Client: Cisc Sftware VPN Client Versin: 4.8.01.0300 r higher Platfrm: Windws 2000/XP & VISTA-32bit(5.0.00.0340) Descriptin: This dcument prvides instructins fr hw t mdify the CBP prvided Cisc Sftware VPN Client in rder t accmmdate DNS naming (dynatrd.cbp.dhs.gv) instead f IP address (198.70.226.24). Once this change is made n yur VPN client, yu will be assured f access t CBP s Secndary Data Center in the event f a CBP Primary Data Center utage. Prerequisites: Currently accessing CBP s Trade VPN via the CBP prvided Cisc Sftware VPN Client, Versin 4.8.01.0300 r higher (VISTA 32-bit requires VISTA cmpatible versin 5.0.00.0340 r higher) Successfully able t PING dynatrd.cbp.dhs.gv frm a cmmand prmpt n the machine that has the Cisc Sftware VPN Client installed. VPN Client Mdificatin Launch the Cisc VPN Client GUI Interface Click n Start Prgrams Cisc VPN Dialer Or duble-click the desktp icn called VPN Dialer The fllwing windw shuld appear (if a smaller windw appears, hit ctrl+m ): Page 1 f 6
Click nce n the cnnectin entry named CBP (r whatever name yu gave t the CBP Trade VPN cnnectin entry) s that it is highlighted, then click the icn labeled Mdify The fllwing windw shuld appear. Page 2 f 6
Please change the Hst field entry frm 198.70.226.24 t dynatrd.cbp.dhs.gv s that it matches this: Click the Backup Servers tab t add the backup DNS entry. Then checkmark Enable Backup Servers and click Add : Page 3 f 6
Then enter dynatrd.cbp.dhs.gv as the backup server hstname then click Okay : Then click the Save buttn: Yu shuld nw shw a cnnectin entry that lks as fllws: Page 4 f 6
Test VPN Cnnectivity t CBP Cnnect t the CBP Trade VPN Either click n the Cnnect buttn r duble-click the CBP cnnectin entry If the cnnectin prfile was mdified crrectly, a windw will pp-up and request yur Username and Passwrd. User: Yur assigned CBP Trade VPN HASHID User Passwrd: : Yur assigned CBP Trade VPN Passwrd If yu authenticate prperly, yu will see a small lcked padlck icn in the bttm right hand crner f yur cmputer desktp. T discnnect, right-click the padlck, in the system tray, and select discnnect Page 5 f 6
Test VPN Cnnectivity t CBP Frm the cmputer that has successfully established a VPN cnnectin, send a test ping t the CBP mainframe Open a cmmand prmpt windw (MS-DOS Windw) Type ping 167.144.89.231 Type ping 167.144.89.228 If yu d nt receive successful replies, please verify that yur cmpany s firewall is allwing IPSEC traffic(udp 500, 4500) t 216.81.81.72 If the ping t the mainframe is successful, yu are all set and nw have the assurance that, in the event f an extended CBP Data Center utage, yu will be able t access CBP s Secndary Data Center withut any further effrt n yur part. If the ping des nt wrk, please send yur Cmpany name, technical POC name, email address and phne number t TICMigratin@cbp.dhs.gv and a ticket number will be returned t yu within 24 hurs. CBP netwrk supprt will cntact yu t assist with prblem determinatin. Page 6 f 6