Virtual Private Network (VPN)

Note: The VPN Client cannot be downloaded using the Netscape Browser

General Questions

Error Messages and Explanations

Firewalls & Routers

General Questions

    Q: What is VPN, why do I need it, and when should I use it?
    A: With so much emphasis being directed to network security, many different technologies are being deployed to help deter, if not eliminate unauthorized and often malicious access to private networks (UTHSCSA computer network). Generally, public networks have very restricted access to private networks. A Virtual Private Network (VPN) is a network technology that is constructed by using publicly accessible networking services (Internet providers) to securely connect private networks and nodes. The VPN environment uses user-level authentication, encryption and other security mechanisms to ensure that only authorized users can access the private network and that the data cannot be intercepted.

    Q: Do I still need to have an Internet Service Provider (ISP) like Road Runner, AT&T, DSL, etc.?
    A: Yes. VPN works along with your ISP to give a secure connection between your home computer and the UTHSCSA campus. VPN does not replace your ISP, it works to protect data transmissions from being intercepted by a third party.

    Q: Who needs the VPN software?
    A: All UTHSCSA faculty, staff and students who need remote access from an internet connection point to the private UTHSCSA computer network should use the VPN connection. Once a VPN connection is established, the end user appears (virtually) to be directly connected to the UTHSCSA computer network with all of the access rights granted to normal, campus connected users. Another property of the VPN is that once the VPN is established, the end user node appears to have a local UTHSCSA Internet (IP) address, which is required to access some specific applications (Library).

    Q: Will I need to learn a new program to use VPN?
    A: No. You will not need to learn a new program. Once you install VPN you will only need to click on the VPN icon to connect. You will see no difference in your programs and there are no new applications to learn.

    Q: I want to get a router for my home network. Is there anything I should know about their functionality with VPN before I buy one?
    A: Absolutely! If you are going to purchase a new router, and you will be attempting to use VPN through it, be sure it either states it is enabled with NAT transparency or allows for VPN passing. Most of the newer routers have this feature, but investigate it before you buy.

    Q: What are VPN system requirements?
    A: click here to see system requirements

    • You must have a valid UTHSCSA computer/network account. If you do not, please call the Information Management Client Support Services (Triage Help Desk) at (210) 567-2069 to obtain instructions on how to acquire an account.
    • Supported Operating System Platforms
    • Client node must have TCP/IP software installed

    Q: Where do I download the VPN Client?
    A: Select the appropriate download:

    Q: Where do I download the Windows Vista VPN client?
    A: Software and Instructions for Windows Vista

    Q: How do I uninstall the older version of the VPN client?
    A: Cisco Uninstall instructions

    Error Messages and Explanations

    Firewalls and Routers

      Firewalls and routers are the main cause for the "Remote Peer" errors. The following steps below may help you troubleshoot your set up to allow VPN to pass through your router and/or firewall.

      Q: I am running a personal firewall on my machine. What ports need to be opened to access the VPN server?
      A: If your machine is behind a firewall or running a personal firewall the following need to be opened to the VPN server(s):

      • UDP Port 62515 (only port required for Windows XP SP2 users) Windows Firewall
      • UDP Port 500
      • UDP Port 4500
      • UDP Port 10000
      • TCP Port 10000

      To change port settings in your Windows XP SP2 firewall, open Control Panel, select the Windows Firewall. Under the Exceptions tab, click Add Port, in the Description field type "UDP 62515" or the Port Number.

      If your firewall (or possibly a NAT box) cannot properly deal with IPSEC you can configure your client to tunnel all IPSEC traffic over UDP and TCP port 10000 and simply open that port on your firewall. Do this from Properties, General tab. Click the box next to Enable Transparent Tunneling and then click the Radio Button for allow IPSEC over UDP. If you have questions regarding the function of your firewall consult your manufacturer’s documentation or contact their technical support.

      Q: I have a router set up on my home network and am getting the "Remote Peer" error. What should I be looking for?
      A: Routers that were manufactured before June 2002 may be incompatible with VPN. Many of the routers that were manufactured before this time did not allow for NAT transparency. This means that they do not allow for VPN traffic to pass through them. There are two solutions to this problem:

      1. On the machine you are trying to connect to VPN with, unplug the Ethernet cable that goes into the router and plug it directly into your modem. This configuration is the same setup that your provider uses on a single machine setup. By connecting directly to the modem rather than through the router this will allow for VPN to be accessible to the machine.
      2. Contact the manufacturer of your router. They will be able to tell you if your router uses NAT transparency (or allows VPN passing). If it does not, ask if they have a firmware update that allows this feature. Ask them to assist you with the update. If you have questions regarding your router’s capabilities consult your manufacturer’s documentation or contact their technical support.

    Getting Help

    Before calling Client Support Services, please refer to the UTHSCSA Troubleshooting Guide for VPN to help you self-diagnose any well-known problems.

    Contact Client Support Services at:
    Telephone: (210) 567-2069
    Comments: Any Comments?

    password image

    XP Users

    When you connect to the VPN client using Windows XP, you will see a two line login screen. Type your UserDomain\Userlogin and Password as the example below shows.