Staff and Student VPN User Dcumentatin This dcument is brken dwn int the fllwing sectins fr yur cnvenience. Quick installatin guide Installing the VPN sftware (detailed versin) System Requirements Cnnecting t the University via VPN AnyCnnect n a Client PC Using the VPN service Cnnecting t yur H: Drive (Windws Instructins) Cnnecting t yur H: Drive (Mac Instructins) Outlk 2007 and 2010 (Staff Persnal PC) Outlk 2003 (Staff Persnal PC) Outlk (Staff University wned Laptp) Trubleshting Intrductin t VPN This dcument prvides instructins n hw t cnnect t the VPN slutin fr Staff and Students t gain access t varius resurces available n the Staffrdshire University netwrk Infrastructure. Please nte that the new VPN service is nly available ff Campus. A VPN prvides secure access t a private netwrk using public netwrk infrastructure t cnnect a remte cmputer t privileged University resurces. Once cnnected t the VPN Staff and Student users will be able t access the fllwing services:- Netwrk share access such as H:\ drive Surf the University Web site Access t email via Micrsft Outlk and Web Outlk Prcess Overview Yu will visit the URL https://vpn.staffs.ac.uk and yu will be asked t enter yur username and passwrd. After successful authenticatin yu will be asked t install the Cisc Anycnnect sftware which will then autmatically make a cnnectin t the University. (Please nte that this is a netime prcess and any subsequent uses f the VPN can be made by using the Shrtcut made n yur Start Menu.) Yu can then map a shared drive r access ther resurces. 1
1) Quick Start Guide This Quick Start Guide applies t all Windws, Macintsh and Linux Operating Systems supprted under the system requirements sectin belw. 1. Open yur web brwser. 2. Navigate t https://vpn.staffs.ac.uk 3. Select frm the grup bx if yu are a Student r Staff member. 4. Enter yur Username. 5. Type yur passwrd in the passwrd bx and click n the lgin buttn. 6. Yu will have t agree t the Terms and Cnditins presented n the next screen t prceed. Press Cntinue t accept. 7. Fllw any n-screen prmpts t install any brwser cntrls. If yu get any ther errr messages, r the installatin fails, then please refer t the detailed installatin prcess in the next sectin f this dcument, r the Trubleshting sectin at the end f this dcument. 8. Yur web brwser will nw display a message stating that the installatin was successful. 9. Yu can nw use the VPN service. Further assistance If yu require further help can visit:- http://www.staffs.ac.uk/abut_us/university_departments/infrmatin_services/it/vpn/ r cntact 3800@staffs.ac.uk 2
1) Installing the VPN sftware (detailed versin) System Requirements Yu first need t check that yur cmputer meets the minimum system and cnnectin requirements:- Bradband Netwrk Cnnectin Windws XP Windws Vista (32-bit and 64-bit). Windws 7 (32-bit and 64-bit). Please Nte: As f April 2014 Micrsft have withdrawn Supprt fr Windws XP Apple OS Mac OS 10.5 Mac OS 10.6.x (32-bit and 64-bit) Unix / Linux x86 instructin set. 32-bit r biarch 64-bit prcessr 32 MB RAM. 20 MB hard disk space. SuperUser privileges. libstdc++ users must have libstdc++ versin 3.3.2 (libstdc++.s.5) r higher, but belw versin 4. Firefx 2.0 r later with libnss3.s installed in /usr/lcal/lib, /usr/lcal/firefx/lib, r /usr/lib. Firefx must be installed in /usr/lib r /usr/lcal, r there must be a symblic link in /usr/lib r /usr/lcal called Firefx that pints t the Firefx installatin directry. libcurl 7.10 r later. penssl 0.9.7a r later. Java 5 (1.5) r later. Iced Tea is the default Java package n Fedra 8. The nly versin that wrks fr web installatin is Sun Java. Yu must install Sun Java and cnfigure yur brwser t use that instead f the default package. zlib. gtk 2.0.0 gdk 2.0.0, libpang 1.0. iptables 1.2.7a r later. tun mdule supplied with kernel 2.4.21 r 2.6 3
