VPN Instructions for Windows XP SP2 [TEL Instructions]


The Problem	Unblock Firewall	Add VPN by Program	Or Add VPN by Port	Restart	Other firewall software

  The Problem

VPN does not work with Windows XP SP2
If you install the VPN client and attempt to connect with the Windows XP SP2 firewall enabled (the default setting) the VPN client cannot connect to the VPN server. You will get an error message similar to the one below:

You must add VPN Client to the Exceptions list.

return to top

  Unblock Firewall

NOTE: By default Windows Firewall will ask you if you want to add a program to the exception list the first time you use the program. You will see a message with three choices: Keep Blocking, Unblock, or Ask Me Later.

Keep Blocking: Adds the application to the Exceptions list but in a Disabled state so that the ports are not opened. By adding the application to the Exceptions list, Windows Firewall does not prompt you every time it is run.

Unblock: Adds the application to the Exceptions list in an Enabled state so that the ports are opened.

Ask Me Later: Blocks unsolicited incoming traffic and does not add it to the Exceptions list. You will be prompted again the next time the application is run.

Select Unblock from the above choices.

To Add VPN Client to the Exceptions List - Do one of the following:

return to top

  Add VPN by Program

By Program:
These are the general steps to add a program to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" applications.

Click Start, and then click Control Panel.

Double-click Windows Firewall (or click Security Center and then Windows Firewall).

In the Windows Firewall control panel, click the Exceptions tab.

Click Add Program.

NOTE: You will see a list of installed programs.

Select the UAlbany VPN Client program and click OK to add the program (see below if the program is not listed).

Click OK to close the Windows Firewall control panel.

Restart the computer to enable these choices.
NOTE: If you didn't see the name of a program you were attempting to add above, click the Browse button. Then click My Computer. Double Click on Local Disk (C:). Navigate to C:\Program Files\University At Albany\VPN Client\ and select cpvnd.exe

OR

return to top

  Or Add VPN by Port

Or By Port:
These are the general steps to add a port to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" ports.

Click Start, and then click Control Panel.

Double-click Windows Firewall (or click Security Center and then Windows Firewall).

In the Windows Firewall control panel, click the Exceptions tab.

Click Add Port.

Enter the Name as VPN and the Port should be 62515. Select the UDP option and click OK to add the port.

Click OK to close the Windows Firewall control panel.

return to top

  Restart
Restart the computer to enable these choices.

return to top

  Other firewall software
If you have any other firewall enabled (including Windows XP prior to SP2), please see your software's instructions for adding the port to the exceptions list.

return to top


	The Problem	VPN does not work with Windows XP SP2 If you install the VPN client and attempt to connect with the Windows XP SP2 firewall enabled (the default setting) the VPN client cannot connect to the VPN server. You will get an error message similar to the one below: You must add VPN Client to the Exceptions list.

return to top

	Unblock Firewall	NOTE: By default Windows Firewall will ask you if you want to add a program to the exception list the first time you use the program. You will see a message with three choices: Keep Blocking, Unblock, or Ask Me Later. Keep Blocking: Adds the application to the Exceptions list but in a Disabled state so that the ports are not opened. By adding the application to the Exceptions list, Windows Firewall does not prompt you every time it is run. Unblock: Adds the application to the Exceptions list in an Enabled state so that the ports are opened. Ask Me Later: Blocks unsolicited incoming traffic and does not add it to the Exceptions list. You will be prompted again the next time the application is run. Select Unblock from the above choices. To Add VPN Client to the Exceptions List - Do one of the following:

return to top

	Add VPN by Program	By Program: These are the general steps to add a program to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" applications. Click Start, and then click Control Panel. Double-click Windows Firewall (or click Security Center and then Windows Firewall). In the Windows Firewall control panel, click the Exceptions tab. Click Add Program. NOTE: You will see a list of installed programs. Select the UAlbany VPN Client program and click OK to add the program (see below if the program is not listed). Click OK to close the Windows Firewall control panel. Restart the computer to enable these choices. NOTE: If you didn't see the name of a program you were attempting to add above, click the Browse button. Then click My Computer. Double Click on Local Disk (C:). Navigate to C:\Program Files\University At Albany\VPN Client\ and select cpvnd.exe OR

return to top

	Or Add VPN by Port	Or By Port: These are the general steps to add a port to the Windows XP SP2 Firewall Exceptions list. You should only do this for known, "safe" ports. Click Start, and then click Control Panel. Double-click Windows Firewall (or click Security Center and then Windows Firewall). In the Windows Firewall control panel, click the Exceptions tab. Click Add Port. Enter the Name as VPN and the Port should be 62515. Select the UDP option and click OK to add the port. Click OK to close the Windows Firewall control panel.

return to top

	Restart	Restart the computer to enable these choices.

return to top

	Other firewall software	If you have any other firewall enabled (including Windows XP prior to SP2), please see your software's instructions for adding the port to the exceptions list.

return to top