Versions Compared

Old Version 46

changes.mady.by.user Zhicheng Zeng

Saved on

compared with

New Version Current

changes.mady.by.user Sarah McKone

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Students living and studying in China may experience slow connections, increased latency, and inconsistent access while using Waterloo UWaterloo learning technologies from China. Waterloo UWaterloo has engaged a cloud enterprise network service from Alibaba, a company operated within China, to improve network flows in and out of China. You should see improvements when using the solution for learning technologies (e.g. LEARN, Crowdmark, Bongo), though the degree of improvement can vary depending upon your home province and your residential internet speed.

About this service

    The University of Waterloo

  • UWaterloo provides this service using the Alibaba Cloud Enterprise Network.

  • Alibaba Cloud, also known as Aliyun, is a Chinese cloud computing company, and subject to laws in China or surveillance by authorities in China

  • Alibaba Cloud's terms of service is available here

  • Use of this service is optional. You are under no obligation to use this service.

  • Alibaba Cloud doesn't hold, or have access to, any

    • University of Waterloo

  • UWaterloo records, including your

    • university userid, student id

  • 8-character username (e.g. j25rober), password, student ID number, name, and UWaterloo email address

  • The University of Waterloo cannot ensure or warrant the security of Alibaba Cloud's product and services

  • The service is meant to be

    • used 

  • used only for learning technologies in your courses  (such as LEARN, Crowdmark, PebblePad, Bongo), and only those applications are enabled through this solution. It does not lift restrictions on resources that are not generally available to you.

Info

...

...

Note
Note for

For incoming

Fall 2020

students

: Not

Not all incoming students will have access to the Alibaba cloud enterprise network solution yetimmediately. If you see "a can't find a password" error on message on this page: https://checkin.uwaterloo.ca/fetchmyvpnpassword/ it , this means that you do not have access to it yet. Information Systems & Technology will be adding all students who have selected their Fall 2020 courses soon.

If you have any questions or concerns about this, contact the IST Service Desk


On this page:

...

Accessing your login credentials

Anchor
credentials
credentials
Students registered for fall 2019, winter 2020, and spring 2020 terms may can use the following 'fetch my VPN password' tool to receive their special login ID and password, : https://checkin.uwaterloo.ca/fetchmyvpnpassword/.

How to connect on Windows 10 

Anchor
how-to-connect-on-windows-10
how-to-connect-on-windows-10

Installation

  1. Download the 'vpn-ca-cert.crt' file and save to your Downloads folder. 

  2. Go to Start menu > search for 'Windows PowerShell (x86)' and right-click and select Run as an Administrator. Enter your credentials when prompted. 


  3. Open your Downloads folder > right-click and Copy the file path of the 'vpn-ca-cert.crt' file and save for step 4. 
    Image Modified

  4. In PowerShell, copy the following four command lines and press Enter after each line.

     
    warning

    1. In line 1 of the command below, replace the

    "

    1. ~\Downloads\vpn-ca-cert.crt

    "

    1. with the file path copied from

    step

    1. Step 3 concatenated with

    "

    1. vpn-ca-cert.crt

    "

    1. .

      Code Block
      certutil –addstore -enterprise –f "Root" ~\Downloads\vpn-ca-cert.crt

Add-VpnConnection -Name "106.14.170.158" -ServerAddress "106.14.170.158" -TunnelType IKEv2 -EncryptionLevel Maximum -AuthenticationMethod EAP -RememberCredential

Set-VpnConnectionIPsecConfiguration -ConnectionName "106.14.170.158" -AuthenticationTransformConstants GCMAES256 -CipherTransformConstants GCMAES256 -EncryptionMethod GCMAES256 -IntegrityCheckMethod SHA384 -DHGroup ECP384 -PfsGroup ECP384 -Force

Set-VpnConnectionProxy -Name "106.14.170.158" -AutoConfigurationScript "http://192.168.210.108/example.pac"

  5. WarningtitleWarning

    Make sure your PowerShell outputs are the following before proceeding to the next section:

    Image Added

Warning

If you received any error messages through the course of the installation process, you should always delete and clear the results of those commands.

Please see Common errors for the Alibaba cloud enterprise network solution

...

How to connect

  1. Go to Start menu > search for

    '

    VPN

    '

    and click on VPN settings. 

    Image Removed Image Added



  2. Select the 106.14.170.158 network and click Connect.

    Image RemovedImage Added

  3. Enter the special VPN username and password provided. You will now be connected to the VPN. Do not enter your normal

    University of Waterloo username

    8-character username (e.g. j25rober) and password. 
    Image Modified

    InfotitleWarning

Note

If you received an error message when connecting, please see Common errors for the Alibaba cloud enterprise network solution

...

How to connect on MacOS

Anchor
how-to-connect-on-macos
how-to-connect-on-macos

Installation

  1. Download the

    '

    vpn-ios-or-mac.mobileconfig

    '

    file onto your device. Click the file to open. 

    InfoPlease see 


    If you are having issues downloading the file, please see Common errors for the Alibaba cloud enterprise network solution

     if you are having issues download the file

  2. Click Continue in the pop-up windows. 

    Image Removed Image Added

  3. Enter the username and password, not your UWaterloo credentials. Click Install. 

    Image RemovedImage Added

  4. If prompted, enter your computer username and password to allow for changes to be made. The profile will then be added. 

