Users have a choice of how they access CAEN Wireless on North Campus. A web-based authentication system allows the U-M community to log in using their UMICH.EDU (Kerberos) password at a secure web page, and access the Internet. Due to security measures, this web-based system will only allow certain network traffic to pass. For specific information on what traffic is allowed through the web-based system, please see the follow page:

• www.engin.umich.edu/caen/faqs/Wireless/General/traffic

Those who require access to network resources beyond what is described above will need to use the Cisco VPN client for CAEN Wireless access. In general, CAEN strongly recommends that everyone uses the VPN whenever possible to ensure that all of their wireless network traffic is encrypted and secure.

What do I need to connect to the CAEN Wireless VPN?

To connect to the CAEN Wireless VPN, you will need a computer with a 802.11-compliant (b or g) wireless adapter. You will also need to install the Cisco VPN client. The VPN client is available for free download at:

• www.engin.umich.edu/caen/network/wireless/software.html

Note: There are many VPN options at U-M, both on- and off-campus, using the Cisco VPN client. The client is available for several operating systems, and various profiles have been set up to allow the U-M community to connect to the campus network. Users of the CAEN Wireless VPN will need the VPN profile. Further information on the various VPN profiles available at U-M, including a link to download the UM-on-campus-wireless profile, can be found at:

• www.engin.umich.edu/caen/network/connect/vpn.html

How do I install the Cisco VPN client?

Note: If you are running a Linux firewall, make sure to allow certain types of traffic to pass through, See our Linux firewall FAQ for more information.

• Download the packaged files to the root of your file system:

• Open a Terminal.
• Unpack the files using the zcat and tar commands. For example:

  cd /; gzcat vpnclient-linux.tar.gz | tar xvf -

• Obtain su (superuser or root) privileges to install the VPN client.
• Change into the directory where the VPN client was unpacked and type: ./vpn_install
• As the install progresses, accept the default location for all files to be stored. Simply hit Enter at every prompt.
• Change directories to /etc/CiscoVPNClient and create a Profiles directory.
• Copy the UM-on-campus-wireless.pcf file into the Profiles directory.
• Reboot your computer.
• Start the VPN client by entering the following command:

/usr/local/bin/vpnclient connect "UM-on-campus-wireless"

Troubleshooting Tips

If you run into problems, here are a few tips that might help.

• Make sure your wireless card is configured for DHCP. If it is not, run the netconfig command and configure the wireless card to use DHCP. Then, you can run /etc/init.d/network restart to get an IP address.
• If you have a firewall, make sure you disable it with the command /etc/init.d/iptables stop or /etc/init.d/ipchains stop.
• If you believe that you have an IP address, but cannot access any web pages, try using the command route add default gw <IP address of VPN server>. You can obtain the VPN server's IP address from the profile. This will route your network traffic directly to the VPN server.

Further Information

For more information on installing and setting up the Cisco VPN client, you can visit the CAEN Hotline. Also see Cisco's Release Notes for the VPN client, provided at:

• www.cisco.com/en/US/products/sw/secursw/ps2308/prod_release_notes_list.html

For more information about other wireless deployments at U-M, visit:

• www.itcom.itcs.umich.edu/wireless