VPN: Installing the IPSec client

Transcription

1 IS1505 VPN: Installing the IPSec client Page 1 of 6 VPN: Installing the IPSec client This document outlines the process for installing and configuring the IPSec client on Windows 2000, XP and Vista User Guide IS1505 Downloading the materials Download the zip archive, vpn-client-bundle5.zip, from the University of Nottingham (UoN) downloads site You will need to be using a UoN IP address to do this. On unzipping to a temporary location, you should have the following files: vpnclient-win-msi k9.exe The installation executable 50client.pdf The Cisco manual (referred to as 50VC in this document) fixsp2fw.bat batch file to change XP SP2 firewall settings UoN.pcf Configuration file UoN-TCP.pcf Configuration file UoN-UDP.pcf Configuration file Before you start the installation Please read through these instructions before starting the installation of the VPN Client software. Check that your computer meets the minimum requirements specified in 50VC pages 2-2 to 2-4. Remove any existing VPN Client including the Sentinel Client (both Sentinel applications) and any other versions of Cisco VPN Client software. Note that the screenshots in this document were created with an earlier version of the software. The installation process however remains the same. Installation Create a folder to hold the installation files. This document assumes that the file is C:\vpnclient-files. Copy all the installation materials to this folder.

2 IS1505 VPN: Installing the IPSec client Page 2 of 6 Double-click the installation program (vpnclient-win-msi k9.exe). Browse to the folder created above and then click on [Unzip]. If this is successful then 13 files will be extracted. Find the file Setup.exe and run it. Click on [Next>].

3 IS1505 VPN: Installing the IPSec client Page 3 of 6 Read and understand the agreement. Click on [Yes] if you are happy to proceed. Accept the default value of the Destination Folder. There are known problems if you change this value. Click on [Next>].

4 IS1505 VPN: Installing the IPSec client Page 4 of 6 Accept the default value of the Program Folder. Click on [Next>]. The application now starts to install itself. The change to Network Settings may take several minutes. Restart you computer by accepting the default option and clicking on [Finish].

5 IS1505 VPN: Installing the IPSec client Page 5 of Configuring the VPN Client Launch the VPN Client software from the Programs menu. From the Connection Entries menu select Import Navigate to the C:\vpnclient-files folder created at the start of the installation process, select UoN.pcf and click [Open]. The profile will be installed. Repeat this procedure for UoN-TCP.pcf and UoN-UDP.pcf. This process creates Connection Entry elements. Right-click on the UoN Connection Entry and select Set as Default Connection Entry from the context menu.

6 IS1505 VPN: Installing the IPSec client Page 6 of Configuring the XP SP2 Firewall If you have enabled the XP SP2 firewall you will need to allow the following through: UDP/500 IKE UDP/4500 NAT-T (NAT Traversal) UDP/62515 CiscoVPN UDP/10000 IPSec/UDP TCP/10000 IPSec/TCP To do this 1. Click Start, and then click Control Panel. 2. Double-click Windows Firewall (or click Security Center and then Windows Firewall). 3. In the Windows Firewall control panel, click the Exceptions tab. 4. Click Add Port. 5. In the Name field, type CiscoVPN. 6. In the Port number field, type Click the UDP radio button. 8. Click OK to add the port. It should appear in the list of Programs and Services. It should be checked. Repeat for the other ports listed above, selecting TCP or UDP as appropriate. The batchfile fixsp2fw.bat in the C:\vpnclient-files folder will make all the necessary changes. If you are running any other type of firewall you will also need to enable IP Protocol 50 (ESP). This should not be confused with IP (TCP/UDP) port 50.