VPN 3000 and Netlock for pre-OS X Macs
| On this page: |
Related pages: |
The following instructions are for users of pre-OS X Macintoshes. For other platforms' instructions, see "Downloading and installing Cisco VPN client software".
Unlike many other VPN clients, the Netlock client's interface is accessed through a web browser. You will need to have a relatively recent version of a graphical web browser such as Netscape or Internet Explorer on your Macintosh in order to use this software.
Before you install and configure the software
Like the Cisco client software, you can use your Network ID and password with the Netlock client. However, you will need to configure your software manually, rather than importing a Cisco profile.
Acquiring and installing the software
Before moving to Netlock, consider upgrading to Mac OS X. Due to ease of connectivity with the Rice VPN system, MAC OS X is the preferred operating system for VPN access on Macintosh computers. VPN accounts for OS X are available at no charge. Customers with previous versions, such as Mac OS 9, can purchase an upgrade to Mac OS X with the Rice discount for Apple products. (See the Apple page in the Technology Marketplace.)
MAC OS 8 & 9 do not meet the connectivity requirements for a Rice VPN connection. Connectivity can be achieved by utilizing a Netlock client software designed for OS 8 and 9. This license is is now available free of charge. A VPN account will be issued to the requester and then they will be directed to the IT Software Management Team (Mudd 211) to obtain a Netlock license and the media.
Contact Carl Furra or the Help Desk for information about obtaining Netlock for pre-Mac OS X systems, then follow the instructions provided to download and install the Netlock VPN Client for Cisco 3000.
Configuring the software for
use at Rice
Before you configure your Netlock VPN software, you will need to make sure your computer is set to expect DHCP communication (i.e. it expects to be assigned an IP address by the VPN server). On a pre-OS X Macintosh, this is set in the Control Panels' TCP/IP option. (Make sure that in the Setup box, the Configure: line says Using DHCP Server.)
Firewall users: If you have a firewall on your system, you will need to make sure that the following ports are open:
- 127.0.0.1 (the identity a machine uses to talk to itself), port 9161
- 128.42.247.200 (the Rice VPN server), UDP protocol permitted both in and out on port 500
Note: unusual application launcher
After you have performed the installation, look for a new small gray icon near the time in your menu bar.
This is the Netlock icon. (Unlike most Macintosh software, Netlock does not create an icon in the usual Applications area. The only available launcher is stored in the menu bar near the time display.)
Click this icon. From the menu that appears, select Netlock Cisco Client. Your default web browser will launch and access the Netlock browser-based configuration interface.
Configuration settings
The first time you launch the Netlock client, you will be prompted for registration.
On all subsequent launches, you will go straight to the main Netlock interface window. The Connection Entry window will appear.
To create the entry you will use to connect to the VPN server, click Options, then New. This brings up the New Connection Entry window, which allows you to configure a standard method of connecting to the VPN server.
(Since you have not yet created a configuration entry, many of the lines that are completed in this page will be blank at first.)
Complete the blanks with the following information:
- Entry name: Rice VPN (or something similar)
- Description: (whatever you wish)
- Server IP address:
128.42.247.200 (if you are connecting from any other network.) - Group Access Information:
- Name: Netlock
- Password: macsecret
Note that the group access name and password are entirely separate from your personal username and password. Your own username and password (your Network ID) will be needed later, when you connect to the VPN server.
Click OK on this screen. You will return to the main Connection Entry window. You're now done with initial configuration; from this point, whenever you want to connect, you'll only need to launch the Netlock client and select your connection profile.
Connecting to the VPN Server
Make sure that your connection profile is shown in the Connection Entry list and click the Connect button.
You will see a window with several messages about the status of the attempt to connect; next, you will be prompted for "additional user authentication" in order to make the connection.
Enter your Network ID and Network ID password here. (CITES recommends that you do NOT check the "Save Password" button.) Click OK.
If the connection is successfully made, the Status Monitor window will appear next, with additional information about your communication with the server. You can close the browser window at this point and continue with your regular networking.
Disconnecting from the VPN Server
In order to disconnect from the VPN server, you will need to return to the Status Monitor window.
- If you've minimized the browser window with the Netlock interface, restore it.
- If you've closed the browser window with the Netlock interface, you can get it back by clicking on the Netlock icon and selecting the Netlock Cisco Client option.
Once you've returned to the Status Monitor window, click the Disconnect button to end your VPN session.
Summary table of settings
Entry name |
Rice University VPN |
Server IP Address |
128.42.247.200 |
Group Access Information: |
Netlock |
| Group Access Information: |
macsecret |
User Name |
Network ID |
Password |
Network ID password |
Acknowledgements
Page content courtesy of CITES, University of Illinois at Urbana-Champaign.
