ARCHIVED: In Windows XP, how do I make an IPsec VPN connection to the IU network?
Important: As of April 8, 2014, Microsoft no longer supports Windows XP with security updates. To ensure the highest security standards, the UITS Support Center no longer registers Windows XP devices to the IU network. UITS strongly recommends that you look into the options for replacing or upgrading your Windows XP computers for full compatibility with IU systems. See About end of life for Windows XP.
This document explains how to manually set up an IPsec virtual private network (VPN) connection in Windows XP at Indiana University Bloomington and IUPUI. If you wish to make such a connection, UITS recommends that you use the VPN installers, available from IUware. This software automatically does what the instructions in this document describe how to do manually.
Note: IU's VPN is intended for individual computing accounts only. Group and departmental accounts cannot access the VPN. See Why can't I make an IU Secure or VPN connection through an IU group or departmental account?
On this page:
Creating an IPsec VPN connection
Before you start: If you are behind a NAT device (e.g., a home or small business router) or your IP address is a private IP address, you must download an update from Microsoft before you can successfully connect using an IPsec VPN connection. To determine if this situation applies to you, refer to Microsoft article 818043.
To create an IPsec VPN connection to the IU network using Windows XP, either wirelessly or remotely:
- From the menu, right-click and select . Alternatively, from the Control Panel, open .
- In the left frame in the "Network Tasks" section, click
Note: If you do not see "Network Tasks", look forin the main window, and double-click it, or, from the menu, choose . .
New Connection Wizardshould open. Click and select . Click again.
Note: If theoption is not available, you may need to enable the Remote Access Connection Manager service.
For help, see Microsoft Support. and click
- Type a name for the connection (e.g.,
IU-VPN) and click .
- If your computer already has a
"Windows can automatically dial the initial connection to the Internet or other public network before establishing the virtual connection."
If you see this message, in the
Public Networkwindow, select the connection to use to attach to your VPN:
- If you are connected to a persistent Internet connection (e.g., Ethernet), choose .
- If you must dial in to be connected to the Internet, choose and select your Internet service provider (ISP) connection.
you may see the following message:
- In the
VPN Server Selectionwindow, type either
ipsec.indiana.edufor IUB or
ipsec.iupui.edufor IUPUI. Click .
- If you see a message asking whether to use your smart card with this connection, choose and click .
- In the
Connection Availabilitywindow, select the option most appropriate for your situation.
Note: If you are using a wireless card and wish to log into a domain (including ADS) upon starting Windows XP, select, which will make the VPN connection available when you choose at the login screen.
- On the last screen, if you want a shortcut icon on your desktop for the new connection, select . Click .
Configuring your VPN connection
- After you've created your VPN connection, Windows XP should open the connection automatically for you. If it does, select . If it does not, right-click the new connection icon, and then select .
- Click the tab. Check and .
- Click the tab. Set "Type of VPN:" to .
- Under "This connection uses the following items:", only the
following should be checked:
- Select , and then click .
- Select both and , and then click .
- Click the
If you choseabove, click . Check , and, in the "Key:" field, type
hermanbwells. Click .
Note: If you set "Type of VPN:" toabove, proceed to the next step. tab.
- Select , and then click .
- Under "Logon Security", select , and make sure the only checkbox selected is . Click and then .
Establishing the VPN connection
- After configuring your VPN connection, you should see the authentication screen for your new connection. If you don't see it, double-click the new connection icon. Alternatively, from the menu, click (or , and then ), and select the connection.
- Enter your IU Network ID username and passphrase; for
the domain, enter
ADS. Click .
When the connection is established, you should see a new icon in the notification area. This icon is identical to the one for dial-up connections.
Note: It may take up to a minute to establish a connection with the VPN server. If you have problems connecting, note any error messages and contact your campus Support Center.
To disconnect and terminate the connection, double-click the icon in the notification area and choose.
This is document akko in the Knowledge Base.
Last modified on 2014-06-12.
- Fill out this form to submit your issue to the UITS Support Center.
- Please note that you must be affiliated with Indiana University to receive support.
- All fields are required.