Install the SSL VPN

一、Service description
二、The service object
三、Precautions for using SSL VPN
四、Connect software download and installation
五、Instructions for Connecting software
六、How to avoid automatic startup of the connection program

---

一、Service Description：

(1)The SSL VPN connection service allows users of National Taipei University to connect back to the campus network and obtain the campus IP address in a non-National Taipei University network.

(2)Through SSL VPN connection, users can access the information services provided by National Taipei University, such as library e-journal downloading, campus copyright software downloading.. And so on.

 

---

二、The service object：

Faculty, students and staff of National Taipei University

 

---

三、Precautions for using SSL VPN：

According to the regulations of the Ministry of Education for the use of campus Networks, it is forbidden to lend, use or embezzling other people's accounts.

The Computer Center periodically checks SSL VPN usage records. In case of abnormal usage, VPN account and email permissions will be suspended.

 

---

四、Please select the system platform you are using and download and install the software：

System platform	software
Windows	Win_32-bit、Win_64-bit
Mac OS X	DMG installation file
Linux	CentOS/RHEL platforms Linux (32 bit、64 bit) Ubuntu/Debian Linux(32 bit、64 bit)
Android	Android installation file
iOS	iOS installation file

 

---

五、Installation and use instructions (take the Windows system platform as an example)：

※Instruction for Windows operating system

SSL VPN Connection modes of all Windows versions (The first mode is recommended)

(1)Client program mode: Select32-bit or 64-bit下program according to the system type, download and install the client programe，(steps)。

(1)How to determine whether the system is 32-bit or 64-bit ?（steps）

(2)Web Connection mode: Use Internet Explorer or Firefox Web browser to establish a connection (do not use Edge browser)(steps)

※Pulse Secure client program installation and setup steps

(1)After downloading the 32-bit or 64-bit program and executing the file directly, the Pulse Secure program will be installed

(2)After the installation is complete, locate Pulse Secure under All Programs and click Enable.

(3)Press "+" in the upper right corner to add a connection.

(4)Enter information in the Name and server fields.

(5)After the input is complete, press "Add" to record the connection setting, and  press "Connect" directly.

※How to judge whether the system is 32-bit or 64-bit?

(1)Right-click on "Computer" and select "Content".

(2)In the Basic System information, "System Type" will indicate "32-bit Operating System" or "64-bit operating system".

※On Windows, perform the following steps to connect the SSL VPN using Internet

Explorer:

(1) Open IE/Firefox/Chrome(do not use Edge browser) and enter https://ntpu.twaren.net at the above URL. The following login screen will appear:

(2) Enter your email account (excluding @mail.ntpu.edu.tw or @webmail.ntpu.edu.tw) and password In the login screen and press the "Sign In" button.

(3) After the authentication, the program will be downloaded and installed for the first connection. Please allow this operation later. The waiting screen is as follows:

(4) After the connection is successful, the browser will display the following screen:

(5) To confirm the connection status, click the white S and green arrow icon in the lower right corner of the screen to start PulseSecure program:

(6) Right-click on the S icon, choose "Enable PulseSecure", choose "File" => "Connection" => "Advanced Connection Details" to view the connection details:

(7) To disconnect the connection, click the "Disconnect" button in the figure above.

 

---

六、How to avoid automatic startup of the connection program：

Once installed, the Pulse Secure connection program will become the preset startup program for system startup, which will be automatically executed every time you restart the system. If you do not want this connection to be automatically executed every time you reboot, you can disable this service on your computer. The following uses Windows 7 and Windows 10 as examples.

1. Windows 7 environment

Enter msconfig in the search field, select msconfig.exe, locate Pulse Secure in the "Start" TAB in the System Settings window, uncheck and apply, then restart to complete the Settings.

2. Windows 10 environment

In the lower part of the desktop, right-click in the work column to enable "Job Administrator", click the "Enable" TAB in the "Job Administrator" window, right-click in the Pulse Secure User Interface and choose "Disable".

