Fermilab VPN Service

1
Fermilab VPN Service

• What is a VPN ?

2
Fermilab Virtual Private Networks (VPN)

• VPN Virtual Private Network
• encrypted tunnel over a public network (Internet)
  to connect remote users to an enterprise network
  (FNAL)
• A VPN tunnel
• allows a user to have the functionality of a
  direct dialup connection
• provides the convenience higher bandwidth from
  using a local ISP for connectivity

3
Why Do I need a VPN account ?

• Provides encrypted tunnel into Fermilab.
• Traffic across the internet more secure
• Provides your home system with local Fermilab IP
  address (131.225.x.x).
• Can access services or systems restricted to
  Fermilab only servers.
• Bypass border blocks for NetBIOS, web servers,
  rpc, and remote printing.

4
How do I register for a VPN account ?

• At https//www-dcn.fnal.gov/vpn/vpn_reg.cgi
• Provide Fermilab ID select Group Affiliation
• Will receive e-mail with info on downloading VPN
  client and profile
• Only the Cisco VPN client is supported.
• Security policies pushed to client from VPN
  server.
• Call Helpdesk to activate VPN account
• Wait 2 hours before contacting Helpdesk.
• Helpdesk [phone] M-F, 830am - 500pm

5
VPN Registration Page

• Required
• Information
• FNAL ID
• Employee Status
• Affiliation

6
What OSs are VPN supported ?

• Tested supported
• Microsoft Windows 9.x, SE, ME, XP, NT 4.0, 2000,
  and XP.
• Linux (Intel) 2.2.12 and 2.2.14
• Mac OS 10.0 (Mac OS X), 10.1, 10.2 (Jaguar)
• Solaris 2.6 (UltraSparc 32 64-bit)

7
VPN Profile

• Contains pre-shared key used for stage 1
  authentication
• Stage 2 authentication is personal username
  password
• Profile also includes VPN policies pushed to
  client system
• split tunneling, session limit, no browser-saved
  password
• Must be updated annually
• When new VPN Profile are required, downloading
  instructions are sent out to users via E-mail.