University of Melbourne VPN Service

Welcome to the University of Melbourne Virtual Private Network Service Site. The UoM VPN Service is designed to allow University Staff and Students the ability to securely "tunnel" into campus from outside networks, such as the Internet, and then access services (such as unimelb only shared servers) as if they were on campus. It is also ideal for use on the UNIWIRELESS network as well. The only two things you need to begin are the software, which is available on this site, and a valid central email account. Being a shared infrastructure, the Internet is inherently unsafe for the transport of sensitive corporate data. Critical applications such as administrative systems and other IT services can only be made available through adequate safeguards that protect them from being hacked. The VPN system being implemented will provide a platform for remote users and local wireless LAN users to access the University's network resources with a high level of security through 3DES encrypted tunnels. Text and other content goes here.

About VPN

A Virtual Private Network (VPN) is a network that uses encryption and other security mechanisms to ensure that only authorized users can access the network and that data cannot be intercepted or modified. When you authenticate with the VPN server, your computer is assigned a second IP network address from the 128.250.0.0 network. Once you have this second IP address, it is as if you are using the network from a machine on campus (rather than coming in from a commercial ISP network). After connecting to the VPN service, you can access UoM web services and applications that require a 128.250 IP address. VPNs are “virtual” in the sense that individuals can use the public Internet as a means of securely accessing the campus network. Once the VPN connection is established, users have access to the same network resources, addresses, and so forth as if they were attached locally. VPNs are “private” because the data is encrypted between the client computer and the VPN server. Encryption makes it very difficult for anyone to intercept packets and capture sensitive data such as passwords. There are currently two services available. They are:

1. A general purpose Staff Service
2. A general purpose Student Service

They are both restricted to campus access only and to access the services requires a valid central email username/password.

It is possible to setup additional department specific services. In this configuration users are assigned an IP number from the deparmtent's subnet range rather than the central generic ones. All that is required is a RADIUS server in the department to authenticate users and IP addresses in the departmental IP subnets for the client pool addresses. For more information send an email to netquery@unimelb.edu.au.

The following benefits are provided to UoM VPN customers:

• Remote "POP" email access
• Download McAfee VirusScan and other software products available from the “unimelb-only” anonymous ftp access area.
• Connect to any UoM service more securely.
• Accessing restricted library resources
  

Remote "POP" email access

Some students and staff like to check and download their e-mail (via "POP") directly to their computer when they are off campus. This type of access would be required in order to use email clients such as Eudora or Outlook. Since this type of email access is restricted to the campus, you need VPN in order to do this off campus.

Note that you can use WebMail to access your account from off campus. WebMail does not require VPN and is the preferred method for off-campus access.

Accessing restricted library resources

Some portions of the University library are restricted to staff and students. In order for you to access these restricted areas from off campus, you need to use VPN. These areas include Articles/Journals/Newspapers, Electronic Journals, and Course Resources/Reserves

Slower connection speed with VPN

Users utilizing this secure service on a 56kbps or slower modem may experience a very slow connection. This is because any secure connection adds more data when communicating. Customers with high-speed Internet access will also have a slower connection with file downloads taking from 10 to 20% longer. For this reason, customers who have a specific use for the VPN service should close the program before surfing the Internet or other activities that do not require a secure connection.

VPN at home

Customers may start their VPN client from home once they have connected to their Internet Service Provider. This will create a secure "tunnel," or separate connection, between your computer and UoM, providing better security.

Unsupported platforms

Mac OS 7-9, Windows CE and PalmOS currently do not have a VPN client supported by the Information Division.