---

 

 

 

1. Confirm the IP content that the mesh should set
(1), check the information exit number on the mesh

(2) Check the IP table to find out the corresponding IP content
IP table query: http://sysadm.ntpu.edu.tw/iptables/iptable.html

2. IP setting steps
(1), Windows operating system environment
1. Right-click on the small computer at the bottom right of the computer screen

2. Select "Network and Sharing Center"

3. Select "Change Interface Card Settings"

4. Click on "LAN" and right click on "Content"

5. Select "Internet Protocol Version 4 (TCP/IPv4)" and click "Content"

6. Fill in the assigned "IP Address", "Subnet Mask", "Default Gateway", "DNS Server" according to the information found in the IP allocation table in the red marked part of the following window. After that, click "OK" to complete the setting

(2), Mac OS X setting network
1. Click Apple -> System Preferences in the upper left corner

2. Click "Network" in "System Preferences"

3. Click the "Ethernet" setting and change it to "Manual"

4. According to the information found in the IP allocation table, fill in the assigned "IP Address", "Subnet Mask", "Default Gateway" = "Router", "DNS Server", and press "Apply" to complete the setting

 

(一) signal source description

The description of the SSID of the wireless network signal on the campus of Taipei University is as follows:
(1), NTPU: general website login on campus
(2), NTPU_5G: general website login on campus
(3), NTPU-int: Login to the International Conference Hall of Business Studies on campus
(4) TANetRoaming: domestic inter-school roaming, web login
(5), NTPU-802.1x: On-campus account login, encrypted connection
(6) Eduroam: international roaming, encrypted connection

Among them, Eduroam is a plan to establish a wireless local area network roaming system among international educational and scientific research institutions, which is intended to promote the sharing of wireless local area network services among global education and scientific research institutions. For details, please refer to: eduroam roaming information.
Note: SSID is the abbreviation of Service Set Identifier. Public wireless network base stations will set more than one SSID name for user identification.

(二)signal coverage description

(1), Taipei Minsheng Campus
1. Teaching Building: Part B1 covers the whole area from the 1st floor to the 5th floor.
2. Information Building: Fully covered.
3. Gym: fully covered.
(2), Taipei Jianguo Campus
1. Ziqiang Building: The open classrooms on the 1st floor are completely covered.
2. Zhuangjing Building: The open classrooms on the 1st floor are completely covered.
3. Social Science Museum: The second floor is fully covered.
(3) Three Gorges Campus
1. Humanities Building: B1 to 4th floor open classrooms, 1st floor conference hall and 5th to 8th floors are fully covered.
2. Business building: B1 store, community area and open classrooms, open classrooms and conference rooms from the 1st to the 3rd floor and the 5th floor are fully covered.
3. Administration Building: Fully covered.
4. Social Science Building: Fully covered.
5. Law Building: Fully covered.
6. Public Affairs Building: Fully covered.
7. Graphics Building: Fully covered.
8. Sports venues: Some areas from Floor B1 to Floor 1 are covered.
9. Chong Yue Pavilion: fully covered.
10. Comprehensive gymnasium and activity center: fully covered.
11. Rhythm Motor Information Building: fully covered.
12. Wood Art Classroom: Fully covered.

(三) Login Account Description

(1), the school staff and students
1. "Faculty and Staff": Please use the "Faculty and Staff Email Account Password" to log in.
2. "Students, alumni who have applied for an alumni card": Please use the "student email account password" to log in. (Example: s410012565)
(2) Outsiders
To become a member of the "Inter-School Roaming Program", please log in with the "full account and password of the original unit". (Example: abc@XXX.edu.tw, abc is the account number, XXX is the original unit information)

 

(四) Login Method Description

(1) use browser method(web) to log in

1. Taipei Minsheng and Jianguo Campus (SSID:NTPU and TANetRoaming):
After searching for NTPU and TANetRoaming base station and connecting, the web page will be automatically opened and the authentication screen will appear (as shown in Figure 1). html.


2. Sanxia Campus (SSID: NTPU, NTPU_5G)
After searching for SSID: NTPU or NTPU_5G and connecting, the authentication screen will appear when the webpage is automatically opened (as shown in Figure 2); if the browser is not automatically opened, please open the browser manually and enter the URL: https://1.1.1.1/fs/ customwebauth/login.html ..

3. Sanxia Campus (SSID: TANetRoaming)
Search for SSID: TANetRoaming and connect, and the authentication screen will appear when the webpage is automatically opened (as shown in Figure 3). If the browser is not automatically opened, please open the browser manually and enter the URL: https://1.1.1.1/fs/customwebauth/ login_tanet.html .

