Juniper VPN User Guide (for DoIT-supported departments) This user guide is intended for City personnel that receive IT Service Desk support from DoIT. The processes depicted in this document may differ for non- DoIT supported departments. If you have any questions about this guide or need further assistance, contact your Service Desk. They can be reached by phone at the following numbers: Department Service Desk Phone Number DoIT and DoIT supported departments 386-1212 City Light 684-3766 Public Utilities 684-5880 If you work in another department that is not supported by DoIT, please contact your department's IT Service Desk This document is organized as follows: A. Introducing Juniper Web Access and Juniper Full Access...................2 B. VPN on a City PC......................................................... 3 C. VPN on a Personal PC.................................................... 10 Juniper VPN User Guide Page 1 of 25 9/26/2012
Transcript
Juniper VPN User Guide(for DoIT-supported departments)
This user guide is intended for City personnel that receive IT Service Desk support from DoIT. The processes depicted in this document may differ for non-DoIT supported departments.
If you have any questions about this guide or need further assistance, contact your Service Desk. They can be reached by phone at the following numbers:
Department Service Desk Phone NumberDoIT and DoIT supported departments 386-1212City Light 684-3766Public Utilities 684-5880
If you work in another department that is not supported by DoIT, please contact your department's IT Service Desk
This document is organized as follows:
A. Introducing Juniper Web Access and Juniper Full Access....................................................................2
B. VPN on a City PC.................................................................................................................................. 3
C. VPN on a Personal PC........................................................................................................................ 10
Juniper VPN User Guide Page 1 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
A. Introducing Juniper Web Access and Juniper Full AccessThe City’s new VPN software, Juniper, provides two methods for securely accessing the City’s network: Full Access and Web Access.
Full Access is the more capable of the two options, but is only available on City-owned computers. When connected, it provides you with access to your network drives, email and other business applications. It also allows you to connect to other PCs within the City network using Remote Desktop (also known as “RDP”).
Web Access is available on City owned computers and can also be installed on personal PCs. It provides access to InWeb and Citrix applications (applicable only to some users within DPD and FAS), but is used primarily for Remote Desktop. Unlike Full Access, it does not provide access to network drives or email, though these resources are accessible via RDP.
Before Juniper can be installed on a City-owned or personal computer, you must be approved for VPN connectivity. Go to the VPN/Remote Access Services – Obtaining Service page to request VPN access.
This document provides instructions for installing and using both Full and Web Access VPNs. It divides instructions into two sections – one for City-owned PCs and the other for personal PCs.
Juniper VPN User Guide(for DoIT-supported departments)
B. VPN on a City PC1. InstallationDoIT automatically installs Juniper Full Access on your City-owned computer once you have been approved for VPN access. To expedite installation, bring your City-owned laptop to your desk and plug it into the City’s wired network connection. Installation should commence automatically. You can verify installation by looking for “Juniper Networks” in your programs list.
Note that City-owned computers will have both Juniper Web Access and Juniper Full Access VPN capability. DoIT strongly encourages you to use Juniper Full Access for VPN when using your City-owned PC.To use Juniper Full Access, follow these instructions:
1. Go to your ‘Start \ Programs’ list, select ‘Juniper Networks \ Network Connect 7.1.9’ \ Network Connect. The following diagram depicts this path. You can create a shortcut by right-clicking the icon and placing it at your desired location.
Juniper VPN User Guide Page 3 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
2. If the Sign-in Page field is blank, type in https://connect.seattle.gov/breve
3. Enter your CoS Username and Password when prompted and click “Please Sign In.”
Juniper VPN User Guide Page 4 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
4. The program will load components and verify your credentials.
5. The Network Connect icon will display in the system tray when you are connected.
6. By right-clicking on this icon and selecting “Basic View,” you will see the following window which shows your connection to the CoS network.
7. If you need access to Novell File Services, right-click the Novell icon in the system tray.
Juniper VPN User Guide Page 5 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
8. Select “Novell Login.”
9. Enter your CoS username and password when prompted and click “OK.”
10. Novell login scripts will process.
Juniper VPN User Guide Page 6 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
11. You will now have access to your file shares when you open “My Computer.”
12. To disconnect from the City network, right-click the Network Connect icon in the task bar.
13. Select “Basic View.” When the associated window appears, click “Sign Out.”
Note that the sign out process can take up to 30 seconds.
