Resources

HOWTO Documents > How to set up IPSec on Windows for use on the CCIS Nomad network.

Without IPSec, a Nomad user is only allowed to connect to certain ports, such as 80 for http web access and 22 for ssh access. IPSec allows Nomad users to connect to any port (allowed by the server).

---

Step One: Download the necessary software.

You will need to download the following software:

• The Bluesocket Windows IPSec Tool. Download here.
• The CCIS IPSec Policy File. Download here.
• If you are running Windows XP Service Pack 2 you will also need a patch for the Windows Firewall. Download here.

Install the Bluesocket Windows IPSec Tool first and then install the patch from Microsoft as the patch requires you to restart your computer.

Step Two: Use the IPSec Tool to import the IPSec policy file:

Now that you have installed the IPSec Tool, the patch and restarted your computer you are ready to import the IPSec policy file that you downloaded in the previous step.

Start up the IPSec tool and you will see this icon in the windows status bar.

Right-click on the tool icon and select options.

In the options tab you should see something like this.



This is where you will import the IPSec policy file. Make sure that the boxes under Startup Settings are both checked (Auto-Assign and "Run at Startup").

Press the "Import Policy" button and you should see this.



Select the IPSec policy file and hit "Open". You will see the following warning, you should go ahead and hit the "OK" button.

Once the IPSec policy is imported and you've checked the "Auto-Assign" and "Run at Startup" boxes the last step is to assign the "CCIS Nomad" policy to the adapter (wired or wireless) that you will be using to connect to the Nomad network.

You only have one step left. Because of the way the IPSec Tool from Bluesocket is designed you'll need to enable ICMP in the Windows Firewall. From the Start menu, select Control Panels and then Windows Firewall. On the Advanced tab select Settings button in the ICMP section and then make sure that all ICMP options are set to allow.

Don't panic if this doesn't work the first time you try to set it up. There are a lot of details here that are easy to get wrong. If it doesn't work the first time, take a deep breath and go over the instructions again.