VPN Access in Windows
A Virtual Private Network (VPN) is a way of extending our internal network out to systems connected on the internet. Once connected via a VPN, a remote system appears to be connected locally to our network thereby getting all the facilities available to local users and avoiding blocks placed in intervening firewalls. All data passed via a VPN is encrypted.
A client wishing to connect to a VPN must first connect to the internet, for example by a dial-up or broadband connection to an ISP. Once communicating correctly with the internet, a VPN can be established to the VPN server running inside the department. Authentication must be provided in order to connect and this is the same username, password and domain which you supply to log into any central Windows system in the department.
IMPORTANT: Our VPN server supports a number of different protocols that a client can use. Generally, if your system allows the protocol to be selected then please set to SSTP rather than PPTP or `automatic`.Windows 7 and later have SSTP built in and this will make successful connections under most circumstances. However, Windows XP and the built in VPN clint in Apple OSX dont support this protocol and can only attempt connections with PPTP. This is more sensitive to firewall and router configurations so there is a fair risk of having some trouble. If using a router at home with firewalling enabled, please check that its configured for VPN access, specifically PPTP and the GRE protocol. Some people have had success with 3rd party VPN clients for OSX and Linux that support sstp and we will add recommendations when appropriate.
Setting up VPN in Windows 10 or 7 or Vista
The following instructions assume that your system is already connected to the Internet.
For Windows 10 it also assumes that the system has been set up like a standard managed Physics system.
In particular, it assumes that the "Control Panel" has been pinned to "Start".
Click on [Start] -> [Control Panel].
Double-click on [Network and Sharing Centre].
Click on [Set up a connection to a network].
Select [Connect to a workplace] and then click on [Next].
Click on [Use my Internet Connection (VPN)].
Enter Internet address: vpn.physics.ox.ac.uk
Enter Destination name: VPN Connection
Click on [Next] and then enter:
Username: yourphysicsnetworkusername
Password: yourpassword
Domain: physics
Click on [Connect].
The default Windows 7 VPN settings should work in normal circumstances.
Setting up VPN in Windows XP
- Click on Start, Settings, Control Panel.
- Double-click on Network Connections.
- Click on "Create New Connection", then click on Next.
- Tick "Connect to the network at my workplace" then press Next.
- Tick "Virtual Private Network connection" then press Next.
- Type in a name for the connection ("VPN to physics" or similar). Click on Next.
- If you want Windows to automatically dial up your ISP whenever you open a VPN connection, tick "automatically dial this connection" and select the ISP you want to call. If you want to connect via a LAN or via an ISP connection you have dialled manually, select "Do not dial the initial connection". Click on Next.
- Enter the IP address of the VPN server as vpn.physics.ox.ac.uk and click on Next.
- Click on Finish.
- Click on Properties.
- Click on the Options tab and tick "Include Windows Logon Domain"
- Click on the Networking tab and set "Type of VPN server I am calling" to "PPTP VPN" (Point to Point Tunnelling Protocol).
- Double-click on Internet Protocol and click on Advanced.
- Make sure "Use default gateway on remote network" is ticked. Click on OK, then on OK and then OK once again.
To establish a VPN connection, click on Start, Settings, Network Connections, VPN to Physics. Enter your Username, Password and Domain and click on Connect.
Setting up VPN in Windows 2000
Note: you must have your original Windows CD handy to complete this procedure.
Click on start-> Settings -> Control Panel
- Double-click on "Network and Dial-Up connections"
- Double-click on "Make New Connection" and click on "Next"
- tick "Connect to a private network through the Internet" and click on "Next"
- If you want Windows to automatically dial up your ISP whenever you open a VPN connection, tick "automatically dial this connection" and select the ISP you want to call. If you want to connect via a LAN or via an ISP connection you have dialled manually, select "Do not dial the initial connection". Click on "Next"
- enter the IP address of the VPN server as "vpn.physics.ox.ac.uk" and click on "Next"
- tick "for all users" and click on "next"
- type in a name for the connection ("VPN to physics" or similar) and click on finish.
At this point you may be asked to reboot the computer.
- right-click on VPN to Physics and click on properties
- click on the Options tab and tick "Include Windows logon Domain".
- click on the Networking tab and set "Type of VPN server I am calling" to "Point to Point Tunnelling Protocol"
- double-click on Internet Protocol and click on Advanced.
- Make sure "Use default gateway on remote network" is ticked. Click on OK
To establish a VPN connection, click on start->settings->network and dial-up connections->vpn to physics
Setting up VPN in Windows 9x
Windows 98 and Windows 98SE
You must have your original Windows CD handy and if you are not using Windows98SE (Windows 98 Second Edition) you will also need to download these additional upgrades/patches: wucsp.exe and vpnupd.exe. These can also be copied from the Microsoft web site.
- Click on Start, Settings, Control Panel.
- Double-click on add/remove programs and click on the "Windows Setup" tab.
- Double-click on communications, tick "Virtual Private Networking" and click on OK and click on OK again.
- Reboot the computer.
- If you are not using Windows98SE you will now need to add the upgrades. Rirst vpnupd.exe and then wucsp.exe. In each case, double-click on the file, follow the instructions and reboot you computer.
- Double click on My Computer and double-click on Dial-Up Networking
- Double-click on Add new connection.
- Enter name for connection (for instance: VPN to Physics), select the device as "Microsoft VPN Adapter" and click on Next.
- Enter the host name as "vpn.physics.ox.ac.uk" and click on Next and click on Finish.
- Right-click on VPN to Physics and click on properties.
- Click on the "Server Types" tab and tick the following: "Log on to network", "Enable software compression", "Require Data Encryption" and "TCP/IP". The following should not be selected: "NETBUI" and IPX.
- Click on TCP/IP Settings and make sure that "Use default gateway on remote network" is ticked.
- Click on OK.
To establish a VPN connection: First connect to the internet as usual (either via a LAN or via a dial-up connection), then: double click on My Computer, double-click on Dial-Up Networking and double-click on "VPN to Physics".
Windows 95
You must have your original Windows CD handy to complete this procedure. You will also need to download these additional upgrades/patches: msdun13.exe and vpnupd.exe. These can also be copied from the Microsoft web site.
- Double-click on msdun13.exe and reboot when complete.
- Double-click on vpnupd.exe and reboot when complete.
- Double click on My Computer and double-click on Dial-Up Networking.
- Double-click on Add new connection.
- Enter name for connection (for instance: VPN to Physics), select the device as "Microsoft VPN Adapter" and click on Next.
- Enter the host name as "vpn.physics.ox.ac.uk" and click on Next and click on Finish.
- Right-click on VPN to Physics and click on properties.
- Click on the "Server Types" tab and tick the following: "Log on to network", "Enable software compression", "Require Data Encryption" and "TCP/IP". The following should not be selected: "NETBUI" and IPX.
- Click on TCP/IP settings and make sure that "Use default gateway on remote network" is ticked.
- Click on OK.
To establish a VPN connection: First connect to the internet as usual (either via a LAN or via a dial-up connection), then: double click on My Computer, double-click on Dial-Up Networking and double-click on "VPN to Physics".
Please contact IT Support if you require any additional assistance.
Categories: Network | Remote Access | VPN | Windows