Professional Documents
Culture Documents
Page 1
Introduction ................................................................................................................................3
1.1
1.2
1.3
1.3.1
1.3.2
Prerequisites .....................................................................................................................6
2.2
2.3
2.4
Congratulations ...............................................................................................................11
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.2
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
Page 2
1 Introduction
AccessMyLan from AT&T provides private (data) connectivity to your office network.
AccessMyLan from AT&T does not require dedicated hardware of any type and you will not have
to wait for the delivery of equipment or the presence of an engineer to deploy the service. The
AccessMyLan from AT&T service is self-deployed by your own IT resources.
VPN Agent a Windows service that runs on a server in your Office Network
Access Method:
o
VPN Client secure VPN is established over the Internet. Windows, Apple iOS
and Android are supported.
Page 3
the server requires network access to the hosts and subnets that you wish to provide
access to
the server will preferably be a member of your Windows domain, good candidates are:
Small Business Server, Domain Controller or Exchange Server
it does not need to be dedicated, and given its minimal foot print will probably work on
any existing server providing other services for your organization
it does not need to be a physical machine; the VPN Agent runs equally well on a virtual
machine
unless you explicitly enable audit logs, you will not need to cater for any special resource
requirement (it has a minimal memory and disk footprint)
Finally you can move the AccessMyLan from AT&T VPN Agent to another
machine later if needed.
Page 4
After you have completed the installation, you will be able to Launch Admin Site from the VPN
Agent Manager (see Figure 12: VPN Agent Manager on page 12).
AT&T uses Access Point Names (APNs) to provide specific data services. When
you connect a mobile device to the AccessMyLan from AT&T APN
vpn.accessmylan.net, you are connecting it to your Office Network.
All mobile devices provide a means of configuring and managing APNs (see Section 3 Mobile
Device Configuration on page 13).
The Windows and iOS VPN Clients uses UDP ports 500 and 4500 to establish a
UDP encapsulated IPSec connection to the AccessMyLan from AT&T service.
The Android VPN Client uses TCP port 443 to establish a TLS (SSL) connection
to the AccessMyLan from AT&T service.
Page 5
VPN Agent Installation (or subsequent removal) does NOT require a server
restart
2.1 Prerequisites
Before you start, you will need:
Page 6
Dear Customer,
A VPN account has been created for you on the AccessMyLan from AT&T service.
To complete the activation, the VPN Agent software must be installed by an IT
administrator on one of your internal Windows servers. If you are not a server administrator,
please forward this email to the relevant person.
The VPN Agent can be downloaded for installation from the following URL:
URL
https://www.accessmylan.com/consumer/install.aspx?chcode=0985
During the install you will need to enter the following administrator credentials:
Username: dave@acme.com
Password: KSJ89KP1
Login Details
We recommend that you change your VPN Administrator password after the install is
completed.
Further information on the setup process is available in our Installation Guide
(https://www.accessmylan.com/help/en/installation_0985.pdf).
If you require assistance during the installation, please email support@accessmylan.com
with Subject: "AT&T Installation Assistance", quoting your Username and FAN.
Thank You,
The AccessMyLan from AT&T Team
Page 7
If you are unsure if your Windows Server is 32-bit or 64-bit, try 32-bit first and if
this fails come back and download the 64-bit version.
Page 8
Page 9
To complete the VPN Agent installation, enter the Administration Portal Username and Password,
(see Figure 6: VPN Agent - Activation above).
Click Install.
Page 10
2.4 Congratulations
Congratulations, the VPN Agent is now installed!
In the System Tray (the bottom right corner of the Desktop) you will see this icon
appear
Page 11
Double-clicking the
The VPN Agent runs as a Windows Service in the background and will automatically maintain
connectivity to the AccessMyLan from AT&T service.
You can click the Launch Admin Site button as a quick way to login to the
Administration Portal.
AccessMyLan from AT&T is now installed and you are ready to connect your AT&T mobile
devices.
When you order APN connectivity for AccessMyLan from AT&T on a mobile line,
the mobile number will be automatically setup on your account.
When you order VPN licences for AccessMyLan from AT&T, each license
enables you to create a new user (See section 3.2.).
Page 12
3.1.1.1
3.1.1.2
Create a profile using Apples iPhone Configuration Utility and install it on your iPhone/iPad.
If you dont already have the iPhone Configuration Utility, it can be downloaded and installed from
Apples site: www.apple.com/support/iphone/enterprise.