Cnnecting t the University via VPN T gain access t resurces via VPN users will need an internet cnnectin frm hme r any ther lcatin. Fr reliability issues we wuld recmmend a wired cnnectin. Once yu have cnfirmed a usable internet cnnectin yu shuld pen a web brwser and g t https://vpn.staffs.ac.uk which will present yu with the main VPN page. Step 1. Lgin page requesting users lgin credentials. Select the either the Student r Staff grup frm the drp dwn bx and enter yur username and passwrd in the username and passwrd bxes. NB. Previusly usernames were in the frmat f staff\username r student\username. This is n lnger the case s staff \, student\ can be mitted and yu can enter yur username n its wn. After filling in the Grup, Username and Passwrd fields, select Lgin t prceed. Step 2. Once lgged in yu will be presented with the University Plicy. NB. It is mandatry that yu agree t terms and cnditins f access. If yu are unsure please visit http://www.staffs.ac.uk/current/regulatins/it/index.php fr mre infrmatin. 4
Select cntinue t g t the next step. Step 3. Yu are then prmpted t Install ActiveX Cntrls as belw figure shws if applicable. This is s that the crrect versin f AnyCnnect is installed fr yur cmputer. Depending upn yur web brwser, yu may have t fllw the n-screen instructins fr installing the ActiveX Cntrl. Please see the trubleshting sectin at the end f this dcument fr help n this issue. 5
Once cmputer detectin has been determined, the client will prceed t install itself. Step 4. A prmpt will appear requesting yu t install the AnyCnnect client sftware n the machine. This will begin the autmatic installatin f the sftware. Select Install t cntinue. 6
Step 5. This prcess can take up t 5 minutes depending n the speed f yur internet cnnectin. Step 6. Once the AnyCnnect client is dwnladed, it will autmatically establish a cnnectin with the VPN service. Yu are nw cnnected t Staffrdshire University VPN system and can nw cntinue t use University services. 7
NB This is a ne-time prcess t install the Cisc sftware. There will be a Start Menu (Windws Only) shrtcut n yur system that shuld be used t start Anycnnect. Shuld yu mve cmputers then yu will need t repeat the abve prcess t reinstall the client t access the service. AnyCnnect n a Client PC Cnnecting Once the AnyCnnect client has been dwnladed it will remain n the PC unless the user decides t uninstall it. Yu d nt need t g t https://vpn.staffs.ac.uk every time yu wish t use the VPN. Step 1. G t START > Prgrams > Cisc > Cisc AnyCnnect VPN Client > Cisc AnyCnnect VPN Client and click n the Cisc VPN Client. Step 2. Once again it is mandatry that the user agree t the terms f use and click Accept t prceed. At this pint the user client cmputer will establish a secure cnnectin the University VPN server. Yu are nw cnnected t Staffrdshire University VPN system and can nw cntinue t use VPN services. 8
Discnnecting Step 1. Open the client and frm the Cnnectin tab chse Discnnect. Once discnnected it may take a cuple f minutes fr netwrk setting t take affect and the client PC may seem t freeze fr a minute r s, this is nrmal and is expected. Yu have nw discnnected frm the VPN system and can nw resume nrmal netwrk peratin. T cnfigure access t yur H:\ drive and Outlk please see the sectins belw. 10