4.International Conference Hall, Business Building, Sanxia Campus (SSID:NTPU-int)

After searching for the NTPU-int base station and connecting to it, the webpage will be automatically opened and the authentication screen will appear (as shown in Figure 4).

(2) use 802.1x authentication to log in

Currently, only the map building area of ​​Sanxia Campus and the teaching building area of ​​Taipei Campus are open for use
Use NTPU-802.1x or eduroam base station to encrypt the connection, according to the use of different devices, the instructions are as follows:
※Note: Do not use other people's computers or handheld devices to log in to your own account and password.

 

1. Instructions for connecting the NTPU-802.1x to the Android system
(1). Open "Settings" -> enable Wi-Fi and click NTPU-802.1x


(2). Select "PEAP" for "EPA Method"

(3). Enter the school email account and password
For student status, please enter student email account and password; for faculty and staff, please enter faculty email account and password
Example: s10012345 (student email account), abc (faculty and staff email account)

(4). The status of NTPU-802.1x is displayed as connected, indicating that the connection is successful, and you can connect to the Internet.

2. Instructions for connecting the NTPU-802.1x to the iOS system
(1). Open "Settings" -> enable Wi-Fi and click NTPU-802.1x

(2). Enter our school email account and password
For student status, please enter student email account and password; for faculty and staff, please enter faculty email account and password
Example: s10012345 (student email account), abc (faculty and staff email account)

(3). The certificate message appears, click Trust.

(4). After completing the authentication, you can connect to the Internet.

3. Operating instructions for connecting NTPU-802.1x to Windows 7 and 8 systems
(1). The user must first check the version and bit size of the computer
Step 1. Console → System and Security → System
Step 2. Check the Windows version and system type as 32-bit operating system or 64-bit operating system
(2). Download the EAP-GTC installation file

Operating System	32 bit	64 bit
Windows 7	EAP-GTC-x86-Win7	EAP-GTC-x64-Win7
Windows 8	EAP-GTC-x86-Win8	EAP-GTC-x64-Win8
Windows 10	EAP-GTC-x86-Win10	EAP-GTC-x64-Win10

 

(3). Install the EAP-GTC installation file
The following takes Windows 7, 32-bit operating system environment as an example.
Step 1. Download and install "EAP-GTC-x86-Win7".

Step 2. After the installation file is executed, this screen appears, click "Next".

Step 3. Select "I accept the terms in the license agreement", and then click "Next".

Step 4. Select "Complete" and click "Next".

Step 5. Click "Install".

Step 6. The installation is successful, click "Finish".

Step 7. Select "Yes" and wait for the reboot to complete.



(4). Setting the wireless base station
Step 1. Go to "Control Panel" → "Network and Internet" → "Network and Sharing Center", and click "Manage Wireless Networks".

Step 2. Click "Add".

Step 3. Select "Manually create network profile".

Step 4. Enter "NTPU-802.1x" for the network name, "WPA2-Enterprise" for the security type, "AES" for the encryption type, and finally

Step 5. A successful addition of the "NTPU-802.1x" screen , click "Change Connection Settings".

Step 6. Click on "Security" and click on "Settings".


Step VII. Do not check "Confirm Server Credentials". Select the authentication method EAP-Token and press "OK".

Step 8. Select "OK" and "Close" according to the following screen.

Step IX. In "Management Use (Wireless Network Connection)" In the Wireless Network window, you will find an additional "NTPU-802.1x" wireless base station name.


(5). Connection Test
Step 1. Click the wireless network icon in the lower right corner of the desktop, select "NTPU-802.1x", and press Connect.

Step 2. The following login screen will appear, please enter your school email account and Password, Logon domain No need to enter, click OK, you can go online.
Student email account → s+ student number (no need to enter "@webmail.ntpu.edu.tw")
Staff → Account (no need to enter @mail.ntpu.edu.tw))

4. Instructions for connecting NTPU-802.1x to Windows 10
(1). The user must first check the version and bit size of the computer
Step 1. Console → System and Security → System
Step 2. Check the Windows version and system type as 32-bit operating system or 64-bit operating system
(2). Download the EAP-GTC installation file

Operating System	32 bit	64 bit
Windows 7	EAP-GTC-x86-Win7	EAP-GTC-x64-Win7
Windows 8	EAP-GTC-x86-Win8	EAP-GTC-x64-Win8
Windows 10	EAP-GTC-x86-Win10	EAP-GTC-x64-Win10

 

(3). Install the EAP-GTC installation file
The following takes Windows 10, 64-bit operating system environment as an example.
Step 1. Download the EAP-GTC installation file (64-bit), and execute the file to install.
Step 2. After the installation file is executed, this screen appears, click "Next".

