VPN Setup Instructions for Windows 8 and 10

VPN Setup Instructions for Windows 8 and 10 Prerequisites There are a few things you must do before you can set up your computer to connect to the CEC...
Author: Karen Woods
68 downloads 0 Views 783KB Size
VPN Setup Instructions for Windows 8 and 10 Prerequisites There are a few things you must do before you can set up your computer to connect to the CEC VPN: 1. You must first get remote access enabled on your account by proving that your computer is fully patched as well as virus-free. Instructions for this step can be found at https://internal.cec.sc.edu/its/access/vpn.htm

2. The other prerequisite that you need to have done is setting up your USC Duo two-factor authentication account. Instructions for doing that are on page 2 of this brochure: https://internal.cec.sc.edu/its/instructions/duo_brochure.pdf If you would like to purchase a YubiKey authentication token from the USC bookstore to use with Duo, instructions for setting that up can be found here: https://internal.cec.sc.edu/its/instructions/duo-setup.pdf YubiKeys are useful if you travel to places where your cell phone does not work or gets poor reception, but they are not required to use Duo at USC.

VPN Client Setup Instructions: 1. Click on Start > Settings > Network & Internet

2. Click VPN from the menu on the left and Click on the “+ Add a VPN connection”

3. Fill in the fields as follows and then click Save:    

VPN Provider: From the drop down menu, select Windows (built in) Connection name: CEC Server name and address: vpn.cec.sc.edu VPN type: Secure Socket Tunneling Protocol (SSTP)

4. In the Network & Internet VPN Settings page, click “Change adapter settings” under the “Related

Settings” section. Right click on the CEC adapter and choose “Properties”.

5. In the Security tab of CEC Properties, choose “Require encryption (disconnect if server declines)”

from the “Data encryption” drop down menu. Click the “Allow these protocols” radio button and check the “Unencrypted password (PAP)” option and clear any other check boxes. Your password encryption will be taken care of by the SSTP tunnel.

6. In the Networking tab of CEC Properties, clear the check box for “Internet Protocol Version 6

(TCP/IPv6)”. Click “OK” to save and exit CEC Properties.

7. To use the VPN connection, click the network icon in the bottom right-hand corner of your taskbar. It will look like one of the two following icons:

or And then click on the CEC option in the pop-up menu:

8. Click on the “Connect” button under the CEC option:

9. Sign in using your University credentials, putting “ds\” in front of your username. This is the same

password that you use for Blackboard, University wireless, or University email.

The device you configured to receive your Duo authentication requests should now prompt you to approve logging into the CEC VPN. If you want to use a YubiKey as your Duo authentication device, put a comma at the end of your password and then push the YubiKey button before you click “OK”.

10. Once the connection is established, it should show as “Connected” under the CEC network name. When

you are finished using the VPN, click on the “Disconnect” button.

If Logging In Times Out Before You Can Authenticate with Duo: The default timeout on most Windows VPN clients is very short and may not be enough time to authenticate with Duo. If you find this to be a problem for you, you can edit the registry on your Windows computer to increase the timeout. ADVANCED USERS: If you are comfortable manually editing the Windows’ registry, the key you need to change is located at Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\MaxConfigure You should increase the timeout from (decimal) 10 to 60 (seconds), or (hexadecimal) A to 3C.

NOVICE USERS: 1. Download the registry file located at https://internal.cec.sc.edu/its/downloads/Duo-vpn-timeout.zip and unzip it.

2. Double click on the Duo-vpn-timeout.zip file. If Windows’ User Access Control prompts you with “Do you want the following program to make changes to this computer? “, click “YES”.

3. Click “Yes” in the Registry Editor dialogue:

4. Click “OK”: