VPN Server

VPN access is only open to staff and post-graduate students of the school

CSSE has a Cisco PIX VPN server that can be used to connect to/become part of CSSE's internal network from:

• An external location (eg, home or while travelling)
• SNAP wireless within the CSSE building and anywhere else on campus

SNAP wireless is treated as a separate isolated network across the campus. Up until now you've had to connect to UCS's VPN server to get out of it, which left you external to CSSE's network and firewalled as such, even when using SNAP wireless within the CSSE building.

• Requirements
• Generic configuration instructions
• Apple Mac OS X 10.3 configuration instructions
• Microsoft Windows XP Professional configuration instructions
• PalmOS 5.x configuration instructions
• Notes

The requirements to make use of the VPN server are:

• Come and see Computer Support to have a VPN account created. Your existing username/password is not synchronised with the VPN server.
• A computer with an operating system and VPN client that supports PPTP (point-to-point tunnelling protocol) with a minimum of 40bit encryption.
• An Internet connection of some form that currently allows you to connect to UWA (eg, open http://www.csse.uwa.edu.au/ in your web-browser)

To make a VPN connection, you will need to configure your VPN client as follows:

• Connect to VPN server 130.95.17.102 (or 10.11.255.232 if currently on the SNAP wireless network anywhere on campus)
• Connect using PPTP (not L2TP over IPSec)
• Use MS-CHAP for password authentication (not PAP, which doesn't support encryption)
• Set encryption type to "Automatic" or "Require Encryption" (not "None", "128bit only" or "Maximum Strength Encryption")
• Use "Password authentication" (not "RSA SecurID" or "Use Smart Card")
• Use the username and password Computer Support assigned you

Configuration instructions for Apple Mac OS X 10.3:

• Applications -> Internet Connect
• File -> New VPN Connection -> PPTP -> Continue
• Configuration -> Edit Configurations...
• Description -> Enter "CSSE VPN"
• Server address -> Enter "130.95.17.102" (or "10.11.255.232" if connecting from SNAP wireless)
• Account name -> Enter the username assigned to you by Computer Support
• Authentication -> Use Password -> Enter the password assigned to you by Computer Support
• Encryption -> Choose "No Encryption"
• Ok
• Connect

Configuration instructions for Microsoft Windows XP Professional:

• Start -> Connect to -> Show all connections
• Create a new connection
• Next
• Choose "Connect to the network at my workplace" -> Next
• Choose "Virtual Private Network connection" -> Next
• Company Name -> Enter "CSSE VPN" -> Next
• Host name or IP address -> Enter "130.95.17.102" (or "10.11.255.232" if connecting from SNAP wireless) -> Next
• Create this connection for -> Select "My use only" -> Next
• Finish
• Username -> Enter the username assigned to you by Computer Support
• Password -> Enter the password assigned to you by Computer Support
• Connect

Configuration instructions for PalmOS 5.x:

• (Note: you must have the Palm WiFi drivers installed (which include Mergic VPN software) or Mergic VPN itself)
• Prefs -> Communications -> VPN
• VPN -> Choose "enabled"
• Account -> Choose "Edit Accounts..."
• Add...
• Account -> Enter "CSSE VPN"
• Username -> Enter the username assigned to you by Computer Support
• Password -> Enter the password assigned to you by Computer Support
• VPN Server Name or Address -> Enter "130.95.17.102" (or "10.11.255.232" if connecting from SNAP wireless)
• Details
• Encryption: Un-tick (it will still be encrypted - this option is simply "128bit only")
• Send all to VPN: Tick
• Query DNS: Not checked
• Primary DNS: 130.95.128.2
• Secondary DNS: 130.95.128.1
• IP Address Automatic: Not checked.
• Ok
• Ok
• Ensure "CSSE VPN" is still selected in the Account drop-down menu
• While "VPN" is left "Enabled", your Palm will attempt to make the selected VPN connection when-ever an IP connection is brought up (wether by WiFi, GPRS, Internet sharing etc)

Things to note about VPN access:

• Once connected to the VPN, your access is restricted to just CSSE's internal network. For convenience, you can browse web-pages by using the web proxy server proxy.csse.uwa.edu.au:8888 (supports HTTP, HTTPS and FTP). Please do not abuse the bandwidth that is provided. Excessive use will result in us asking for justification.