IPC-IPR-003

CoCom+

VPN Client User Guide for Windows

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Introduction

This guide serves as an introduction to the Cisco VPN client software, which is used with the COLT CoCom+ product. It provides end users with information on how to install, configure and use the client, and includes advice on troubleshooting connectivity.

The Cisco VPN Client is a simple, easy to use desktop client that allows remote users to create a secure connection (IPSec tunnel) to the corporate network via an Internet connection. It has a point-and-click interface for dialling into the VPN and supports Windows 95, 98, ME, NT, 2000 and XP.

The connection with the CoCom+ FTP servers will be raised in two steps:

1. Establish an IPSec tunnel from the VPN Client to the VPN Server in the CoCom+ environment

2. Establish an FTP session through the tunnel to the CoCom+ FTP servers

Version 0.2 Page 2 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Key Features

The Cisco VPN Client for Windows (referred to in this user guide as VPN Client) is software that runs on a Microsoft Windows based PC. The VPN Client on a remote PC, communicating with a central VPN server, creates a secure connection over the Internet. The Internet Key Exchange (IKE) and Internet Protocol Security (IPSec) tunnelling protocols are the basis of the VPN Client.

In the CoCom+ environment, the secure connection is established between the Reseller’s end device (PC) and a central router of the CoCom+ platform, which is again supported by a RADIUS server. With the help of the VPN Client software, the Reseller, connected to the Internet, can access the CoCom+ platform as if he were an on-site user.

The main features of the VPN Client can be summarised as follows:

Operating System: Windows 98, Windows NT, Windows ME, Windows 2000, Windows XP

Connection Types: Async serial PPP, Internet-attached Ethernet

Protocol: IP

Tunnel Protocol: IPSec

User Authentication: RADIUS (and others)

The VPN client allows the configuration of IPSec connections; IPSsec sessions are launched, terminated, and monitored by using the VPN client. The VPN client supports a variety of software features, e. g.:

On-line Help – Browser-based context-sensitive help

Application Launcher – Ability to launch an application or a third-party dialler from the VPN client

Automatic dialup connection – Automatic connection by way of Microsoft Dial-up Networking or any other third-party remote access dialler

Prerequisites

System RequirementsCurrently, COLT distributes release 4.0.5.C of the Cisco VPN Client. Older releases above version 3.6.x are also supported. The following system requirements should be met:

Computer with Pentium-class processor

One of the following operating systems: Microsoft Windows 98, ME, NT 4.0 (Service Pack 6), 2000, XP

Microsoft TCP/IP installed

50 MB hard disk space

RAM: 32 MB for Windows 98; 64 MB for Windows NT, ME, 2000; 128 MB for Windows XP

To install the VPN Client: CD ROM drive; Administrator privileges if installing on Windows NT or 2000

To use the VPN Client:

o Direct network connection – Cable or DSL modem and network adapter/interface card

o Internal or external modem

Configuration ParametersThe information needed to configure and use the VPN client is provided by COLT as part of the service handover package. Within the Reseller’s company, the system administrator should forward the configuration

Version 0.2 Page 3 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

details to the end users of the CoCom+ service. To create an IPSec connection with the VPN access server (or router) of the CoCom+ platform, five parameters are required:

Hostname or IP address of the VPN access server: 80.169.168.42

IPSec Group Name (for pre-shared keys): colt-wholesale.com

IPSec Group Password (for pre-shared keys): Cf. service handover package

Username (RADIUS authentication): Cf. service handover package. The username has the structure of an e-mail address <username>@colt-wholesale.com.

Password (RADIUS authentication): Cf. service handover package.

Installation InstructionsIn the following, the installation of the VPN Client through the so-called InstallShield Wizard is described. Unless instructed otherwise by the system administrator, the default values in the dialogue boxes should be accepted. Three installation steps can be distinguished:

Unzip the “vpnclient” File: The Cisco VPN Client for Windows is distributed as a ZIP file. Open the Windows Explorer and double-click the software package “vpn-client-win-is-4.0.5.C.k9.exe”. The contents of the software package are extracted to a temporary directory; by default, the directory c:\windows\TEMP is used.

