INFORMATION SERVICES DIVISION (ISD)
NETWORK SERVICES GROUP
UCL Remote Access VPN Service
Microsoft Windows XP
User Guide
Version 0.2
Date 27th July 2011
Author MC
UCL Remote Access VPN Service – Microsoft Windows XP User Guide
Table of Contents
UCL Remote Access VPN Service Microsoft Windows XP ... 1
User Guide... 1
Table of Contents ... 2
Revision History ... 2
Formatting Conventions ... 2
0 Introduction ... 3
1 Getting Connected ... 3
1.1 Requirements ... 3
1.2 Abiding by UCL Computing Regulations ... 3
1.3 Prerequisites for the Remote Access VPN service ... 4
Supported browsers: ... 4
1.4 Install Cisco AnyConnect Secure Mobility Client ... 5
1.5 Problems with automatic installation. ... 8
1.6 Subsequent connections to the UCL VPN service. ... 8
2 Help and Support ... 10
2.1 Remote Access VPN Service help ... 10
2.1 FIS Compatibility ... 10
Revision History
Date Version Author Purpose
6th July 2011 0.1 MC Original draft version
27th July 0.2 MC Updated to include standalone installation instructions
Formatting Conventions
Courier New Implies an action
Italic A variable which must be replaced or for emphasis Underline or Bold Important note or action
0
Introduction
The purpose of this document is to provide Microsoft Windows XP users with instructions for connecting to the UCL Remote Access VPN service using the Cisco AnyConnect Secure Mobility Client – a web based client that is downloaded using a web browser.
The UCL Remote Access VPN service provides a secure connection into the UCL corporate network to access restricted UCL resources. The user therefore will have “on-campus”-like access to services that are normally in-accessible from outside the UCL network.
1
Getting Connected
1.1 Requirements
The following is required to use the UCL Remote Access VPN service.
A network connection outside of the UCL corporate network e.g. eduroam, broadband connection from home, café hotspot wireless etc
A UCL User ID and password.
1.2 Abiding by UCL Computing Regulations
When connected to the UCL Remote Access VPN Service, ALL your traffic will be sent through the UCL network, regardless of whether the destination is a UCL address or an address on the Internet.
All users must be aware of this fact and abide by the UCL Computing Regulations and the JANET
UCL Remote Access VPN Service – Microsoft Windows XP User Guide
1.3 Prerequisites for the Remote Access VPN service
Supported browsers:
The following browsers have been tested and are compatible with the UCL VPN Remote Access Service:
Internet Explorer version: 6 Internet Explorer version: 7 Internet Explorer version: 8 Internet Explorer version: 9 Mozilla Firefox version: 5 Mozilla Firefox version: 4 Mozilla Firefox version: 3.6 Google Chrome
It is recommended that you upgrade your browser to the latest version prior to installing the Cisco AnyConnect Secure Mobility Client to avoid any installation issues. At the time of writing, this is Firefox version 5.0 and Internet Explorer version 9.0.
Firefox/Google Chrome users:
If using Firefox or Google Chrome, you will need to update the Java Runtime Environment running on your machine to the latest version before you will be able to install the AnyConnect program successfully. To do this, go to www.java.com and follow the instructions.
Internet Explorer users:
1.) If using Internet Explorer version 8 or older, you will need to add the name of the Remote Access VPN server to the Trusted sites list. To find out which version you are using, go to Tools (the cog symbol) and then About Internet Explorer.
To add the name of the Remote Access VPN server to the Trusted sites:
• Open Internet Explorer • Click on Tools
• Select Internet Options • Click the Security tab • Select Trusted Sites • Click the Sites button
• In the box “Add this website to the zone:”, enter https://vpn.ucl.ac.uk • Click Add
• Click Close followed by OK
2.) You will need to have Administrator privileges to Install Active X when prompted during the application install.
1.4 Install Cisco AnyConnect Secure Mobility Client
IMPORTANT – ensure you are connected to a network that is outside the UCL network i.e. eduroam, a home broadband connection, café wireless hotspot etc.
The following steps were done using Firefox version 5.
You would see exactly the same steps if using Internet Explorer version 9. 1.) Open a web browser and go to https://vpn.ucl.ac.uk
The Cisco Secure Desktop will begin to download and install the Cisco AnyConnect Secure Mobility client to your machine. Once the screen says your system has been validated the reloading process may take a few minutes.
UCL Remote Access VPN Service – Microsoft Windows XP User Guide
When prompted at the Login screen, ensure the Group selected is “RemoteAccess”, then enter your IS username and password.
You are required to have an active firewall and an active anti-virus program on your machine. If you do not, you will see the following “Login denied” dialog box.
Click the “More Info” link
A message will be displayed informing you of the security criteria that your machine does not currently meet.
You will need to rectify these issues, then close your browser, re-open and begin the install process again by going to https://vpn.ucl.ac.uk
Click the “More Info” link
Once successfully logged in, the install progress will continue.
The program will then begin to establish a VPN connection, at this stage a windows User Account Control screen may pop up asking you to verify the program, click Allow to continue.
Once installed and automatically configured, the client will automatically connect you to the UCL VPN service.
Client
connected to UCL VPN service.
UCL Remote Access VPN Service – Microsoft Windows XP User Guide
1.5 Problems with automatic installation.
If you are unable to install the VPN client from the website for any reason, you can install a standalone AnyConnect VPN client and manually configure the service name to connect to. To do this, go to the Windows XP user guide webpage at
https://www.ucl.ac.uk/isd/staff/network/vpn/guides/win-xp
Under the sub-title “AnyConnect Standalone Client”, click on the link :
anyconnect-win-3.0.xxxx-pre-deploy-k9.msi (where xxxx is the most recent version available).
Click Save, then double click on the file that has downloaded in the Downloads window that will have opened.
Run this install file and follow the steps to install this client. When prompted, enter the server name:
vpn.ucl.ac.uk
Once installed and automatically configured, the client will automatically connect you to the UCL VPN service.
1.6 Subsequent connections to the UCL VPN service.
Once the client is installed, the Cisco AnyConnect Secure Mobility client icon is located in the task tray. The client icon has two forms:
VPN client connected
VPN client NOT connected
To open the Cisco AnyConnect Secure Mobility client, click on the client icon.
Cisco AnyConnect Secure Mobility client
To disconnect from the VPN service, click on the Disconnect button
To re-connect to the VPN service, click on the icon in the Task Tray to open the application (if not already open), then click the Connect button.
Enter your IS userid and password when prompted
Once authenticated, the client will connect to the UCL VPN service.
The Cisco AnyConnect Secure Mobility client icon will show as connected in the task tray. Disconnect button
Connect button
Cisco AnyConnect Secure Mobility client icon showing as connected in the task tray.
UCL Remote Access VPN Service – Microsoft Windows XP User Guide
2
Help and Support
2.1 Remote Access VPN Service help
If you experience any problems, please contact the ISD Service Desk, who will be able to assist with basic support queries and will forward on other queries to the correct team.
The Service Desk is located in the DMS Watson Science Library, Malet Place. The Service Desk web page provides details on opening times and a location map:
http://www.ucl.ac.uk/isd/common/servicedesk
2.1 FIS Compatibility
FIS can be accessed and used through the Remote Access VPN Service.
FIS is currently only supported on certain browsers. Please refer to the FIS browser support web page for further information on this at http://www.ucl.ac.uk/finance/fiswebsite/browsersupport.html
All queries relating to the use of FIS must be directed to the FIS Helpdesk by emailing