Carnegie Mellon University Website Home Page
 
Skip navigation and jump directly to page content
Documentation Index
Networking
VPN
VPN: Cisco Client
Step 1: Download & Install
Step 2: Register VPN Certificate
Step 3: Import the VPN Certificate
Step 4: Create Connection
Step 5: UDP Connection
Step 6: Firewall
Step 7: Windows XP Only
Step 8: Advanced Configuration-Windows Only
Step 9: Establish a Connection
Accounts
Network, Phone & TV
Software
Email & Calendar
Secure Your Computer
Clusters & Printing
Web Services
Classroom & Event Support
Education & Outreach
Support & Repair
Information Security Office (ISO)

Step 8: VPN Client Advanced Configuration-Windows Only

Configure the VPN Client to launch before Windows Log On

Some Windows XP machines that use Active Directory will need to connect to the VPN server BEFORE logging into Windows. THIS IS THE CASE ONLY IF you are using folder redirection AND, you are using a VPN connection from OFF CAMPUS.

  • If this scenario applies to you, follow the instructions to Configure VPN client to connect before logging into Windows.
    Note: If you're not sure whether you're using folder redirection, follow the steps to verify your configuration.
  • If this does NOT describe your connection usage, please continue with the steps to Establish a VPN.

Verify configuration for FOLDER REDIRECTION

  1. From the Start menu, right-click on My Documents.
  2. Select Properties.
  3. On the Target tab, look under Target folder location,
    • If the Target is C:\xxx, you are NOT using folder redirection and do NOT need to configure your VPN client to connect before windows log in. Your configuration process is complete. Continue with the Establish a VPN Connection section.
    • If the Target is \\server name, you ARE using folder redirection. Complete the steps to Configure your client to connect before logging into Windows.

Configure VPN client to connect before logging into Windows XP

ONLY COMPLETE THE FOLLOWING STEPS IF:

  • You determined that you ARE using folder redirection
  • AND, you are using an off-campus connection.

This will allow you to connect to the VPN server before logging into Windows. Otherwise, your machine will not have access to the Carnegie Mellon servers in order to retrieve the contents of the redirected server folders.

  1. From the Cisco VPN Client, select Options > Windows Logon Properties.
  2. The Windows Login Properties dialog box displays.
    • Select the Enable start before logon option.
    • Deselect the option to Disconnect VPN connection when logging off.
      IMPORTANT! Your configuration for folder redirection requires that your machine writes back to files on the server when you log off. For this reason, your VPN connection must be maintained when you log out of Windows. After you have logged out, YOU MUST SHUTDOWN YOUR COMPUTER TO DISCONNECT THE VPN CONNECTION.
  3. Click OK to save the changes and close the Properties dialog box. Your configuration process is complete. Continue with the steps to Establish a VPN connection before Windows log in.

Establish a VPN Connection before Windows log in
for machines using folder redirection

  • You must first have an active INTERNET CONNECTION (i.e., DSL, cable modem).
  • Because you configured your machine to Enable start before logon, your login screen now contains a VPN connection dialog box.
    Note: As you boot your machine, you may see a warning message asking you to "wait for Windows networking to start". It may take a moment for the Cisco VPN client to load.
  1. Establish a VPN connection
    • Select the VPN connection entry from the Connection Entries drop-down list and click Connect.
    • You are asked to enter your Certificate Password before connecting to the service.
      Note: This is the "connection" password you created when you imported the certificate into the Cisco VPN Client. It is NOT the password you selected in NetReg.
      • If you created a connection password earlier when you imported your certificate, enter the password now.
      • If you DID NOT assign a connection password during the "Import Certificate" process, this dialog box still displays. Leave the password field blank and click OK to dismiss the dialog box.
    • The VPN connection is established and the VPN Client dialog box disappears.
  2. Log on to Windows
    Once the VPN connection is established, enter your Andrew password in the Log On to Windows dialog box. Click OK. You are now safe to start any applications that require the use of the VPN service

    IMPORTANT! Your configuration for folder redirection requires that your machine writes back to files on the server when you log off. For this reason, your VPN connection must be maintained when you log out of Windows. After you have logged out, YOU MUST SHUTDOWN YOUR COMPUTER TO DISCONNECT THE VPN CONNECTION.

Once you are able to establish a VPN connection, your configuration process is complete. Please see the VPN Certificates: Understanding and Managing document to better understand the VPN certificates and how to manage the certificates on your machine.

next step Step 9: Establish a Connection

Last updated: 1/10/08