2) Using the VPN Service Cnnecting t yur H: Drive Windws Instructins In preparatin t cnnect t yur H: drive, yu will need t knw the area f the student r staff server where yur flder is lcated. T make a cnnectin t the H: drive yu will be prmpted fr yur staff r student flder name, yur username and yur passwrd (i.e. exactly the same username and passwrd as when yu made the cnnectin t the VPN service). Nte: Student flder name will be in the frmat studentx where X is the first letter f yur surname fllwed by \ and then yur username Staff flder name is in the frmat staffx, where X is the first letter f yur username fllwed by a \ and then yur username Examples:- If the student user ab123456 wishes t cnnect t their H: drive \\crwnstuh1.student.staffs.ac.uk\studenta\ab123456 Or the staff user vpn10 wishes t cnnect t their H: drive:- \\crwnstah1.staff.staffs.ac.uk\staffv\vpn10 Step 1. Right-click n My Cmputer fr Windws XP r Cmputer fr Windws 7 and select Map Netwrk Drive 10
Step 2. In the windw that appears select a drive letter t assign the H: drive t (may we suggest drive H: as an aid t memry). Step 3. In the Flder bx, type Fr Students \\crwnstuh1\studentx\yur_student_username Fr Staff \\crwnstah1\staffx\yur_staff_username (See images abve) Step 4. Click Finish. Yu will then be prmpted fr yur Staff r Student username and passwrd details. Yur username needs t be prefixed by Fr Students it is student\yur_username Fr Staff it is staff\yur_username Yur passwrd is entered as nrmal. Step 5. Click OK. After a few secnds, yu shuld be cnnected t yur H: drive and can use it as nrmal. 11
Mac Instructins In preparatin t cnnect t yur H: drive, yu will need t knw the area f the student r staff server where yur flder is lcated. T make a cnnectin t the H: drive yu will be prmpted fr yur staff r student flder name, yur username and yur passwrd (i.e. exactly the same username and passwrd as when yu made the cnnectin t the VPN service). Nte: Student flder name will be in the frmat studentx where X is the first letter f yur surname fllwed by / and then yur username Staff flder name is in the frmat staffx, where X is the first letter f yur username fllwed by a / and then yur username Examples:- If the student user ab123456 wishes t cnnect t their H: drive smb://crwnstuh1.staffs.ac.uk/studenta/ab123456 Or the staff user vpn10 wishes t cnnect t their H: drive:- smb://crwnstah1.staffs.ac.uk/staffv/vpn10 Step 1. Frm Finder click the G menu and chse Cnnect t Server 12
Step 2. In the Server Address bx, type Fr Students smb://crwnstuh1.staffs.ac.uk/studentx/yur_student_username Fr Staff smb://crwnstah1.staffs.ac.uk/staffx/yur_staff_username Step 3. Click Cnnect. Yu will then be prmpted fr yur Staff r Student username and passwrd details. Yur username needs t be prefixed by Fr Students it is student\yur_username Fr Staff it is staff\yur_username Yur passwrd is entered as nrmal. Step 4. Click Cnnect. After a few secnds, yu shuld be cnnected t yur H: drive and can use it as nrmal. 13
Cnfiguring Outlk 2007 and 2010 fr Staff This guide is split up int the fllwing Sectins:- Micrsft Outlk 2007 and 2010 Micrsft Outlk 2003 University Laptp Users Micrsft Outlk 2007 and 2010 Once yu have cnnected t the VPN service yu will need t cnfigure yur utlk client with yur email accunt details. 1) Click START 2) Click Settings 3) Click Cntrl Panel Once the cntrl panel pens:- 1) Select Mail 2) Select Email Accunts This will pen the Accunt Settings Windw. 14
1) Click the Email Tab 2) Select New Here yu will enter yur wn user credentials which are mandatry fr cnnectin t Outlk. 15
1) Enter yur Name 2) Enter yur email address (yur.email.address@staffs.ac.uk) 3) Enter yur passwrd (this is the same passwrd yu use t lg nt yur University cmputer) 4) Click NEXT and Outlk will ask fr yur username and passwrd When yu click Next abve yur Outlk client will cnfigure yur email accunt n yur cmputer and yu will see the belw screen. 16
Yu will see the screen belw nce Outlk has been successfully cnfigured. 1) Click Finish Yu will then see the message belw; yu are nw ready t pen yur Micrsft Outlk client. 1) Click OK Yu have nw finished cnfiguring Micrsft Outlk. 17