Execute the “setup.exe” File: Using Windows Explorer, double-click the “setup.exe” file, and the installation of the VPN Client program will start. A welcome screen appears; click “Next”. You are now asked to accept the License Agreement; confirm by “Yes”. For each Reseller, COLT has purchased a software license so that the Reseller may use the VPN client in conjunction with the CoCom+ service. Then you are requested to specify a destination folder for the VPN Client software. If you click “Next” and confirm your entry again in next dialogue box, the VPN Client will be installed in the default folder “C:\Program Files\Cisco Systems\VPN Client”.

Starting the installation

Version 0.2 Page 4 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Choosing the installation folder

Restart the PC: The last dialogue box informs you about the successful software installation. Before using the VPN client, the PC must be reloaded. Click “Finish”, the PC will restart, and the VPN client program can be launched.

Completing the installation

Version 0.2 Page 5 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Configuration Instructions

Configuring Connection Entries

To configure the VPN client, follow the instructions below.

1. Start the VPN Client by selecting Start > Programs > Cisco Systems VPN Client > VPN Client.

The VPN Client starts and displays its main dialog box.

Version 0.2 Page 6 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

2. At the main menu, click New. The first New Connection Entry Wizard dialog box appears.

3. Enter a unique name and description (optional) for this new connection.

4. Enter Host (i.e. VPN Server IP Address), Name, Password and Confirm Password According the information in the Service Handover package received from COLT TELECOM.

5. Press Save

This will let the connection appear in the list of connections in the main window

Version 0.2 Page 7 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

6. Establish a Tunnel by double click on the connection in the list.

7. Enter Username and Password

Please use the full syntax for the Username (i.e. username@colt-wholesale.com)

8. Click OKIf everything has been entered properly all windows should automatically minimized and the session to the VPN Server is established.

Version 0.2 Page 8 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Connecting to the Remote Access VPN Server

1. This section assumes you are connected to the Internet.

2. Establish a Tunnel by double click on the connection in the list.

3. Enter Username and Password

4. Click OK.

If everything has been entered properly all windows should automatically minimized, and the session to the VPN Server is established.

Version 0.2 Page 9 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Connecting to the FTP Server

After the IPSec tunnel has been established successfully, the Reseller’s PC can reach the FTP servers of the CoCom+ platform. Any standard FTP client, e.g. the freeware program “FTPLeech”, may be used. When initiating the FTP session with the CoCom+ servers, the virtual IP address of the server cluster 10.11.49.252 should be specified. To obtain an authentication by the CoCom+ servers, the Reseller must enter the unique COLT Reseller ID and the associated password. In general, username and password for the FTP connection and for the IPSec tunnel are not identical.

Having logged in to the CoCom+ FTP servers, the Reseller is connected to a specific sub-directory. The files provided by COLT, such as CDR files or response files are available in the Reseller’s own home directory. Files within this home directory are protected from access by others in a secure environment. The directory structure is described in the “CoCom+ Reseller User Guide”.

Connecting to the FTP servers using the “LeechFTP” client; in the right part of the main window, the home-directory structure (/cdr, cli_list, err_in, etc.) is displayed.

Version 0.2 Page 10 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Troubleshooting

1. VPN Client fails to connect

Verify Internet Connectivity.Start a web browser and check if you can reach www.colt.com

Yes – check Group Name and Group Password are entered correctly. Contact your system administrator No – you must establish a connection to the Internet before using the VPN Client

2. VPN Client gets connected, but FTP session cannot be established

3. VPN Client and FTP sessions are connected, but bad performance

The Cisco Client offers some statistics that might help during troubleshooting. (If closed), open the VPN Client main window again by selecting the path:

Start > Programs > Cisco Systems VPN Client > VPN Client

Go to Status/Statistics… in the menu:

Check the statistics:

Version 0.2 Page 11 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Version 0.2 Page 12 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Uninstalling the VPN ClientTo uninstall the VPN Client, complete the following steps:

1. Select Start > Programs > Cisco Systems VPN Client > Uninstall VPN Client2. Click Yes when prompted with dialog below

3. When prompted choose whether you want to keep your existing connection profiles. Select Yes if you are upgrading to a later version of the software client.

4. Choose the Yes radio button on the dialog below to finish uninstalling and restart your computer.

Version 0.2 Page 13 of 14

IPC-IPR-003 CoCom+ VPN Client User Guide for Windows

Version 0.2 Page 14 of 14