ARCHIVED: In Windows NT 4.0, how do I make a VPN connection to the IU network?

Note: For security and support reasons, UITS recommends using Windows 2000 Professional or Windows XP Professional, rather than NT Workstation 4.0, on Indiana University's network. Microsoft retired both mainstream and extended support for this version in June 2004, which means security updates are no longer being developed. For more information, see Microsoft's Windows Desktop Product Lifecycle Guidelines page at:

Note: IU's VPN is intended for individual computing accounts only. Group and departmental accounts cannot access the VPN. See Why can't I make a VPN connection through an IU group or departmental account?

Note: If you are a student, faculty member, or staff member at Indiana University Bloomington, IUPUI, or IU East, use the IU Secure network for wireless access. For help, see What is IU Secure? If you are visiting IU, instead see Network Access accounts (guest wireless access) at IUB, IUPUI, and IUE.

Adding the VPN component

In Windows NT, before you can establish a virtual private network (VPN) connection to the Indiana University network, either wirelessly or remotely, you must install the VPN component. To do so, follow these steps:

1. Log in as the administrator or as a user with administrator rights for the computer.
   
   
2. Right-click Network Neighborhood, and then select Properties.
   
   
3. On the Protocols tab, click Add.
   
   
4. Select Point to Point Tunneling Protocol, and click OK.
   
   
5. If you are prompted for your Windows NT CD, place it in the CD-ROM drive and click Continue.

   Note: If you do not have your Windows CD, or if you did not receive one from the manufacturer when you purchased your computer, please contact the manufacturer to see if one is available.

6. Select the number of VPNs you wish to configure and click OK. (This is normally 1.)
   
   
7. If prompted with a Setup Message dialog box, click OK.
   
   
8. You will see the Remote Access Setup dialog box. Click Add.
   
   
9. Select VPN1 - RASPPTPM and click OK.
   
   
10. In the Remote Access Setup dialog box, click Continue.
    
    
11. In the Network control panel window, click Close.
    
    
12. When prompted to restart your computer, choose Yes.

Note: Once the computer has restarted, you must re-apply your current service pack to update RAS and PPTP system files.

Configuring your VPN connection

Since the Indiana University Bloomington and IUPUI VPN servers use IPsec as the VPN connection protocol, if you're at IUB or IUPUI, you need to follow all of the steps below. If you're on any other campus, you'll need to make a PPTP VPN connection; skip directly to the Configuring the connection settings section below.

Downloading and installing the Microsoft L2TP/IPsec VPN client

At IUB or IUPUI, once you have re-applied the service pack and your computer has restarted, you must install the Microsoft L2TP/IPsec client to make NT 4.0 compatible with the VPN service. The client filename is msl2tp.exe and you can download it from:

Save the file to your computer, and then double-click it to install the client.

After you have installed the L2TP/IPsec client, follow these steps to configure your VPN connection:

Configuring the IPsec Pre-shared Key (PSK) setting

1. From the Start menu, go to Programs, then to Microsoft IPSec VPN. Select Microsoft IPSec VPN Configuration.
   
   
2. Select Use a pre-shared key for IPSec authentication. In the field below, enter: hermanbwells

   Click OK to save your settings.

Configuring the connection settings

Skip to this section if you're not using IPsec as your VPN connection protocol. If you are using IPsec as your VPN connection protocol, continue with these steps.

1. Double-click My Computer, and then double-click Dial-Up Networking.
   
   
2. Click New. In the "Name the new phonebook entry:" field, type a name for the VPN connection (e.g., IU-VPN). Click Next.
   
   
3. Select the I am calling the Internet checkbox. Leave the other checkboxes blank. Click Next.
   
   
4. If prompted to select "Modem or adapter:", select RASPPTPM (VPN1) , and then click Next.
   
   
5. In the "Phone number:" field, type the name or IP address of the VPN server.

   Use the table below to find your VPN server for both remote (e.g., cable modem, DSL, or outside Internet service provider) and wireless VPN connections:

   Campus	VPN server
   IU Bloomington	ipsec.indiana.edu
   IU East	vpn.iue.edu
   IU Kokomo	vpn.iuk.edu
   IU Northwest	149.162.8.2
   IUPUI	ipsec.iupui.edu
   IU South Bend	vpn.iusb.edu
   IU Southeast	vpn.ius.edu

6. Click Next, then Finish.

Establishing a VPN connection

To establish the VPN connection, follow these steps:

1. Double-click My Computer, and then double-click Dial-Up Networking.
   
   
2. Select the correct "Phonebook entry to dial" and click Dial.
   
   
3. When prompted, enter your ADS username and password. Also, in the "Domain:" field, type ADS . Then, click OK.

   Note: It may take up to a minute to establish a connection with the VPN server. Please be patient. If you have problems connecting, make note of any error messages and contact your campus Support Center. For contact information, see the Knowledge Base document How do I contact the Support Center at each IU campus, and what are the hours and options for help?

4. When the connection is established, you should see a new icon in the system tray. This icon is identical to the one for dial-up connections.
   
   
5. To disconnect and terminate the connection, double-click the icon and choose Disconnect.

Comments/Questions/Corrections