If you are unfamiliar with the iPhone Configuration Utility, Apples online help can be found here:
http://help.apple.com/iosdeployment-ipcu/
The following instructions guide you through creating a new configuration profile named
AccessMyLan and installing it on a iPhone/iPad device.
1. Launch the iPhone Configuration Utility
2. Create a new configuration profile by clicking the New button in the toolbar
You add payloads to the profile using the payloads list. Then you edit payloads
by entering and selecting options that appear in the editing pane. Required fields
are marked with a red arrow.
3. Complete the General settings. When completing the fields you can set Name to
AccessMyLan and set Identifier to net.accessmylan.vpn.
4. Select the Advanced settings. Set the required Access Point Name (APN) field to
vpn.accessmylan.net.
Page 13
5. Install the configuration profile on your device. This can be done by connecting the device
to a USB port. After a moment, the device appears in the Devices list in the iPhone
Configuration Utility. Select the device, and then click the Configuration Profiles tab.
Select the AccessMyLan configuration profile from the list, and then click Install. On the
device, tap Install to install the profile.
Refer to Apples documentation for other methods of distributing Configuration Profiles.
Page 14
We have a lot of experience delivering M2M solutions and our experience has
taught us that our customers need one-on-one assistance from our M2M
Engineers.
So, for assistance or guidance on designing and configuring your M2M solution,
schedule a call with an AccessMyLan from AT&T M2M Engineer.
See Section 5 Getting Support (support@accessmylan.com).
Page 15
Before the software is installed you must add a user on the AccessMyLan from AT&T
administration portal. Login to the portal at
https://www.accessmylan.com/Admin/Login.aspx?chcode=0985 or by selecting Launch Admin
Site from the VPN Agent Manager (see Figure 12: VPN Agent Manager on page 12).
In this section were going to show, by example, how to add a new user and deploy a VPN client
as part of the user setup. To start, navigate to the Remote Users page by selecting Users under
the Configuration menu.
Page 16
Page 17
Page 18
For Setup Now installation instructions, follow on to the next section (section 3.2.2). For Email
User to Setup installation instructions, skip to section 3.2.3 below on page 23.
Passwords need to comply with the Remote User Password Policy. The default
policy requires that passwords contain a minimum of 6 characters from 2
character groups (letters, numbers and others). The policy can be changed in
Network > Remote User Password Policy.
Page 19
Page 20
shown).
Page 21
Page 22
Page 23
Page 24
If the checkbox Invitation Requires Password is selected, the administrator can specify
a password which the email recipient must enter before being able to access the
activation details required by the installer.
It can also be specified that the Invitation Password should be the users login
password. If the checkbox Set invitation password as login password is selected, the
user login password is the same as the invitation password, or otherwise the user will be
asked to choose a password.
Page 25
Page 26
Page 28
Page 29
Page 30
On the Add Remote User page (see Figure 13: Add User) complete each section as shown
below:
Page 31
AccessMyLan from AT&T supports Android-based and iOS (iPhone/iPad) device types. In both
cases the rest flow in the Add Mobile Client Device is the same.
Page 32
The Mobile Clients uses X.509 Certificate Base authentication deployed through a secure
enrolment, so the user doesnt need a password to bring up the VPN. The instructions to install
the OfficeVPN App, required to register and manage the mobile client, are sent to the user by
email.
The user should open this email on their Mobile Client device!
Click Continue.
Page 33
Page 34
Page 35
For the setup on an Android-based device, see Section 3.2.6 OfficeVPN for Android Installation
on Page 41.
Page 36
3 Tap INSTALL
5 Tab OK
6 Tap Install
Page 37
7 Tab Install
8 Tab Done
9 Tap Register
Page 38
13 Tap Install
Page 39
Page 40
19 Congratulations!
The iOS VPN supports Dial-on-Demand, the domains for which can be viewed in the OfficeVPN
App by tapping Auto-Dial >. The Dial-on-Demand domains can be configured on the
Administration Portal in Configuration > Network > iOS Dial-on-Demand Domains.
Page 41
Page 42
2 Tap Install
Page 43
Page 44
7 Tab Activate
Page 45
Page 46
10 Tab OK
11 Congratulations!
Page 47
To order (or cancel) lines, contact AT&T. When the order is processed, the lines will be
automatically added (or removed) to your account.
If you havent already done so, we strongly recommend that you change your
password using Administration > Change Password.
Page 48
Do you need to contact us? The Administration Portal provides real-time status
of your account, the status of your devices and your VPN Agent.
Page 49