Step 3. Select "I accept the terms in the license agreement", and then click "Next".

Step 4. Select "Complete" and click "Next".

Step 5. Click "Install".

Step 6. The installation is successful, click "Finish".

Step 7. Select "Yes" and wait for the reboot to complete.



(4). Setting the wireless base station
Step 1. Click "Start" in the lower left corner of the computer desktop → select "Settings".

Step 2. Click "Network and Internet".

Step 3. Click "Status" → select "Network and Sharing Center".

Step 4. Click "Set up a new connection or network".

Step 5. Click "Manually connect to a wireless network".

Step 6. Please enter "NTPU-802.1x" for the network name, "WPA2-Enterprise" for the security type, and finally click "Next".



Step 7. Click "Change Connection Settings".

Step 8. Click the "Security" menu, and then click "Settings"

Step 9. Do not check "Verify server identity by verifying certificate", select "EAP-Token" as the authentication method, and then click "OK".

Step 10. Select “OK” and “Close” according to the following screen.

(5). Connection test
Step 1. Continue the above steps, the following login screen will appear at this time, please enter the school's email account and password, Logon domain does not need to be entered, click OK to access the Internet.
Student email account → s+student number (do not need to enter "@webmail.ntpu.edu.tw")
Faculty → Account (do not need to enter "@mail.ntpu.edu.tw")

Step 2. Click the wireless network icon at the bottom left of the operating system desktop, and the wireless base station name will appear as NTPU-802.1x. Then click "Connect" to complete the connection setting.

5. Instructions for removing NTPU-802.1x from Windows system
The following takes Windows 10, 64-bit operating system environment as an example.
(1). Click "Start" in the lower left corner of the computer system desktop, and then click "Settings".

(2). Click "Network and Internet".

(3). Click "wi-fi" → "Manage Known Networks".

(4). Click "NTPU-802.1x", then click "Delete" to remove the setting.

(3)use eduroam base station to encrypt the connection description

1. How to use eduroam on Android
Step 1. Open Settings→Turn on Wi-Fi and click eduroam

Step 2. EPA Method Selection PEAP

Step 3. Enter our school email account and password
Student Email Account → Account@webmail.ntpu.edu.tw
Faculty → Account@mail.ntpu.edu.tw
Step 4. Connected is displayed at the bottom of Eduroam, indicating that the connection is successful and you can access the Internet

2. How to use eduroam on IOS
Step 1. Open Settings→Turn on Wi-Fi and click eduroam

Step 2. Enter our school email account and password
Student Email Account → Account@webmail.ntpu.edu.tw
Faculty → Account@mail.ntpu.edu.tw

Step 3. The certificate message appears, click Trust

Step 4. After completing the authentication, you can go online

 

3. Instructions for connecting eduroam to Windows system
(1). The user must first check the version and bit size of the computer
Step 1. Console → System and Security → System
Step 2. Check the Windows version and system type as 32-bit operating system or 64-bit operating system
(2). Download the EAP-GTC installation file

Operating System	32 bit	64 bit
Windows 7	EAP-GTC-x86-Win7	EAP-GTC-x64-Win7
Windows 8	EAP-GTC-x86-Win8	EAP-GTC-x64-Win8
Windows 10	EAP-GTC-x86-Win10	EAP-GTC-x64-Win10

 

(3). Install the EAP-GTC installation file
The following takes Windows 7, 32-bit operating system environment as an example.
Step 1. Download and install "EAP-GTC-x86-Win7".



Step 2. After the installation file is executed, this screen appears, click "Next".

Step 3. Select "I accept the terms in the license agreement", and then click "Next".

Step 4. Select "Complete" and click "Next".

Step 5. Click "Install".

Step 6. When the installation is successful, click "Finish".

Step 7. Select "Yes" and wait until the reboot is complete.

(4). Setting the wireless base station
Step 1. Go to "Control Panel" → "Network and Internet" → "Network and Sharing Center", and click "Manage Wireless Networks".

