Secure connections at Nevis

• A web proxy
• VPN (Virtual Private Network)

VPN network connection

Why use VPN?

By using VPN, you can establish a direct connection to the local network at Nevis from the outside.

Normally, to access a machine on the local network, you use ssh to login to one of the workgroup servers, then ssh again to the local machine. But there are times when this become inconvenient or complicated; e.g., accessing a Windows machine at Nevis. A VPN connection can be a simpler solution.

Here are the steps; the first two only have to be done once.

Create a VPN account

This is the same account/procedure as with the firewall's proxy above: You can stop by the office of WilliamSeligman (room 116) at Nevis; it takes about three minutes to create a VPN account on the firewall. An alternative is to e-mail me and arrange for an account. Don't tell me your Nevis password! Instead, I'll probably assign you a random password using the apg command.

Configure a VPN client.

If you don't have a Macintosh running Snow Leopard or later, you'll have to get and configure the VPN client program from CIsco.

Install the Cisco VPN client

Download the version of the client for your operating system. You'll have to go through the procedure of registering as a Guest user on the Cisco web site. Follow Cisco's instructions to install the software.

Using the VPN client

On the Cisco VPN client, you need to create a new connection:

Connection Entry - can be anything; e.g., "Nevis"
Description - again, can be anything or left blank
Host - 129.236.255.60

Group Authentication
Name: Nevis
Password: higgsino
Confirm Password: higgsino

Then click on "Connect". Enter your VPN account name and password.

Mac VPN client

One-time configuration

Open System Preferences > Network and click on the + symbol. Add a VPN Interface of type "Cisco IPsec", give it a good new name (I used VPN (Nevis)), and click on "Create".

Server address: 129.236.255.60
Click on "Authentication Settings"
Shared secret: higgsino
Group Name: Nevis
Click "OK"
Account name = the VPN account name created on the firewall
Leave the password blank; the server will prompt for it each time even if you fill this in.
Click on "Connect"

Using the built-in Mac VPN client

It is a good idea to click on "Show VPN status in menu bar". You get a one-click solution to open a VPN connection. Otherwise, you'll have to go to the Network Preferences Pane and click on the "Connect" button each time.

That's it. You should now be able to directly connect to any system on the local network; e.g., winnie.nevis.columbia.edu.