Micrsft Outlk 2003 fr Staff Once yu have cnnected t the VPN service yu will need t cnfigure yur utlk client with yur email accunt details. 1) Click the START buttn 2) Click Settings 3) Click Cntrl Panel Once the cntrl panel pens:- 1) Select Mail 2) Select Email Accunts buttn This will pen the Accunt Settings Windw. 18
1) Select Micrsft Exchange Server 2) Click Next Here yu will enter yur wn user credentials which are mandatry fr cnnectin t Outlk. 19
1) Enter crwnmail1.staff.staffs.ac.uk in the Micrsft Exchange server bx 2) Enter yur username in the username bx (e.g. ab1) 3) Click Mre Settings At this pint an errr message may appear, please check yu have entered the server details crrectly and press OK. 1) Select the Cnnectin tab 2) Select Cnnect using my Lcal area Netwrk (LAN) 3) Tick Cnnect t my Exchange mailbx using HTTP 4) Select Exchange Prxy Settings The Prxy settings windw will appear. 20
1) Enter crwncas1.staffs.ac.uk in the https:// bx 2) Tick Cnnect using SSL nly 3) Tick Only cnnect t prxy servers that have this principal name in their certificate: 4) Enter msstd:crwncas1.staffs.ac.uk in the bx 5) Click OK Yu will then g back t the previus windw. 21
1) Click OK Yu will then be presented with anther windw 1) Click Next 2) Flick Finish Yu must then lg int Outlk by using yur University username and passwrd 1) Enter yur username in the frmat staff\username (e.g. staff\xy1) 2) Enter yur passwrd 3) Click OK Micrsft Outlk 2003 is nw setup and will start t dwnlad yur email. Please be aware that dependant upn the size f yur email bx this can take sme time. Fr increased security plese untick the remember my passwrd ptin but yu will have t re enter yur passwrd every time yu lg nt Outlk. Yu have nw finished cnfiguring Micrsft Outlk. 22
University Laptp Users Please nte if yur require administratr access cntact either 3800 r yur lcal Helpdesk fr the passwrd. 1) If using Outlk 2010 a. Select the File menu b. Select Accunt Settings c. Select again Accunt Settings d. Prceed t step 3 2) If using Outlk 2003 r 2007 a. Select the Tls menu b. Select Accunt settings c. Prceed t step 3 3) Frm the windw select Micrsft Exchange 4) Select Change 5) Select the Cnnectin tab 5) Select Cnnect using my Lcal area Netwrk (LAN) 6) Tick Cnnect t my Exchange mailbx using HTTP 7) Select Exchange Prxy Settings The Prxy settings windw will appear. 23
8) Enter crwncas1.staffs.ac.uk in the https:// bx 9) Tick Cnnect using SSL nly 10) Tick Only cnnect t prxy servers that have this principal name in their certificate: 11) Enter msstd:crwncas1.staffs.ac.uk in the bx 12) Click OK Yu will then g back t the previus windw. 24
2) Click OK Yu will then be presented with anther windw 3) Click Next 4) Flick Finish Yu have nw finished cnfiguring Micrsft Outlk. 5) Trubleshting Micrsft Windws Issue: - Internet Explrer is asking me t run an activex cntrl, what shuld I d? Slutin: - This is part f the Cisc Anycnnect installatin prcess and is safe t allw. Step1. Click n the message at the tp f the screen that says this message wants t install the fllwing addn: AnyCnnect VPN Client and click n Install ActiveX Cntrl. 25
Issue: - There is a prblem with this Windws installer package. Please nte: The belw fix fr this issue requires advanced knwledge f the Windws Registry, if yu are in dubt, please take yur PC t the IT Helpdesks in the Octagn Library and IT Centre, Thmpsn Library r Brindley IT Centre fr supprt. Step 1. Press Windws Symbl Key and R tgether. Type regedit and press enter r click n OK. Step 2. 26