    Image Removed Image Added

    Image Removed


    Image Added

How to connect

  1. To the Apple menu > System Preferences. 

    Image Removed Image Added

  2. Click and open Network. 

    Image Removed Image Added

  3. Select the connection named

    '

    106.14.170.158

    '

    and click Connect. You will now be connected to the VPN. 

    Image Removed Image Added

    Image Removed


    Image Added


...

How to connect on Ubuntu 

Info

This guide will only work if the APT package manager is available on your system (eg. Ubuntu or another Debian based distribution). For other distributions of Linux, contact helpdesk@uwaterloo.ca for support. 

Installation

  1. Download the 'vpn-ubuntu-client.sh' and 'vpn-ca-cert.crt' files and save them in the same directory. In this guide, they've been saved

    to ~

    to ~/Documents/VPN/. 

  2. Navigate to the directory where you downloaded the files.

    1. In your file manager, go to that directory, right-click on the background (not the files) and choose Open in Terminal.

      Image RemovedImage Added


  3. Check for updates to your programs with:

    Code Block
    sudo apt update

    You will be prompted for your computer password. Type it in and press Enter. This will run for a few minutes. 

  4. Change the permissions of the shell script (.sh file) using:

    Code Block
    languagebash
    chmod +x vpn-ubuntu-client.sh

  5. Run the shell script as root using:

    Code Block
    languagebash
    sudo ./vpn-ubuntu-client.sh

    1. Enter your VPN username. 

    2. Enter your VPN password.  

  6. Your computer will now install strongSwan and some dependencies. This may take several minutes. Once you see the text as below, you have successfully installed the VPN client.

    Code Block
    To disconnect: ipsec down ikev2vpn
To resconnect: ipsec up ikev2vpn
To connect automatically: change auto=add to auto=start in /etc/ipsec.conf

  7. Restart your computer. 

How to connect

  1. Open a new Terminal window.

  2. Run: 

    Code Block
    languagebash
    sudo ipsec up ikev2vpn

    Enter your computer password. You will now be connected to the VPN. 

Warning

...

Connection Failure

If you are experiencing failure when connecting to VPN on ubuntu, you will also need to run the

...

code shown below.

This will install resolvconf and you will be able to connect. Remember to reboot before you connect again.

Code Block
sudo apt install resolveconf

Info

For more ubuntu VPN connection troubleshooting, see https://github.com/trailofbits/algo/issues/805

...

How to connect on iOS

Installation

  1. Download the 'vpn-ios-or-mac.mobileconfig' file onto your device. Click the file. A pop-up will appear asking you to review the profile in your device Settings. 

    Image Removed Image Added

  2. Go to the Settings app > General > scroll down and click on Profile. Click on the downloaded profile,

    '

    IKEv2 VPN configuration

    '.

     

    Image Removed Image Added



  3. Click Install. Enter your passcode if prompted.

    Image Removed Image Added



  4. On the Warning screen, click Install. 

    Image Added

    Image Removed

       

    Image Removed

    Image Added

  5. Enter the username and click Next. 

    Image Removed Image Added

  6. Enter the password and click Next. 

    Image Removed Image Added


  7. The profile is now installed. Click Done. 

How to connect

  1. Go to the Settings app > General > scroll down and click on VPN. 

    Image Removed Image Added


  2. Make sure '106.14.170.158' is selected from the VPN list and switch the Status toggle from Not Connected > Connected. You will now be connected to the VPN. 

    Image Removed Image Added

    Image Removed



    Image Added


...

How to connect on Android

Installation

  1. Download the 'vpn-ca-cert.crt' and 'vpn-android-profile.sswan' files onto your device.

  2. Install the latest strongSwan VPN client app from the Google Play Store. 

    Image Removed Image Added

  3. Open the strongSwan app. Click on the ellipses > select CA Certificates. 

    Image RemovedImage Added

     

    Image Removed

    Image Added


  4. Click on the ellipses again > select Import certificate. 

    Image Added

    Image Removed

     

    Image Removed

    Image Added

  5. Locate and select 'vpn-ca-cert.crt' from the File Browser. Select Import Certificate. 

    Image Removed Image Removed Image Removed Image Added

     

    Image Added

     

    Image Added


  6. In the strongSwan app homepage, click on the ellipses > Import VPN profile. 

    Image Added

    Image Removed

     

    Image Removed

    Image Added


  7. Locate and select 'vpn-android-profile.sswan'. Enter the username and password. Click Import. 

    Image Added

    Image Removed

     

    Image Removed

    Image Added



  8. Go to the Settings app > Network & Internet > Wi-Fi > select the gear icon beside your connected Wi-Fi network > click the pencil icon on the top-right. 

  9. In the pop-up window, scroll down to Proxy. From the drop-down menu, select Proxy Auto-Config.  

  10. In the PAC URL field, enter 'https://pac-bucket.oss-cn-shanghai.aliyuncs.com/vpn-android.pac'. Click Save. 

How to connect

  1. Open the strongSwan app. Select the '106.14.170.158' network to connect. You will now be connected to the VPN. 

    Image Removed Image RemovedImage AddedImage Added

...

Filter by label (Content by label)
showLabelsfalse
max5
spacesISTKB
sortmodified
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ( "learn" , "vpn" , "china" , "waterloo" ) and type = "page" and space = "ISTKB"
labelswaterloo learn vpn china

...

hiddentrue

Info

...

...

Need

...

help?

Contact the IST Service Desk

...

online or 519-888-4567 ext. 44357.

Tip

Article feedback

If you’d like to share any feedback about this article, please let us know.