firewall). 3. In the Windows Firewall control panel, click the Exceptions tab. 4. Click Add Program. NOTE: You will see a list of installed programs. 5. Select the UAlbany VPN Client program and click OK to add the program (see below if the program is not listed). 6. Click OK to close the Windows Firewall control panel. 7. Restart the computer to enable these choices. NOTE: If you didn't see the name of a program you were attempting to add above, click the Browse button. Then click My Computer. Double Click on Local Disk (C:). Navigate to C:\Program Files\University At Albany\VPN Client\ and select cpvnd.exe By Port: These are the general steps to add a port to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" ports. 1. Click Start, and then click Control Panel. 2. Double-click Windows Firewall (or click Security Center and then Windows Firewall). 3. In the Windows Firewall control panel, click the Exceptions tab. 4. Click Add Port. 5. Enter the Name as VPN and the Port should be 62515. Select the UDP option and click OK to add the port. 6. Click OK to close the Windows Firewall control panel. Restart the computer to enable these choices. Other firewall software: If you have any other firewall enabled (including Windows XP prior to SP2), please see your software's instructions for adding the port to the exceptions list. Mapping Network Drives Detailed Instuctions o Connect to the network. o Select Start > right click on My Computer, click on Map Network Drive. o In the Map Network Drive window, the first line will have a letter. You can change this to any letter you want as long as it is a letter not already in use. o On the second line type labeled Folder, enter \\ followed by the IP of the Server you wish to map. i.e. \\169.226.63.45\yourgroupshare Lincoln.univ.albany.edu = 169.226.63.45 Truman.univ.albany.edu = 169.226.63.29 o Select the Connect using a diferent user name link located in the window. On the Username line, enter ualbany\NetID. The password is your UAlbany Windows Network Access password. Then click OK. o Click OK again in the Map Network Drive window. The added drive will appear in the window. To Create a Shortcut to your Connection o Double-click on your My Computer icon. It should be located on your desktop. o A window will open displaying your available drives. Right-click on the newly created drive and select Create Shortcut. o You will then be presented a window stating that "Windows cannot create a shortcut here. Do you want the shortcut to be placed on the desktop instead?" Select Yes. o The shortcut will automatically be named. If you want to rename it, right-click on the shortcut icon and select Rename. The name of the shortcut will be highlighted. Type in an appropriate name and when finished, press the Enter key. Map a network drive for MAC OS X or later o On tool bar go to “GO" o Select Connect to Server o For the server where Network share is located, you need the IP address of the server. Lincoln.univ.albany.edu = 169.226.63.45 Truman.univ.albany.edu = 169.226.63.29 o In the address box, enter: cifs://<IP address of server>/<your sharename> o A prompt will appear. Enter domain, username and password. Enter these credentials and the network share should appear in the list of folders. Configuring Outlook for Exchange Right — click on the Outlook icon on your desktop. Select properties from the drop-down menu. Click on E-mail Accounts... Select "Add a new e-mail account" and click next Select "Microsoft Exchange Server" then click Next On the Exchange Server Settings, enter this information: Enter Microsoft Exchange Server: uaexch.univ.albany.edu If the box labeled "Use Cached Exchange Mode" is checked, click the box to uncheck it. Enter User Name: This is your full name as it appears in the Exchange Address Book Click Next, then Finish.