Juniper VPN User Guide Page 7 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
2. Accessing a Remote Computer Through Juniper Full AccessRemote Desktop Protocol (RDP) allows VPN users to connect to City PCs. This is useful for using specific applications and/or accessing network locations that aren’t available from outside the City’s network.Using Juniper Full Access, you can connect your City-owned laptop to the City’s network via VPN and then initiate an RDP connection to your desktop computer – assuming it is turned on – and interact with it as if it was sitting right in front of you.
The remainder of this section explains the steps necessary to use RDP on a City-owned laptop using Juniper Full Access.
1. Before initiating an RDP connection, you will have to document the identity of the target PC (the computer you are connecting to). To obtain this information, launch Tech Assist by double clicking the Tech Assist icon on the desktop of the target PC. Look for “PC Name” and “IP Address” information.
Tech Assist Icon Tech Assist Window
Juniper VPN User Guide Page 8 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
2. Write down the PC Name and IP Address in a safe but accessible place.
3. Also, document the appropriate username and password for the target computer. If you are connecting to your desktop computer, your username and password will be the same ones you use to log in every day. However, if the target PC is not your desktop computer, it may require a different username and password.
4. Leave your work computer on when you leave the office. Your work PC must remain on in order to access it from another location. There is no way to turn on your PC remotely.
5. From your City owned laptop, establish a VPN connection using Juniper Full Access. Then, go to ‘Start \ All Programs \ Accessories \ Communications \ Remote Desktop Connection’ to launch a Remote Desktop Connection.
6. This will launch a Remote Desktop Connection login window. In the Computer field, enter the PC Name or the IP Address (from step 1) of the target device to be remotely accessed. Select the “Connect” button.
Juniper VPN User Guide Page 9 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
7. The screen will show a window depicting the connection attempt.
8. When the target device’s login screen appears, enter your username and password.
You should now see the desktop of the target PC and be able to interact with icons and menus as if you were sitting at your desk.
If you have any further questions about Full Access VPN or remote connectivity, please contact your IT Help Desk.
Juniper VPN User Guide Page 10 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
C. VPN on a Personal PC1. InstallationPersonal computers must use Juniper Web Access VPN; Full Access is only available for City-owned PCs. Note that your personal PC must meet the following technical requirements before Juniper Web Access will function:
Supported operating systems (as of 2Q2012)*
Windows 7 (32-bit and 64-bit versions) Windows Vista SP1 or SP2 (32-bit and 64-bit versions) Windows XP SP2 or SP3 (32-bit and 64-bit versions)
Supported browsers (as of 2Q2012)*
Internet Explorer 7 – 9 (32 bit versions only) Firefox 3.0 and above
*If your personal PC is a Mac or Linux system, please consult the Juniper (non-Windows) user guide.
Tests were conducted on both Windows XP (32 bit) and Windows 7 (64 bit) operating systems with Internet Explorer 9 (32 bit). Although these tests were successful, your experience may vary – especially if your PC differs from these configurations. As a reminder, DoIT does not support personal PCs and it cannot test Web Access VPN for every hardware and software configuration available.
1. Once you are approved for a VPN account, open a supported Web browser and navigate to http://connect.seattle.gov/mocha.
2. Enter your City of Seattle username and password (the same combination you use to log on to your City computer) into the appropriate fields and click “Please Sign In.”
Juniper VPN User Guide(for DoIT-supported departments)
3. After a successful login, you will be presented with a page for choosing the appropriate secure gateway. Select the Department of Information Technology gateway page:
4. The Web browser now needs to install an ActiveX control on your computer. You will be presented with a pop-up box that asks to install an ActiveX control on your PC. Please click “Install.”
Depending on your computer’s operating system, you may receive an additional pop-up window asking for permission to install “JuniperSetupClient.cab.” Please click “Yes” or “Allow.”
