• Why should I use a VPN client to access CAEN Wireless?
• What is split tunneling?
• What is Automatic VPN Initiation (auto-initiation)?
• How do I disable Automatic VPN Initiation in the Cisco VPN client?
• After I install the VPN client, connect and start my web browser, I am still redirected to the CAEN Wireless web site. Why?
• I installed the VPN client successfully, and it appears I have a network connection, but I cannot connect to sites on the Internet. Why is this happening?
• There are so many different VPNs available on campus; which one should I use?
• Where can I find more information on the Cisco VPN client?

Why should I use a VPN client to access CAEN Wireless?

Wireless networks are inherently insecure due to poorly encrypted, or unencrypted data. Anyone with a wireless connection to the network could access any data that is being sent over that network (including your password!). To counter this threat, CAEN has limited the network traffic that can be sent to the Internet via the non-VPN, web-based authentication system. This system will only allow web traffic and encrypted protocols, such as SSH and SSL. However, since most web communications are not secure, CAEN strongly recommends that you use the VPN client to access CAEN Wireless whenever possible. For more information, please see:

• http://www.engin.umich.edu/caen/network/wireless/overview.html

Note: To ensure that all Internet traffic is secure, CAEN recommends you always use encrypted protocols such as SSH, SFTP, SCP, and SSL.

What is split tunneling?

Split tunneling is a VPN term used to describe a multi-branch network path as a method of routing Internet traffic. Split tunneling is only used with the Cisco VPN client when connecting remotely (i.e. from off-campus). Using a split tunnel means all Internet traffic that is bound for the University network will be routed through the VPN client. All traffic not destined for a University destination will not be routed through the VPN, but to the connection provided by the Internet Service Provider (ISP).

Note: This setup allows for increased performance, where requests to non-University IP addresses do not have the overhead of encrypting/decrypting network traffic. However, this also means that any data not sent to the University network will not be encrypted.

What is Automatic VPN Initiation (auto-initiation)?

Auto-Initiation is a Windows-only feature of the Cisco VPN client that provides automatic, secure connections within CAEN Wireless through the VPN server. When auto-initiation is enabled on the Cisco VPN Client, the VPN Client:

• Becomes active immediately when a user starts his/her computer, or when the computer becomes active after being on standby or hibernating
• Detects that the computer has an IP address defined as requiring auto-initiation
• Establishes a VPN tunnel to the CAEN Wireless VPN, prompts the user to authenticate, and allows that user network access

For details on how to access the auto-initiation settings of the Cisco VPN client, please click here. For more information on auto-initiation, see the Cisco VPN Client Administration Guide on Cisco's web site.

How do I disable Automatic VPN Initiation in the Cisco VPN client?

Automatic VPN Initiation (auto-initiation) is a Windows-only feature of the Cisco VPN client. By default, CAEN has enabled auto-initiation in the version of the Cisco VPN client which is available from this web site. This was done by modifying the vpnclient.ini file, located at: C:\Program Files\Cisco Systems\VPN Client\

CAEN also provides a downloadable version of the vpnclient.ini file to users, if they wish to obtain quick access to the CAEN Wireless network using auto-initiation. For more information, please click here.

Users can disable auto-initiation through the GUI interface of the Cisco VPN client. Follow these instructions:

• Open the Cisco VPN client.
• From the Options menu, select Automatic VPN Initiation.
• When you select this option, the VPN client displays a window with a checkbox that lets you enable/disable auto-initiation and change the setting of the Retry Interval. Enabling/Disabling auto-initiation in this way does not remove it from your configuration. If you need to re-enable auto-initiation after you have disabled it, you can return to this dialog box and check it again. The only way you can remove auto-initiation from your configuration is through editing the vpnclient.ini file.

After I install the VPN client, connect and start my web browser, I am still redirected to the CAEN Wireless web site. Why?

Most web browsers store temporary copies of previously viewed web pages for offline viewing, or faster load times. This is typically called the cache. If you experience this problem after first installing the VPN client, you may need to clear the cache in your web browser before it will load the page properly.  Some examples of how to do this are:

• In Internet Explorer: Choose Tools menu >> Internet Options... >> Delete Files... button
• In Netscape: Choose Edit menu >> Preferences >> Advanced tab >> Cache
• In Mozilla: Choose Tools menu >> Options... >> Privacy tab >> Clear All button

I installed the VPN client successfully, and it appears I have a network connection, but I cannot connect to sites on the Internet. Why is this happening?

There are a few ways to troubleshoot this problem. In the majority of cases, though, the issue is having old or outdated wireless drivers installed for your computer. Updating the drivers for your wireless adapter will usually resolve the connection problem.

To obtain the newest drivers, search the website of the company that makes your wireless adapter. Manufacturers often post updated drivers on their sites for free download. Another tip is to execute a search on your favorite search engine. A typical search would include the make and model/number of your adapter, as well as the word drivers. For example: Cisco Aironet drivers

After you download the drivers, it is quite simple to update them.  For example, in Windows, follow these steps:

• Right-click on My Computer and select Properties.
• Click the Hardware tab.
• Click the Device Manager button.
• Find your wireless hardware under the Network adapters section of the list, and double click its icon.  Note: If the drivers have not been properly installed at all, you will find your adapter listed under the Other devices section (shown next to a big, yellow question mark (?).
• In the resulting window, click the Driver tab.
• Look at the Driver Date and Driver Version, and make sure the drivers you downloaded from the manufacturer's site are newer.  If so, click the Update Driver button.
• The Hardware Update Wizard will appear. Click the button next to Install from a list or specific location (Advanced), and click Next.
• Click the Browse button and find the folder on your Desktop that contains the updated drivers you downloaded, and click Next.
• The Wizard will update your drivers automatically.  You will need to reboot your computer when the Wizard completes.

If updating the drivers of your wireless adapter still does not fix the connection problem, you may need to uninstall then reinstall the Cisco VPN client. This is especially important if you are running an older version of the VPN client than what is offered on this web site. Make sure your wireless adapter installed and plugged into your laptop prior to installing the VPN client, and also make sure your Network Connections (in the Control Panel) are NOT part of a Network Bridge.

If the problem persists after completing all of the troubleshooting steps described above, please visit the CAEN Hotline and a CAEN staff member will help troubleshoot your problem further.

There are so many different VPNs available on campus; which one should I use?

CAEN has provided a brief comparison of the VPNs available on campus. If you still have questions after viewing this information, please feel free to Contact CAEN.

Where can I find more information on the Cisco VPN client?

Beyond the information offered on this web site, Cisco offers extensive online documentation of the VPN client on their web site, including user/administration guides, examples, frequently asked questions, bulletins, troubleshooting tips, and release notes:

• http://www.cisco.com/en/US/products/sw/secursw/ps2308/