VPN Client for Macintosh by Wesley A. Fryer The text below is a public copy of a post I made to the Texas Tech VPN Project mailing list on 10 Sept 2001 (minus IP address info.) If you learn about other VPN Client solutions for Macintosh, please contact me. Updated 1-25-2002: I downloaded and installed free PGP, which includes a VPN client. I could NOT get it to make a VPN connection to TTU, however. As it is free (compared to $99 for LAN Tunnelbuilder) I would prefer to use it-- but at this point it won't work for me. Download this from: http://www.pgp.com/products/freeware/default.asp The newer build of LAN Tunnelbuilder does allow wireless / airport card VPN connections. I successfully installed a commercial VPN client for Macintosh tonight and connected to the TTU VPN. I am able to connect Outlook 2001 for Mac, and all program functions seem to be functioning normally as they would on the TTU LAN/WAN, as well as for other internet software I use. Here is my configuration: Computer: Macintosh G4 Powerbook 500 (Titanium) OS: Mac OS 9.1 OT Version: 2.7.4 ISP: Cox Communications (Toshiba cable modem) IP Addressing scheme: My home LAN is connected via a static IP configuration, I am running IPNetRouter software to share the connection with my Powerbook. The Powerbook is actually configured to use a local hard ip address and connect thru the software router program, which serves as a local firewall. This really shouldn't matter to anyone else, except it is a bit unusual that I am configured with a static ip rather than a dynamic one. VPN Client: LAN Tunnelbuilder URL: http://www.efficient.com/products/purchase.html Website that provided this link: http://www.consultdifferent.com/macvpnHTML.html The website above contains excellent configuration instructions along with download links for the LAN Tunnelbuilder 30 Day demo software. This client is listed as commercially available for $99. I have emailed the creators and inquired about educational licensing. (Special pricing is NOT available for educators/schools) After installing the sofware and restarting, I did the following things to connect to the TTU VPN: 1- Signed up online for a remote access account (http://eraider.ttu.edu) and paid via credit card for instant access (actually I had to wait about 5 minutes for the new account to be registered). 2- Opened the TCP/IP control panel, pressed command-K to bring up the configurations dialog, and made a duplicate copy of the current settings file. I named it VPN (this name really doesn't matter). 3- I changed the CONNECT VIA menu option at the top from ETHERNET BUILT IN to LAN TUNNELBUILDER. This kept the name server address setting I already had entered (xx.x.xxx.xxx), but there was not an included search domain entry. The IP, subnet, and router entries were set to be filled in dynamically. I then closed the window, saving the configuration. 4- I ran the "LAN TunnelBuilder Settings" application. IP address info was already completed (copied from TCP/IP settings) 5- I kept the PPTP VPN Protocol selected (it was already chosen). 6- I entered my 5 character eraider password beside 'VPN Username' 7- I entered my eraider password beside 'VPN Password' 8- I entered the TTU VPN IP address (xxx.xxx.x.xxx) next to 'VPN Server Address' I initially tried the vpn.ttu.edu address but was not successful, the IP address worked quickly so I used it. 9- Beside 'Encryption' I changed the selection to NONE. 10- I clicked CONNECT. After I was authenticated, I was able to run Outlook 2001 as previously mentioned and connect to the exchange server without any problems. PERFORMANCE: I did not run IPNetMonitor to gather local performance stats, but my access speed to webpages and my email clients seemed very comparable to my non-VPN setup-- I really can't tell a difference. I did run a browser based connection speed test on: http://www.solutions4sure.com//speed.asp The result showed my speed (downstream I think) to be 662.8 Kbps. Definitely adequate. This test was performed at 11:30 pm on a Monday night. TIPS: A few things I did to make this configuration setup easier to change as I move between home and work: 1- I created a new extention set in the extensions manager control panel and named it Tunnelbuilder, before I installed the Tunnelbuilder software. That way if I get a system crash and want to undo the installation, I can make the extension switch back to my previous configuration easily. 2- I created a new LOCATION in the location mananger control panel and named it VPN. After installing the software, I changed this location profile to include the different extension set and TCP/IP settings. By doing this, I can just click the location manager icon in the control strip and switch between my normal home internet configuration, this new VPN home internet configuration, and my TTU office configuration. This is one of the features I love most about the Mac OS and hated when I ran Win98 on a Thinkpad, because none of these IP changes require a restart (since the same extension set is used). 3- Without a doubt, the most amazing thing about running this VPN client (and getting a TTU LAN IP address on my computer while connected at home via my cable modem) is that I am able to access NT/Win98/95 shared volumes on computers within the College of Education here at home, just as if I was in my office. I am able to do this because of two things: 1- I am running DAVE software, which lets me connect to Windows computers on my Macintosh just as if I was using a Wintel box. This software can be downloaded from: http://www.thursby.com/products/dave.html 2- I changed the NETBIOS settings within DAVE (the control panel NETBIOS) to use WINS instead of DHCP. WINS settings for TTU are available from your department network admin. I can therefore go to the chooser and select DAVE, and connect to any of the College of Ed shared volumes, including the webserver which I maintain. Before installing VPN, my only remote access option was FTP, but that is not nearly as handy as having the volume mounted on my desktop for local access with Dreamweaver 4. Truly the power of Macintosh never ceases to amaze me! :-) CONCLUSIONS: I am glad this VPN setup was relatively easy and painless to do. All this setup work took me about 45 minutes from start to finish (not including typing up this report, however.) The key was finding a good website with client download links. Again, this link is: VPN from Your Macintosh Using OS 9 & Tunnelbuilder http://www.consultdifferent.com/macvpnHTML.html Two other worthwhile pages for Macintosh VPN issues are: Macs and Virtual Private Networks http://www.macwindows.com/VPN.html MacWindows Network Solutions http://www.macwindows.com/Network.html Submitted Monday, September 10, 2001 Tools for the TEKS home | Article Archive | Technology Workshops Mailing List | Feedback | Tools and Techniques | Technology Idea Exchange Contact me using this webform. This work is licensed under a Creative Commons License.