FAQ

Kyoto University Integrated Network System (KUINS)

コンテンツ

  1. HOME
  2. FAQ
  3. Kyoto University Integrated Network System (KUINS)
  4. Connection from Off-campus

Connection from Off-campus FAQ

The causes are considered to be the following 3.

In case the IKEv2 is unavailable for the following restriction, please try OpenVPN.

  1. The restriction of router
    • First of all, please confirm the contract provider(The maker of the router you had purchased or the router provider) if IKEv2 connection or IPSec connection is available or not.
    • The name of setting item differs depending on the model however the settings of "VPN pass-through" or "VPN multi pass-through" should be "Valid" in the broad band router at home etc .(Please refer to the manuals of router.)
  2. The restriction at network environment
    • Please confirm the provider because there is a restriction in the contracted provider. 500/UDP port and ESP are used, but if the terminal has private address under NAT, 4500/UDP port are used instead of ESP.
    • Please confirm the network manager because there is a restriction in the network provided in the institute.
    • There are cases that it is unavailable in the hotel or with the public wireless LAN service.
  3. The restriction in the anti-virus software
    • Please check the manual because there is a case that the connection is restricted due to the anti-virus software.

The IPv4 settings on the terminal may be incorrect, or there may be a problem with the VPN network driver.
Please try the following solutions.

[Solution 1: Check if IPv4 in VPN settings is checked.]

  1. Open "Control Panel".
  2. On the top right corner: "view by category", select "small icons".
  3. Click "Network and Internet" and go to "Network and Sharing Center".
  4. Click "Change adopter settings".
  5. Click one of the icons which you use in the VPN connection. Then, right click and select "Properties".
  6. Select "Network" tab.
  7. Confirm that "Internet protocol Version 4(TCP/IPv4) is checked.
  8. With "Internet Protocol Version 4 (TCP / IPv4)" selected, click the "Properties" button.
  9. Confirm that "Obtain IP address automatically" and Obtain DNS server address automatically" are checked.
  10. If there is a difference in the confirmation items so far, correct it and try the VPN connection again.

* If you can fix it, you don't have to go to "Solution 2".

[Solution 2: Reinstalling network drivers for VPN]

  1. Open "Control Panel"
  2. On the top right corner: "view by category", select "small icons".
  3. Click "Device Manager".
  4. Click "Network adopters" and open it.
    * Multiple "WAN Miniport(......)" or "WAN ミニポート(......)" might be displayed.
  5. Please select the displayed ""WAN Miniport(......)" or "WAN ミニポート(......)" in order. Then, right click and delete them.
    * Sometimes, instead of delete, it says uninstall.
  6. Reboot windows and try the VPN setting again.
    * This is a standard Windows driver, so if you restart after removing it, it will be installed again.

Error message : The network connection between your computer and the VPN server could not be established because the remote server is not responding. This could be because one of the network devices (e.g, firewalls, NAT, routers, etc) between your computer and the remote server is not configured to allow VPN connections.

It seems the default state of Windows does not allow you to use IKEv2 due to the incompatibility between your network environment and IKEv2 in Windows.
There are two solutions to this problem.
(1) Use a different VPN method.
(2) Change the Windows settings.
Note! If you make a mistake in the method (2), your Windows will be broken.
We recommend method (1) unless you have knowledge of Windows that allows you to understand the details by looking at the information described below.

The following are the details of each method.

(1) Use a different VPN method
You can also use a method called OpenVPN.

(2) Change Windows settings
You may be able to connect using IKEv2 by changing the Windows registry.
This is a method that may break Windows and make it unusable.
We recommend that you only try this method if you understand the details in the reference information below.
We cannot support you if your Windows is broken.

Microsoft official information
https://support.microsoft.com/en-us/help/926179/how-to-configure-an-l2tp-ipsec-server-behind-a-nat-t-device-in-windows

There might be a problem during the installation of client certificate. Please try to reinstall client certificate with paying particular attention to the checkmarks in the 4th step of "1-3. Install Procedure" in the installation manual.

Plug-in installation is required for your browser.(2020/01/28~)

The VPN connection and proxy settings are no longer required.

Please check this infomation on Kyoto University Library websaite.
[Important: Please install now!] A Plug-in for the New e-Resources Access Authentication System Released

Inquiry: Kyoto University Library

The reason is that the name of the VPN server can't be solved.

  • In case of Windows machine, Please go to [Properties] of VPN --> [Network] tab --> [Properties] button of [Internet Protocol version4(TCP/IPv4)] then confirm if "Acquiring the DNS server address automatically" is selected.
  • There might be the case that you can connect correctly in restarting.

Please check the following points.

(1) DNS setting might not be "Automatic acquision". Please refer to the following web site and acquire the DNS server address automatically.
(2) Please confirm whether connection from your IP address is allowed. Your IP address can be viewed at http://www.iimc.kyoto-u.ac.jp/ip
(3) In case of IKEv2 on Windows machine, please go to [Properties] of VPN --> [Network] tab --> [Properties] button of [Internet Protocol version4(TCP/IPv4)] --> [Advanced...] button then confirm if "Use default gateway on remote network" and "Automatic metric" are cheked.

No support for error inquiries during VPN setup on Chromebook, but if your Chromebook is supporting Android apps, you can use OpenVPN.

  • Install OpenVPN app from Play store.
  • Download iOS/Android configuration file as "kuins.ovpn".
  • Download client certificate file and install via OpenVPN app.

You may use the default OpenVPN client by using ONC file generated from the contents of the configuration file too.

Or use iPad,Android,Windows,macOS instead of Chromebook.

No support for error inquiries during VPN setup on Linux, but you can use OpenVPN by following command.

sudo openvpn --config kuins.ovpn

  • Download Windows/macOS configuration file as "kuins.ovpn".
  • Download client certificate file as "kuins.p12" on same folder.

You may use the GUI tool by reflecting the contents of the configuration file too.

Or use Windows,macOS instead of Linux.

 

Copyright © Institute for Information Management and Communication, Kyoto University, all rights reserved.