Step 2. Click "Add".

Step 3. Select "Manually create network profile".

Step 4. Enter "eduroam" for the network name, "WPA2-Enterprise" for the security type, "AES" for the encryption type, and finally click "Next".

Step 5. The “eduroam” successfully added screen appears, click “Change Connection Settings”.

Step 6. Click on "Security" and click on " set up".

Step 7. Do not check "Confirm Server Credentials" and select the authentication method EAP. -Token, then press "OK".

Step 8. Select "OK" and "Close" according to the following screen.

Step IX. "Manage the wireless network using (wireless network connection)" In the window, you will find an additional wireless base station name for "eduroam".

(5). Connection test
Step 3. Click on the desktop right In the lower corner wireless network icon, select "eduroam" and press Connect.

Step 4. The following login screen will appear, please enter your school email account and Password, Logon domain No need to enter, click OK, you can go online.
Student email account → s+ student number (no need to enter "@webmail.ntpu.edu.tw")
Staff → Account (no need to enter @mail.ntpu.edu.tw)) p>

5. Off-campus roaming method

(1), domestic
If you find the TANetRoaming signal from our school, staff and students, you can use our school's email account and password to roam online. However, the full name of the account should be entered, for example: s10012345@webmail.ntpu.edu.tw, or abc@mail.ntpu.edu.tw.
(2), abroad
If the faculty, staff and students of our school go to foreign units, if they find the eduroam signal, they can use the school's email account and password to roam online. However, the full name of the account should be entered, for example: s10012345@webmail.ntpu.edu.tw, or abc@mail.ntpu.edu.tw.
※Information security reminder: Since the name of the SSID base station can be set freely, in order to avoid the account password being stolen, please confirm that the source of the SSID is reliable, and use it with caution to prevent the account password from being leaked.

(六) Frequently Asked Questions
(1), Unable to connect
1. Make sure the wireless network card is not turned off

2. Please make sure that the wireless network card is not set with a fixed IP address.
(1). Click the path: Control Panel -> Network and Internet -> Network and Sharing Center -> Change Interface Card Settings.

(2). Click "Wi-Fi Wireless Network Card", right-click the icon, and then click "Content".

(3). Make sure that the wireless network card is not set with a fixed IP address.

(2) The method of clearing the wireless network password record in Windows. (The following uses Windows10 as an example)
1. Click "Network Settings" in wifi

2. Click "Wi-Fi", then click "Manage Known Networks"

3. After selecting the SSID to delete the record, select Delete to complete

7. Contact us for wireless network problems：

Contact Number:

(02)8674-1111(extension 68221)(Sanxia Campus)
(02)2502-4654(extension 18096)(Taipei Campus)

How to use and set up wireless network on campus

Wireless network signal name (SSID): NTPU
Use account password: school email account and password
For the wireless network login setting method and operation instructions, please refer to the school wireless network usage method.

1.I can not use the Internet service, because the computer network card is blocked.
When the user has the following abnormal network usage behavior, such as:
(1)Abnormal traffic.
(2)Computer poisoning. (for example, virus packets are sent, port or IP scanning behavior, network traffic is too high... etc.)
(3)The Ministry of Education or other units have notified the discovery of abnormal conditions.
(4)Unauthorized use of another's IP address.
If the above situation is verified to be true, the network card(MAC address) will be blocked, and the department to which the offending IP belongs will be notified by email for assistance.

Note:
(a)NTPU Regulations Governing Internet Usage：
https://www.ntpu.edu.tw/chinese/laws/law_more.php?dep=27&id=77
(b)NTPU Regulations Governing Network Traffic Management：
http://www.ntpu.edu.tw/laws/law_more.php?dep=27&id=1028

2.How to unlock the network card?
(1)Abnormal traffic.
Please confirm the cause of abnormal traffic. If you do not know the cause, conduct anti-virus operations first.
(2)Computer poisoning.
Please scan for viruses or reinstall and update your operating system.
(3)The Ministry of Education or other units have notified the discovery of abnormal conditions.
Resolve violations based on reports of exceptions.
(4)Unauthorized use of another's IP address.
Please set the correct IP address.
The table of IP address is http://sysadm.ntpu.edu.tw/iptables/iptable.html
After completing the processing of the above status, please call the Computer Center System Section (ext. 68222) to apply for unblocking.