Juniper VPN User Guide Page 12 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
Note: this installation procedure does not work correctly with the 64 bit version of Internet Explorer (available in 64 bit Windows 7 operating systems). If you use this browser, you will receive the ActiveX dialogue twice, and you will be prompted to install the software every time you access Web VPN. DoIT strongly recommends using the 32 bit version of Internet Explorer.
5. After installation, your Web browser should automatically navigate to the following page:
6. You are now connected to the City’s network via Juniper Web Access. You have access to InWeb and Citrix (only DPD and FAS use Citrix), and the ability to launch a remote desktop connection. To disconnect, click “Sign Out” in the upper right corner.
Juniper VPN User Guide Page 13 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
7. Depending on your PC and browser, when you sign out you may receive another pop-up box asking for permission to open Web content. Please click “Allow” or “Yes” if you see this window.
Windows 7/IE9 Windows XP/IE8
8. In Windows XP, this dialogue will be followed by another window asking to install software:
Please click “Run.”
You have now installed Juniper Web Access.
Juniper VPN User Guide Page 14 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
2. Accessing a Remote Computer Through Juniper Web AccessRemote Desktop Protocol (RDP) allows VPN users to connect to City PCs. This is useful for using specific applications and/or accessing network locations that aren’t available from outside the City’s network.Using Juniper Web Access, you can connect your personal laptop to the City’s network via VPN and then initiate an RDP connection to your City desktop computer – assuming it is turned on – and interact with it as if it was sitting right in front of you.
The remainder of this section explains the steps necessary to use RDP on a personal PC using Juniper Web Access.
1. Before initiating an RDP connection, you will have to document the identity of the target PC (the computer you are connecting to). To obtain this information, launch Tech Assist by double clicking the Tech Assist icon on the desktop of the target PC. Look for “PC Name” and “IP Address” information.
Tech Assist Icon Tech Assist Window
2. Write down the PC Name and IP Address in a safe but accessible place.
3. Also, document the appropriate username and password for the target computer. If you are connecting to your desktop computer, your username and password will be the same ones you use to log in every day. However, if the target PC is not your desktop computer, it may require a different username and password.
4. Leave your work computer on when you leave the office. Your work PC must remain on in order to access it from another location. There is no way to turn on your PC remotely.
5. Connect to Juniper Web Access as indicated previously.
Juniper VPN User Guide Page 15 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
6. After selecting your domain/department page, you will be presented with a screen similar to the one below. To begin a remote desktop session, enter the target PC name or its IP Address into the Terminal Sessions field and select Launch.
7. The screen will notify you of a connection attempt.
Juniper VPN User Guide Page 16 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
8. It may also prompt you to install another Juniper program. Please click “Run” if you see this web page.
Windows XP users can encounter the following pop-ups:
Please click “Yes.”
Juniper VPN User Guide Page 17 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
Please click “Always”
Your browser will then download the necessary software.
9. After installation, a full-screen window will appear showing the status of the RDP attempt.
10. After a successful connection, you will be prompted for your username and password. Once entered, you will be remotely connected to the target PC.
Juniper VPN User Guide Page 18 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
11. If you would like to make a shortcut for using RDP, click the “+” icon on the right of the “Terminal Sessions” bar.
12. This will bring up a window for entering in key RDP information
Juniper VPN User Guide Page 19 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
Juniper VPN User Guide Page 20 of 21
9/26/2012
Juniper VPN User Guide(for DoIT-supported departments)
Enter the following information:
Session Type (pre-filled with “Windows Terminal Services”) – do not change this Bookmark Name – enter a name for your RDP shortcut Description – enter a description for your RDP shortcut Host – enter the name or IP address of the target PC (from step 1) Client port – enter 3389 Server port – enter 3389 Screen Size – choose Full Screen Color Depth – the default is 8 bit, which will provide very poor image quality in exchange for faster
speeds. 32 bit will provide the best image quality, but will be slower. Start with 32 bit but move to 24, 16 or 8 bit if you find that there is too much delay in using the target PC.
13. No other settings are necessary. When you are finished, click “Add” at the bottom of the page.You can now launch a remote desktop connection by clicking on your newly-created shortcut.
If you have any further questions about the City’s VPN or remote connectivity, please contact your IT Help Desk.
