Trådløst
Hovedsiden
Retningslinjer
Nyheter
Dekning og utstyr
Innendørs
Komme i gang
VPN generelt
VPN og Windows
VPN og Windows 98
VPN og Windows XP
VPN og Windows Vista
VPN og Linux
VPN og FreeBSD
VPN og Mac
Oppsett trådløs
Diverse notater
Trafikk statistikk
Generell FAQ
Anti-Virus
Sikkerhet

UiB
UiBs websider
Søk på UiB-web

Nettverket
Ruterne våre
Tegning av det
Det trådløse nettet

UiB oppringt
Om tjenesten.
Spørsmål og svar.
Bruken - ansatt.
Bruken - student.

Trafikk
Linjebelastninger,
Det trådløse nettet

Diverse
NHH
NHH, IT-avd
HiB

VPN and Windows 98

NB! Before you start, you must ensure that your computer has a network card properly installed, that the necessary drivers are installed (they come with the card). You also needTCP/IP, Dial-Up Networking and Microsoft VPN Adapter. These are all on the Windows 98-CD.

Step 1: Connect to the VPN-server

This first step is meant to establish and verify a technincal connection to the VPN-server. This step is necessary for users of the wireless net and inhabitants and students at the student hostages (eg. Fantoft) connected to the same net. Users already connected to Internet, but who want a VPN-tunnel to their institution can go dirctly to step 2

Go to Control Panel, Network, TCP/IP and remove all local settings concerning TCP/IP. IP Address is set to Obtain an IP address automatically.

Image 1

Image 2

Image 3

Image 4

Confirm the settings with OK, and reboot your pc.

When the machine boots it will ask for configuration from the net. The DOS-command ipconfig should now show that you have got an IP adress starting with 10. These are addresses you can use to reach the vpn-server, but whith which you cannot get further out on the net. This adress must be there before you can go any further

Image 5

You can verify your connection with the VPN-server by typing ping in a DOS-window, e.g. ping uib-vpn-gw to check against the VPN-server of UoB, ping hib-vpn-gw to check against the vpn-server of HiB or ping nhh-vpn-gw to check against the vpn-server of NHH.

Image 6

The lines starting with Reply from 10... tell you that the vpn-server is answering. Note that the IP-adresses shown and references to the vpn-servers at UoB, HiB abd NHH will vary depending on where you are connected and what vpn-server you are testing against.

If the pc is moved between different nets, e.g. between a student hostage and a connection at your institution, or if you need changing IP address of other reasons, you can force an update of the configurations with the commands: ipconfig/release_all followed by ipconfig/renew_all in a DOS-window.

Image 7

Step 2: Configuring the VPN-tunnel

In this step you will create a configuration for connecting via the vpn-server. You will only need to create this once, but you will use it every time you connect.

Open My Computer, Dial-Up Networking and choose Make a New Connection.

Choose as name for the connection, e.g. VPN - UiB if the connection is used against UoB. (This will be the name coming up on the icon, and can be anything you like.) Choose Microsoft VPN Adapter as device.

Image 8

In the next box you enter the name of the vpn-server you will authenticate against. Here you enter the server-name according to this table:

Image 9

Then you will get a confirmation that the configuration has been created.

Image 10

After you click Finish you will return to the Dial-Up Networking-window, but before closing this, right-click the newly created icon and choose Properties.

Under Server Types you must uncheck the boxes NetBUI and IPX/SPX Compatible.

Image 11

If you do not need access to shared files at your institution you can aslo turn off Log on to network. Connecting the vpn-tunnel will then be faster. If you need access to resources in a NT-domain (e.g. VALUTA at NHH), you can keep this box checked and enter the domain name (but do not check Log on to Windows NT domain) in Control Panel, Network, Client for Microsoft Networks.

Step 3: Use the connection

After Step 1 and step 2 are finished all that remains is starting the connection. This must be done every time you stop the connection, e.g. if you reboot the computer.

Double-click the icon newly created in Dial-Up Networking. You will get a window something like this:

Image 12

Enter username and password according to the table further up, and click Connect. If you do not get any error-messages, you should now be on the net! If you get an error-message, read it carefully. Mmost regular errors (e.g. wrong password) are easy to correct if you read the error-message.

The DOS-command ipconfig should now show that you in addition to the address starting with 10 also have an IP-address starting with 129 or 158, and with ping you should now be able to reach any computer on the net.

Image 13

When you are connecting to the tunnel later you can just enter My Computer, Dial-Up Networking and use the new icon for the connection. You can also right-click the icon, choose Create Shortcut and move it out on the Desktop, so you do not have to go in through My Computer and Dial-Up Networking.

Final remarks

Remember that VPN-access to Internet is a shared resource established for giving many people normal access to the net without running costs, not a possibility for few to exchange huge amounts of data.

You should also bear in mind that whith a lasting connection you are more exposed to the world than with the more sporadic connection with ISDN/modem. You must secure your pc against break-ins and abuse. One important step is to be updated on and install security updates from yur software producers. Microsoft users (as you probably are, using Windows) can look here http://www.microsoft.com/security/.

Abuse or findings of insecure computers will cause disconnection from the vpn-net. See also Directions for use of the wireless net (Norwegian).