Click n the crss t the left f HKEY_LOCAL_MACHINE t expand that sectin. Click n the crss t the left f SOFTWARE Click n the crss t the left f Micrsft Click n the crss t the left f Windws Click n the crss t the left f CurrentVersin Step 3. Right click n CurrentVersin and select New and then select Key A new sectin appears with the title New Key #1 rename this key t RunOnce and press enter. Step 4. Yu can nw clse the registry editr. Step 5. Re run the Cisc AnyCnnect setup and the issue shuld nw be slved. If nt please attend a lcal Helpdesk and seek further assistance. Knwn Issues Micrsft Windws OS AnyCnnect requires a clean install if yu upgrade frm Windws XP t Windws 7. If yu upgrade frm Windws Vista t Windws 7 yu must manually uninstall AnyCnnect first, then after the upgrade reinstall it manually r by establishing a web-based cnnectin t https://vpn.staffs.ac.uk that is cnfigured t install it. Uninstalling befre the upgrade and reinstalling AnyCnnect afterwards is necessary because the upgrade des nt preserve the Cisc AnyCnnect Virtual Adapter. Anycnnect des nt supprt 64-bit Internet Explrer Apple OS If yu upgrade frm ne majr Mac OS X release t anther (fr example 10.5 t 10.6) yu must manually uninstall AnyCnnect first then after the upgrade reinstall it manually r by establishing a web-based cnnectin t https://vpn.staffs.ac.uk that is cnfigured t install it. The Anycnnect client resides in the Applicatins flder. T access it yu will need t either g t the applicatins flder, r yu can drag it int yur dck at the bttm f the screen. Unix / Linux When cnnecting t the VPN service frm the AnyCnnect client yu are presented with a message stating that the security certificate cannt be verified. The certificate shuld be accepted t cntinue t use the service. The AnyCnnect client resides in the Applicatins flder n yur system. If yu want a shrtcut n yur desktp, yu will have t make ne by dragging it ur f the Applicatin flder. 27
BT Infinity Issues Sme users have experienced issues with the Cisc Anycnnect client and the BT Infinity Bradband package. Users may see their VPN cnnectin fail and get discnnected which has been identified as an MTU (Maximum Transmissin Unit) size issue. T reslve this yu may wish t change the MTU setting n yur Windws perating system. Windws Vista / Windws 7 1) G t Start and [Type] cmd.exe [enter] int the text bx frm the start menu. 2) The cmmand prmpt bx pens. 3) [Type] netsh interface ipv4 interface shw subinterfaces [enter] 4) Yu will then see a bx similar t the ne belw. 5) Select yur netwrk cnnectin frm the list. In this case we are using Lcal Area Cnnectin, but yu may be using a wireless cnnectin and shuld substitute the entry under the Interface clumn apprpriately. 6) T set the MTU fr this netwrk interface [Type] netsh interface ipv4 set subinterface "Lcal Area Cnnectin 4" mtu=1300 stre=persistent [enter] 7) [Type] netsh interface ipv4 interface shw subinterfaces [enter] t check that the change has been made as seen in the picture belw. 28
8) Restart yur cmputer and retry the VPN cnnectin prcess which shuld nw wrk. Windws 8 1) Swipe / Scrll t the All Apps tile n frm yur Start screen. 2) Swipe / Scrll t the Windws System sectin. 3) Under the Windws System sectin press/click n Cmmand Prmpt 4) Yu will then see a bx similar t the ne belw. 5) Select yur netwrk cnnectin frm the list. In this case we are using Lcal Area Cnnectin, but yu may be using a wireless cnnectin and shuld substitute the entry under the Interface clumn apprpriately. 6) T set the MTU fr this netwrk interface [Type] netsh interface ipv4 set subinterface "Lcal Area Cnnectin 4" mtu=1300 stre=persistent [enter] 7) [Type] netsh interface ipv4 interface shw subinterfaces [enter] t check that the change has been made as seen in the picture belw. 8) Restart yur cmputer and retry the VPN cnnectin prcess which shuld nw wrk. 29