ARCHIVED: In Windows 98 and 98SE, how do I make a VPN connection to the IU network?

Note: IU's VPN is intended for individual computing accounts only. Group and departmental accounts cannot access the VPN. See Why can't I make a VPN connection through an IU group or departmental account?

Note: UITS recommends that you use a current version of Windows on computers connected to the Indiana University network; see Recommended Windows operating systems at IU.

In Windows 98 First Edition, before you can create a virtual private network (VPN) connection to the Indiana University network, either wirelessly or remotely, you first must install the VPN Update. You can find the VPN Update on Microsoft's Windows 98 download page under "Recommended Updates" at:

You will need to restart Windows after installing the update in order to get the Microsoft VPN adapter to appear.

Note: If you use Windows 98SE, you do not need this update. If you're not sure which version you are running, see ARCHIVED: How can I determine what version of Windows 95, 98, or Me I have?

In either case, you will also need both the Dial-up Networking version 1.4 upgrade and, if you are connecting to the IU Bloomington or IUPUI VPN service, the Microsoft L2TP/IPsec VPN client.

Note: If you are a student, faculty member, or staff member at Indiana University Bloomington, IUPUI, or IU East, use the IU Secure network for wireless access. For help, see What is IU Secure? If you are visiting IU, instead see Network Access accounts (guest wireless access) at IUB, IUPUI, and IUE.

Adding the VPN component

Follow these steps to add the Windows 98 VPN component:

1. Double-click My Computer, then Control Panel, and then Add/Remove Programs.
   
   
2. Select the Windows Setup tab, then double-click Communications.
   
   
3. Check the box next to Virtual Private Networking, and then click OK. Insert your Windows CD if you are prompted for it.

   Note: If you do not have your Windows CD, or if you did not receive one from the manufacturer when you purchased your computer, please contact the manufacturer to see if one is available.

4. When Windows 98 prompts you to restart your computer, click Yes.

Downloading and installing the Dial-up Networking 1.4 update and Microsoft L2TP/IPsec VPN client

You'll need to download and install the Dial-up Networking update, which is available at:

This link will give you two files, named dun14-98.exe and dun14-SE.exe. Save the files someplace obvious, like your desktop.

Installing the Dial-up Networking version 1.4 update

1. If you are using Windows 98 First Edition, double-click the dun1.4-98.exe file. If you are using Windows 98 Second Edition, double-click the dun1.4-SE.exe file.
   
   
2. The installer will ask whether you wish to continue. Click Yes, and then click Yes to agree to the license agreement.
   
   
3. The update will install, and will prompt you to reboot before continuing. Allow the computer to reboot.

The IPsec client

The IUB and IUPUI campuses use the IPsec protocol for VPN connections. Therefore, if you're at IUB or IUPUI, you also need to download and install an IPsec client. (The Microsoft L2TP/IPsec VPN client requires the Dial-up Networking version 1.4 update, so you must install that before installing the IPsec client.)

If you're at a campus other than IUB or IUPUI, you'll need to configure your computer for the PPTP protocol, so skip directly to the Creating a VPN connection section below.

If you're at IUB or IUPUI, download the L2TP/IPsec client from:

The name of the file you'll download is msl2tp.exe.

Installing the L2TP/IPsec VPN client

Remember, you need to skip this section unless you're at IUB or IUPUI and need to configure for IPsec.

1. Double-click the msl2tp.exe file to launch the client installer. When the installer asks you to continue, click Yes, and then Yes again to agree to the license agreement.
   
   
2. The installer will check your system for the required software components. If you do not have all the required files, or if you have a conflicting component (e.g., Internet Connection Sharing), the installer may prompt you to add or remove files. Follow the instructions provided by the installer. You will probably need to reboot.

   If the system must reboot, when it restarts, just double-click the msl2tp.exe file again to continue the installation.

3. Once you have installed all the necessary components, uninstalled all the conflicting ones, and restarted the process, the installer should then finish the installation. When finished, one last reboot will be required.

Configuring the IPsec pre-shared key

Remember, you need to skip this section too, unless you're at IUB or IUPUI and need to configure for IPsec.

To authenticate to the IUB or IUPUI VPN, you will need to specify a pre-shared key (PSK):

1. From the Start menu, select Programs, then Microsoft IPsec VPN, and finally Microsoft IPsec VPN Configuration.
   
   
2. Select Use a pre-shared key for IPsec authentication. In the adjacent field, enter hermanbwells as the PSK, and then click OK.

Creating a VPN connection

To create a VPN connection, follow these steps:

1. Double-click My Computer, then Dial-Up Networking, and finally Make New Connection.
   
   
2. Type a name for your connection (e.g., IU-VPN). In the "Select a Device:" field, choose Microsoft VPN Adapter, and then click Next.
   
   
3. In the "Host name or IP Address:" field, type the name or IP address of the VPN server.

   Use the table below to find your VPN server for both remote (e.g., cable modem, DSL, or outside Internet service provider) and wireless VPN connections:

   Campus	VPN server
   IU Bloomington	ipsec.indiana.edu
   IU East	vpn.iue.edu
   IU Kokomo	vpn.iuk.edu
   IU Northwest	149.162.8.2
   IUPUI	ipsec.iupui.edu
   IU South Bend	vpn.iusb.edu
   IU Southeast	vpn.ius.edu

4. Click Next, then Finish.

Configuring your VPN connection

To properly configure your VPN connection, follow these steps:

1. In the Dial-Up Networking window, right-click the icon representing your new connection, and then select Properties.
   
   
2. Click the Server Types, then deselect the NetBEUI and IPX/SPX Compatible protocols. (Only TCP/IP should be checked.) Click OK.

At IUB and IUPUI, you must ensure you are logging into the ADS Domain on startup:

1. Double-click My Computer, then Control Panel, and finally Network.
   
   
2. On the Configuration tab, make sure the "Primary Network Logon:" field is set to Client for Microsoft Networks.
   
   
3. In the list of installed components, select Client for Microsoft Networks and click Properties.
   
   
4. Under "Logon validation", select Log on to Windows NT domain.
   
   
5. In the "Windows NT domain:" field, type ADS , then click OK twice.
   
   
6. Restart your computer if prompted to do so.

Establishing a VPN connection

To establish the VPN connection, follow these steps:

1. Double-click My Computer, then Dial-Up Networking. Double-click the connection with the name you created above.
   
   
2. When prompted, enter your ADS username and password, then click Connect.

   Note: It may take up to a minute to establish a connection with the VPN server. Please be patient. If you have problems connecting, make note of any error messages and contact your campus Support Center.

3. When the connection is established, you should see a new icon in the system tray. This icon is the same as the icon for dial-up connections. To disconnect and terminate the connection, double-click this icon and choose Disconnect.

Modifying your settings

If you have configured your VPN connection to automatically log you in, and you find that you need to modify your login settings, follow these steps:

1. Double-click My Computer, then double-click Control Panel, and finally double-click Internet Options.
   
   
2. Click the Connections tab.
   
   
3. From the Dial-up and Virtual Private Network settings box, select your VPN connection, and then click Settings. You should then be able to modify your settings.

Comments/Questions/Corrections