Virtual Private Network (VPN)

Transcription

1 Virtual Private Network (VPN) General information regarding VPN-connections, WLAN and VPN-tunnel Please note: Firstly, you have to connect to RUB-WLAN and then sign up with the VPN- Client. In contrast to eduroam the RUB-WLAN needs a VPN-connection for the internet access. A VPN-connection offers the user a secure data connection to the university since it is encrypted. Additionally, the computer ranks among the university network because of the used tunnel technology which allots an IP-Address of the university to the computer. This enables you to use services which are restricted to computers of the university network only, e. g. the access on website of the university library. As mentioned above you also need a VPN-connection to use the Wireless-LAN of the Ruhr- University Bochum. The service centre of the data processing centre offers the Cisco VPN- Client-Software for this purpose. You may download the VPN-Client here: You have the choice between clients for the operating systems Windows (32bit or 64bit), Linux, MacOS X 10.3.x and MacOS X >= 10.4 (Intel/PPC). Therefore, you just have to click on the operating system that is installed on your computer to download the specific client. Utilisation and requirements for VPN-connections to the university You should recognize that the VPN-connections are not encrypted connections inside the university. Currently, you may connect via the VPN-tunnel to make use of services which are only available inside the university or via direct ISDN-dial-in or alternatively the DFN@home access. You find the settings for Wireless-LAN inside the university at the end of this document. What is required for the authentication? You need to know the IPSec group name and the corresponding password as well as the address of the tunnel endpoint (Host). During the configuration of the connection you will be asked for a group name and a group password. Presently, you need to use the following identifications for the VPN-tunnel:

2 General settings: Address of the Host: cisco-vpn-1.rz.ruhr-uni-bochum.de Group name: RUB or RUBBIB (see below for the explanation of the difference) Group password: csmvpn3000 (Attention: The last three digits of the password are zeros!) RUBBIB: This group offers a completely tunnelled access (with all advantages and disadvantages). This means that the computer can access sites outside of the university using a university address. This is for example necessary to get access to services of the university library offered by third parties which demand the usage of a university address. RUB: This access is only partly tunnelled, which means that the computer keeps the extern IP-address for websites outside of the university. How do you use a VPN-Tunnel? After installing the VPN-client-software you connect to the internet according to the information of your internet service provider. The way of connecting to the internet (e. g. dialin, DSL or WLAN) is ineffectual for the use of the VPN-tunnel. When the installation is finished you should start the VPN-Client. Using the client for the first time, you choose the option New to open the window for configuring a new VPNconnection as it is shown in the Screenshots below: Authentication

3 Transport If you are using a router: Configure the tab Transport as it is shown in the screenshot below:

4 General Usage To start a connection via VPN you choose RUB-VPN or RUB-WLAN in the client window and press Connect. You need to enter your personal LoginID and the corresponding password for validation. Settings: Wireless LAN within the RUB via the WLAN RUB-WLAN The Host has the address: The group is named wlan (all lower case) The group password is wlan (all lower case) Important: During the connection establishment you will be asked for your personal valid LoginID and the corresponding password. Depending on the computer and the operating system: Tab Transport : Enable Transparent Tunneling DEACTIVATE or ACTIVATE as mentioned above.

5 WLAN Settings: Authentication Transport

6 Windows Vista note: vpngui has to be executed as administrator. It is located in the VPN folder. Starting Cisco VPN software To establish a connection choose either RUB-VPN or RUB-WLAN and press Connect. RUB-VPN: Access from outside the university to internal websites. RUB-WLAN: Access for internal WLAN usage. If you are asked to authenticate yourself you will need to enter your personal LoginID and the corresponding password.