Frequently Asked Questions (FAQs)
What are the timeouts on the VPN connection?
There is a fixed timeout of 8 hours after which your VPN connection is disconnected. There is also a non-activity timeout of 20 minutes which takes effect if no network traffic passes for 20 minutes. If you have a legitimate requirement for a VPN connection which is not subject to these timeouts, please contact account-services@slac.stanford.edu to request an exception. Your VPN will also be disconnected if your system goes to sleep. IT Department Support can assist you if you need to adjust the sleep settings of your system, they can be contacted at ithelp@slac.stanford.edu .
Can I connect to the SLAC VPN using my mobile device?
There is an app for iPhone and iPad which some users have had success with. SLAC does not provide support for the app at this time, but you are free to make your own attempts to connect using it. Search the app store for "Cisco AnyConnect Client". Within the app, select "Add VPN Connection...". Enter vpn.slac.stanford.edu as the server address, this will be replaced with a list of the VPN servers that is automatically updated each time you connect. Other mobile devices may be able to connect when Cisco releases AnyConnect Secure Mobility clients for those platforms.
I'm getting periodically disconnected while I work, and I know I wasn't idle for 20 minutes
We have received reports of some users getting disconnected when their wireless signal is not strong. Try moving to a location with a better wireless signal.
I'm using Mac OSX, can I use SLAC's VPN Service?
Yes, please follow the instructions on this page:
Connecting to SLAC's VPN Using Mac OS X
Can I Connect to SLAC's VPN with my Linux Machine?
Yes, please follow these instructions:
Connecting to SLAC's VPN Using Linux
I want to connect my Smart Phone to SLAC's VPN
For the iPhone and iPad running iOS 4.1 or later (multitasking) you need to download the free Cisco AnyConnect client. Enter the server as vpn.slac.stanford.edu. The native client is not supported.
Can I access PeopleSoft?
Yes, you can access PeopleSoft just as you would from your desk while connected to the SLAC VPN.
Can I access internal AFS servers?
Internal AFS servers should be accessible. In some cases, you will need to renew your Kerberos credentials and establish the connection with the internal AFS servers. Under Mac OS X or Linux, you can enter at the command line "kinit <username>@SLAC.STANFORD.EDU" to renew your Kerberos credentials (replace <username> with your SLAC UNIX account name, and make sure the domain is all upper-case, as shown here), folowed by the command "aklog" to connect to the AFS infrastructure. Initial access may incur a delay as the local cache is built. If you experience an inability to access AFS, please email net-admin@slac.stanford.edu and describe your problem.
Can I access the license server?
The license server may not function well over VPN. There are many failure modes, and most vendors have not upgraded to more recent flexlm versions that are more reliable, nor to support alternative license servers when one fails or needs to be restarted due to upgrades/patching/failure. Also serving a license across a VPN may be a license violation (e.g. if the licenses is limited to a site). At the moment it appears to work, however there are no guarantees.
Can I Access SLAC Computers Using Windows Terminal Services With the New VPN?
You should be able to access SLAC computers via RDP. If not please report this with details as a problem to net-admin@slac.stanford.edu .
Can I access Confluence?
You should be able to access Confluence. If not please report this with details as a problem to net-admin@slac.stanford.edu .
Is All Network Traffic Routed Through SLAC When Connected to VPN?
When connected to our VPN service, policy states that all traffic will go through SLAC. We do not use split tunneling.
After Connecting to the VPN, I Could Not Access my Local Network Resources (Such as my Printer at Home)
This is a security feature of the new VPN. Once connected to SLAC, your system is isolated from your local network for your protection. In order to do things like access a home network-shared printer, local network file shares etc., you will need to temporarily disconnect from the SLAC VPN.
After Connecting to the VPN, Can I Print Directly to the Printer in my Office
This is supported for most models of printers. If your particular printer is not accessible, please work with IT Department Support to assess the problem.
I could not ping vpn.slac.stanford.edu
You can't ping the vpn servers directly if you have established a VPN connection. You should be able to ping www.slac.stanford.edu to test your connection.