About the HUJI VPN Client

System requirements

VPN Client Download

Installing the VPN client

The VPN client applications

Connecting with the VPN Client

About the VPN Client

The HUJI VPN Client for Windows (referred to in this user guide as VPN Client) is a software program that runs on a Microsoft^¨ Windows^¨-based PC. The VPN Client on a remote PC, communicating with a VPN server on an HUJI network , creates a secure connection over the Internet. Through this connection you can access a HUJI network as if you were an on-site user. Thus you have a Virtual Private Network (VPN). The server verifies that incoming connections have up-to-date policies in place before establishing them. VPN central-site servers can terminate VPN connections from VPN Clients.

As a remote user (low speed or high speed), you first connect to the Internet. Then you use the VPN Client to securely access HUJI network through a VPN server that supports the VPN Client.

System requirements:

• Computer with a Pentium^¨-class processor or greater

• One of the following operating systems:

  • Microsoft^¨Windows^¨ 95 (OSR2), Windows 98, or Windows 98 (second edition)

  • Windows ME

  • Windows NT^¨ 4.0 (with Service Pack 6, or higher)

  • Windows 2000

  • Windows XP

• Microsoft TCP/IP installed. (Confirm via Start > Settings > Control Panel > Network > Protocols or Configuration.)

• 10 MB hard disk space.

• RAM:

  • 16 MB for Windows 95/98

  • 32 MB for Windows NT and Windows ME

  • 64 MB for Windows 2000

  • 128 MB for Windows XP

   

• To install the VPN Client:

  • Administrator privileges if installing on Windows NT or Windows 2000

• Firewall software

  • If you have installed firewall software you need configure it for using VPN Client , in other case it is necessary to disable Firewall software during use of the VPN Client

    Enable IKE (IP Protocol 17) UDP port 500 and ESP (IP Protocol 50) on outgoing and incoming connections for IP of VPN server

• To use the VPN Client:

  • Direct network connection (cable or DSL modem and network adapter/interface card)

  • Internal or external modem
     

• For Windows 95, Microsoft Dial-Up Networking (DUN) version 1.2 or greater. (DUN 1.3 for Windows 95 is a recommended performance and security upgrade, and it is available as a free download from the Microsoft Web site, www.microsoft.com. Windows 98 includes the DUN 1.3 functionality.)

Installing the VPN Client

This guide is for users of remote clients who want to set up virtual private network (VPN) connections to a HUJI network.

Before installation verify that your computer meets VPN Client system  requirements .

The following steps will guide you through the brief process of installing the client.

1. If you have the earlier version of the VPN client installed on your computer, remove it using the Unistall option program menu  and reboot your system before trying to install the new client.

2. Quit all open programs before starting the installation (you will need to restart your computer at the end of the installation process).

3. There are two ways to install the VPN Client:

   • automatic (recommended) installation without user interaction in default  location on

     C:\Program Files\HUJI\HUJI VPN Client

   • installation wizard for custom configuration

4. The VPN Client can by downloaded from http://ca.huji.ac.il/services/internet/connect/vpnra/download.shtml.

5. To begin the installation process, click on the file you downloaded. The actual filename will vary between versions of the client, but usually begins with hujivpn-win- .

   This will start a Self-Extractor, seen below. Copy the path in the Unzip to folder field, and press the Unzip button. You may specify the files to be unzipped to any folder, but you will need to know the path to that folder in order to run the actual installer.

    



 

6. Click on Start -> Run. In the Open field, put the path of the folder copied from the self-extraction window, and press OK.

   • In the folder, find and double-click the icon marked  setup.exe.

   • If you have choose automatic installation VPN Client will be installed without your interaction

    

7. If you are running Windows 2000 or Windows XP, you may receive the following message before installation begins:

   

   Click the Yes button to continue.

    

8. If Internet Connection Sharing (ICS) is installed on your system, the VPN installer will inform you that the VPN client cannot be installed unless you remove or disable ICS on the computer. Instructions on how to remove or disable ICS on your system are available if you run into this problem.
9. The VPN files will then be installed on your computer.
10. If you are running Windows 2000 or Windows XP and the installation process stops, look to see if there is a window warning you that a component of the VPN client has not been tested by Microsoft. If you see such a warning, click Continue Anyway to continue with the installation (note: you may see such a message a few times--this is normal. Keep choosing to continue anyway).
11. Finally, you will be asked if you would like to restart your computer. Choose Yes and then click on the Finish button.
12. The client will be ready for use after your computer has restarted.

The VPN client applications

The VPN Client comprises the following applications, which you select from the Programs menu:

VPN Client Applications as Installed by automatic install

In logical order of use, the applications are as follows:

• Help - Displays an online manual with instructions on using the applications.

• HUJI VPN Dialer - Lets you configure connections to a VPN server and lets you then start your connections.

• Certificate Manager - Lets you enroll for certificates to authenticate your connections to VPN servers (not implemented)

• Log Viewer - Lets you display events from the log.

• Uninstall HUJI VPN Client÷Lets you safely remove the VPN Client software from your system and retain your connection and certificate configurations.

• SetMTU - Lets you manually change the size of the maximum transmission unit

Connecting with the HUJI VPN Client

After you have installed  the VPN client, you can now attempt to connect to the HUJI network.

1. Connect to your Internet Service Provider (ISP).

2. Open VPN Client from Start > Programs > HUJI VPN Client > HUJI VPN Dialer

3. In the HUJI  VPN Client main window, press Connect.

   

    

4. At the prompt, enter your ID number in the Username field (Type your 8 digits id number without the control digit. If your ID consists of less than 8 digits add zeros to the beginning). Enter your password (from your one time password card) in the Password field.

   Click on the OK button to proceed.

   
    

   Note: If you enter your username and/or password incorrectly, you will be prompted to enter them again. After three unsuccessful attempts to authenticate, the VPN client will return an authentication error.

    

5. At this point, the VPN client is active and  if you are connected properly a small yellow padlock icon will appear in your system tray (where most Windows computers display the time) while the VPN client is running. You can right-click on that icon and choose Status from the menu that appears to double-check : the Client IP address listed in the status window should start with the numbers 132.64 (like "132.64.12.12")

6. When you are done with the VPN client, right-click on the yellow padlock icon and choose Disconnect.  (Note:  while this will not disconnect you from the Internet, it will turn off the VPN client and may close certain Internet programs like telnet).
    

About the HUJI VPN Client

The HUJI VPN Client based on Cisco Systems VPN Client © 1992-2003 Cisco Systems, Inc. All rights reserved