Step 1 - Obtain the VPN Client

1. Open your Internet browser.
2. Click on this link:
   
   VPN - Virtual Private Network
   
   
3. In the Penn State WebAccess Account dialog box prompt, type in your Penn State User name (ex: ntv1) and password, then click Login.
4. Click the link to the VPN Version.
5. At the File Download -Security Warning window that appears, click Save.
   Note: The Version number in Step 6 may change over time. The xx'x listed below will show the current number. Example: vpnclient-win-msi-4.8.02.0010-k9-psu.exe
   
6. Save the file vpnclient-win-msi-4.8.xx.xxxx.exe to a convenient location, such as the desktop. Click Save again. If asked, click Close.
7. Close the Internet browser.

Step 2 - Verify TCP/IP Settings on the Computer

NOTE: You will verify TCP/IP Settings on the Computer before Installing the VPN Client. If the client is already installed, be sure the VPN client is disconnected while configuring the TCP/IP Settings.

1. Follow this link to the "Reenter Standard College Settings" section of the How to Verify or Reenter Network
   TCP/IP Settings in EN Machines.
2. Follow its steps to open the Network Connections window and verify your settings.
3. When finished, go to the next section.
   

NOTE: Be aware that third party firewall software (ex: ZONE ALARM) will interfere with the VPN client and should not be used.

Step 3 - Install the VPN Client

NOTE: You should temporarily disable your virus protection before you install the VPN client. These steps assume that you are using Symantec AntiVirus Corporate Edition software. Realtime Protection.

1. Right Click the Symantec AntiVirus Corporate Edition system tray icon (looks like a yellow shield), and un-check the option to "Enable File System Realtime Protection".

Note: Your real-time virus protection is off. Please remember to turn it back on when your finish the install.

2. Close all applications and disconnect from VPN if connected.
3. Delete any shortcuts to the VPN dialer that you may have on your Desktop.
4. Double click on the vpnclient-win-msi-4.8.xx.xxxx.exe file you just downloaded.
5. If asked, click Run Wait for the installer to start. Then, click Setup.
6. If you have a previous version of VPN installed, you will see a message
   
   "Setup has detected an existing version of the Cisco Systems VPN Client.
            ........
   Do you wish to continue?".
   
   
7. Click Yes. Click Finish to restart.
8. The computer will restart. Enter your username and password.
9. Once the computer restarts, repeat steps 4 and 5 above. VPN will start to install.
10. Click Next at the Welcome screen.
11. Click Yes to accept the License Agreement.
12. Click Next to accept the default Destination Folder of c:\Program Files\Cisco Systems\VPN Client
13. Click Next to accept the default Program folder of Cisco Systems VPN client.
14. Setup will run for a few minutes.
    
    NOTE: You will see it installing the "Cisco System Network Adaptor". This is a "virtual" adaptor that will appear in your Network Connections window. It will only be connected when you are connected with VPN.
    
    
15. Select Yes, I want to restart my computer now and click Finish.
16. The computer will restart. Enter your username and password as before.
17. Right Click the Symantec AntiVirus Corporate Edition system tray icon, and RE-CHECK the option to "Enable File System Realtime Protection".
    
    NOTE: If you have Windows XP Service Pack 2 (SP2) installed, you must verify that the Windows XP SP2 Firewall ports for VPN are open.
    
    
18. Click Start, and then click Control Panel.
19. Double-click Windows Firewall (or click Security Center and then Windows Firewall).
20. Click the Exceptions tab. You should see these VPN ports listed and checked.
    
    VPN_TCP_10000
    VPN_UDP_62515
    VPN_UDP_4500
    
    
21. If you do see these ports listed, close the control panel and go to the next section.
    If you don't have the above ports listed, go to this ICT How To: How To Use Cisco VPN Client 4.8 with Windows XP Service Pack 2. Follow the steps in Option 1 - Open Firewall Ports to open the 3 VPN ports.

Step 4- Configure the VPN Client

NOTE: You will place a shortcut to the Cisco VPN Client on the desktop.

1. From the Start menu choose All Programs then click Cisco Systems VPN Client. From the list that appears, Right Click on VPN Client and select Copy. Go to the Desktop and Right Click. Select Paste.
2. Double Click on the VPN Client shortcut to open the connection dialog box.
3. ISP to PSU should be selected as the default Connection Entry. If it isn't, Right Click on ISP to PSU and select Set as Default Connection Entry.
   
   NOTE: If you will never be connecting via Wireless means at the other Penn State locations, you may Right Click and delete these entries. You can also delete the "COE" and "EMS" entries.
   
   
4. Click the Modify button at the top of the window.
5. Click the Transport tab.
   NOTE: ICT recommends that County Extension office staff use IPSec over TCP. This option appears to allow you to stay connected longer than the IPSec over UDP (NAT/PAT) choice. But, if you experience frequent disconnects with one choice, please feel free to try the other. You may switch this choice at any future time.
   
6. Click either the IPSec over UDP (NAT/PAT) or the IPSec over TCP radio button (10000 should be in the TCP Port box).
7. Click Save.
   
8. Click the Options menu and select Preferences....
9. Select (check) the Enable connect on open box.
   (This will cause VPN to connect to your Default Connection Entry when it is opened saving you a step.)
   
   NOTE: You will now test the VPN connection.
   
   
10. Close the VPN Client. Use the Desktop shortcut to open VPN. It should open and take you to the Enter Username and Password prompt.
11. Enter your PSU username and password when prompted. Click OK.
    
    NOTE: If the process succeeds, the VPN Client window will disappear and a small yellow lock will appear in the notification area of the task bar.
    
    
12. Right Click on small lock in Notification Area in the lower right of the Task Bar, choose Disconnect.
    
    NOTE: You have successfully tested the VPN dialer. You can now use it as needed to create a secure connection to the Penn State network.
    
    NOTE: If you need VPN to appear during Windows logon (contact Computer Support to see if you need to), you can do these steps.
    a) Open the VPN Client.
    b) Click the Options menu and select Windows Logon Properties....
    c) Check Enable start before logon. Click OK.
    
    

FINAL NOTES:

NOTE: If you are in a County Extension office and need a VPN connection for eCommerce (ePay) Access (credit card sales), see the eCommerce User Guide. Each office using this system should have this guide. It has the steps to create the eCommerce VPN connection entry. Also, only the specific staff members who have been granted access can login to the ePay system. For questions regarding the ePay system, contact Roger Martell (ram8@psu,edu), 814-865 6629 or Aaron Hofelt (ahh111@psu.edu), 814-777-0201.

NOTE: If you've configured VPN to come on at Windows Logon, as the computer restarts, once you press CTRL-ALT-DEL, you should WAIT for the VPN client login to appear. When the VPN client login appears, click Connect. Enter your PSU username and password when prompted. Press the Enter key. If you receive a message "System Initialization in Progress" with a dialog box and a cancel button, the network services on the computer haven't fully started. Wait a minute and then press CTRL-ALT-DEL again. You should then get the correct dialog box asking for your password. After the VPN client connects, log on to the computer as you normally would by entering your password in the Windows logon window and pressing the Enter key.

NOTE: Any users without a Penn State Access account (Ex: Master Gardeners, Volunteers) that have been using Penn State computer with "local" or "AG" user names, may not enter this username/password to connect to VPN. They will need to use a PSU User ID and password to connect via VPN.

NOTE: For security reasons, you are prevented you from saving your password in the VPN client.