IT Services - Mac OS X How To: VPN

Information Technology Services
Technical Notes		SEARCH:

How to Install and Configure VPN
For help or if you have questions or problems, please contact the Solution Center, 195 Durham Center, solution@iastate.edu or call IT Services at 294-4000.

Table of Contents

How to Install and Configure VPN
   About VPN (Virtual Private Network)
   System Requirements
   Downloading the Cisco VPN Client
   Installing the Cisco VPN Client
   Configuring the Cisco VPN Client
Setting Up VPN Digital Certificates
   Getting VPN Digital Certificates
   Installing VPN Digital Certificates
Using VPN with Digital Certificates
   Connecting to the Iowa State VPN
   Disconnecting from the Iowa State VPN
Managing Your VPN Digital Certificates
   Renewing Your Digital Certificate
   Revoking Your Digital Certificate
   Removing Your Digital Certificates
VPN Questions and Answers

About VPN (Virtual Private Network)

Virtual private networking enables you to login to the Iowa State University network in a safe and secure way. A VPN connection uses encryption and "tunnels" through most network restrictions. Once you have logged in to the Iowa State VPN, your computer becomes a "virtual" campus computer with access to campus network services.
The Iowa State University VPN service uses certificates to secure the connection between you and the VPN server. In order to use the Iowa State University VPN service, you must first get VPN certificates for each machine on which you have installed the VPN client. There are two certificates you need, the "root" certificate, and a certificate specific to your Iowa State University Net-Id.
When you are logged in, the VPN client functions as a virtual network connection. All network traffic that is destined for Iowa State University is routed over this virtual network connection. All other network traffic is routed through your usual network connection.
See VPN Questions and Answers for additional information about virtual private networks.

System Requirements

To use the Iowa State University VPN, you must install the Cisco VPN Client.

The Cisco VPN Client 4.9 for Mac OS X is the first version to support the Intel processor for Mac OS X. This universal Binary release for Mac OS X ONLY supports Mac OS X 10.4 and above (including Mac OS X 10.5) on both PowerPC and Intel processors. This version does NOT support Mac OS X 10.3.9 and lower.

The Cisco VPN Client 4.7 for Mac OS X has support for the PowerPC processor only. This software requires Mac OS X version 10.2 or greater.

Downloading the Cisco VPN Client

The Cicso VPN Client is one of Iowa State University's Site-Licensed software packages. You will need your Iowa State University Net-Id and password to download this software from the Iowa State University Site-Licensed Software Server.
If you are faculty, staff or a student at Iowa State University, you can download:

the Cisco VPN Client 4.9.01.0080 installer from here (11.7 MB).

the Cisco VPN Client 4.7 installer from here (8.1 MB).

If the downloaded disk image wasn't automatically mounted, then double-click on the appropriate "VPNClient-0491.dmg" or "VPNClient-0470.dmg" file to mount it.

Installing the Cisco VPN Client

If you have prevously installed:

Cisco VPN CLient 4.6.xx or Cisco VPN Client 4.7
Double-click the "Cisco VPN Client.mpkg" file to run the installer. You will need to re-import your digitial certificates after installation. See URL Setting Up VPN Digital Certificates for instructions.

Cisco VPN Client 4.0.3
If you have previously installed the Cisco VPN Client 4.0.3 version, you must uninstall it before you install the new Cisco VPN Client. In addition, you must also re-import your certificates into the Cisco VPN Client (see steps 1-6 of Installing VPN Digital Certificates) before you try to connect.
After uninstalling the Cisco VPN Client 4.0.3 version, double-click the "Cisco VPN Client.mpkg" file to run the installer.
To uninstall the Cisco VPN Client, double-click the "Uninstall Cisco VPN Client" file.
This will startup a Terminal window where the VPN uninstall script will run in. You will be prompted for the Administrator password to run the VPN uninstall script. If the script runs without errors, the Terminal window will automatically close.

Welcome to Darwin! % sudo /usr/local/bin/vpn_uninstall;exit; Password: admin-password ---------------------------------------------------------------------- Cisco Systems VPN Client Version 4.6 Darwin uninstaller Copyright (c) 1998-2001 Cisco Systems, Inc. All Rights Reserved. Please review the license agreement found in license.txt ---------------------------------------------------------------------- Are you certain that you wish to uninstall the Cisco VPN client? [no] y Do you wish to remove all existing profiles and certificates? [no] y - existing profiles and certificates will be removed. [ cleaning up installed files and directories... ] ==> removing : /opt/cisco-vpnclient/bin/vpnclient ( VPN dialer ) ==> removing: /opt/cisco-vpnclient/bin/ipseclog ( VPN log viewer ) ==> removing: /opt/cisco-vpnclient/bin/cvpnd ( VPN daemon ) ==> removing: /opt/cisco-vpnclient/bin/cisco_cert_mgr ( VPN certificate manager ) ==> unloading NKE: /System/Library/StartupItems/CiscoVPN Stopping Cisco Systems VPN Driver kextunload: unload kext /System/Library/Extensions/CiscoVPN.kext succeeded ==> removing: /System/Library/StartupItems/CiscoVPN ( autostart feature ) ==> removing: /System/Library/Extensions/CiscoVPN.kext ( IPSec NKE ) ==> removing: /etc/opt/cisco-vpnclient ( profiles, certificates, init files ) ==> removing: /Library/Frameworks/cisco-vpnclient.framework ( VPNClient API) ---------------------------------------------------------------------- Cisco Systems VPN client uninstall completed successfully. ----------------------------------------------------------------------

Configuring the Cisco VPN Client

The Cisco VPN Client installer will install the necessary configuration files for using VPN at Iowa State University as part of the install. You no longer need to run a separate VPN Configuration installer.