VPN for Mac OS X

Installation

1. Obtain the IPSec Group Name and IPSec Password for either on campus use or off campus use by clicking the following link: VPN Account Information.
2. If prompted, enter your SacLink User ID and Password. If you have not created your account or have forgotten your account ID or password, see SacLink Information for details.
3. Obtain the VPN client from the Software Distribution Web Site by clicking the following link: http://www.csus.edu/uccs/software/
4. Click on the Obtain Software link in the left navigation bar.
5. Read and agree to the terms of distribution by clicking the I Agree link at the bottom of the page.
6. Log in using your SacLink username and password.
7. Locate the Cisco VPN Client for your operating system and click the Download link.
8. Click the Download Now button.
9. Save the file to your desktop. The file could take a few minutes or over an hour to download depending on your connection speed.
10. Once the file is downloaded, close your browser and if you are using a connection other than the Sac State wireless network, disconnect from the Internet.
11. The file for the VPN client should now appear on the desktop with a .dmg.gz extension.

Configuration

1. Double click on the icon that you just downloaded on to your desktop.
2. A CiscoVPNClient icon will show up on the desktop. Double click this new icon.

3. From the CiscoVPNClient window, double click on the icon Cisco VPN Client.mpkg
4. You will be prompted for the Administrator password to install the software. At the prompt enter your Administrator username and the password, and click OK.
5. At the Introduction window, click the Continue button.
6. Click on the Agree button to continue the installation.
7. Select the destination disk where you want to install the VPN Client and then click Continue.
8. On the Installation Type window, click on the Upgrade button to start the software installation.
9. Once the installation is complete, click on Close to finish. You can closeout the CiscoVPNClient window also.
10. You can drag the VPNClient icon (located in the Applications folder) to your Dock.

11. Click on the VPN icon to start the client.
12. In the VPN Client window, click on the New icon.
13. Enter Oncampus if you are using the Sac State wireless or wired network and Offcampus for all other connections for the Connection Entry.

14. Enter Sac State On Campus VPN Connection or Sac State Off Campus VPN Connection for the Description of the new connection entry.
15. Enter vpn.csus.edu for Host name.
16. Select the Authentication tab.
17. Under Group Authentication enter the IPSec Group Name and Password you obtained from the VPN Account Information link.
18. Click on the Transport tab. For on campus connections, deselect the Enable Transparent Tunneling option (see Oncampus image). For off campus connections, select the IPSec over TCP option (see Offcampus image).

Note: If you have a personal firewall active on your computer, you will need to configure your firewall to open up the appropriate ports and allow ESP packets to establish a connection.

If you are using the VPN client on campus, open IP ports 50 and 51 and UDP port 500.

If you are using the VPN client from off campus, open TCP port 10,000.

19. Click on the Save button.
20. Now restart your machine.

Running the Client

1. From the Dock, click on the VPNClient
2. Select the appropriate Connection Entry, and then click on Connect button.

3. Enter your SacLink User ID at the prompt for Username: and the SacLink password at the prompt for the Password. Click on Ok.

4. The VPN services should now be enabled.

Note: The VPN client will turn off after 90 minutes of inactivity. To turn the VPN client back on, follow the Run the VPN Client steps.

Set the Default Connection

If you have the VPN client configured for both on campus and off campus access, you can choose which connection you would like to be the default connection. This can save a step when connecting. Follow the steps below to set the default connection.

1. With the VPN client open, click on the connection entry that you would like to set as the default connection.
2. From the Connection Entries menu, choose Set as Default Connection Entry.
3. The default connection will now appear in bold type.