Configuring the UIS VPN on Windows 11 device

Before you start

Before you start, you will need to know:

• your Network Access Token username and password
  – create your token on the UIS Network Access Tokens site and keep the window or tab open, in readiness for when you'll need to copy the username and password.
   
• If you have been advised to use a Managed VPN, rather than the general University VPN service, you will need the VPN server hostname.  Available VPNs and their server hostnames are listed on the Managed VPN page.
   

Setting up the VPN in Windows 11

1. Select Start > Settings to open the 'Settings' panel:

   
    

2. ...and select Network & Internet:

   
    

3. Select VPN from the list on the left. Add a VPN connection will appear – click on the + sign:

   
    

4. Click in the VPN Provider window, which should add the text Windows (built-in).
5. In the Connection name box, type Cambridge VPN.
6. To connect to the main University VPN, in the Server name or address box enter: vpn.uis.cam.ac.uk. 
   Alternatively, if you are connecting to an Institution's Managed VPN Service (not the main University VPN), you will need to enter its VPN Server hostname here instead (see the list of Managed VPN server hostnames to find this).
7. Click in the Type of sign-in info box, which should default to 'Username and password':

   

   DO NOT add the username and password at this stage, but ensure that Remember my sign-in info is ticked at the bottom of the screen.
    

8. Select Save, and this screen will disappear.
9. You should now see the 'Cambridge VPN' icon; click Change adapter settings beneath it:

   
   In Windows 11 you may not see the "Change adapter settings" option, in which case:

   • Using the Windows 11 search option, type 'Control Panel' (without the quotes)
   • Select Control Panel app from the list that appears
   • In the top right of the Control Panel window change 'View by' to 'Large icons'
   • Click on 'Network and Sharing Center'
   • Click on 'Change adapter settings' on the left hand navigation bar
10. Right-click on the 'Cambridge VPN' icon (showing as 'Disconnected'), and choose Properties:

    
     

11. Choose the Security tab, and under the heading Type of VPN, select IKEv2 from the drop down list:

    
     

12. Under the heading Data encryption, select Require encryption (disconnect if server declines).
13. Under the heading Authentication select Use Extensible Authentication Protocol (EAP).
14. Choose the Networking tab, then select Internet Protocol Version 4 (TCP/IPv4), and then click Properties.

    
     

15. Select Advanced, and then select the IP Settings tab in Advanced TCP/IP Settings box.

    
     

16. Make sure that 'Use default gateway on remote network' is checked.

    
     

17. Select OK and close the window.

Disconnecting from the VPN after use

Click the Disconnect box on the right, below the Cambridge VPN icon.
 

Still experiencing problems? 

"IKE authentication credentials are unacceptable." -- your device may be missing a root certificate from Let's Encrypt which is used to help verify the identity of the VPN server. This is normally installed automatically via Windows Update, but you can also download the certificate. Double-click it to start the import process.

If you are still experiencing problems, please note which VPN you were using, the time at which you tried to connect and your current IP address (which you can find at https://myip.uis.cam.ac.uk/) and include these details in an email to servicedesk@uis.cam.ac.uk.