Blue Ridge VPN (tm) Client Release Notes
Release Notes Updated 10/3/2006
The Blue Ridge VPN (tm) Client release notes include
information you will need before installing or using the
product. Individuals responsible for installing and running
the Blue Ridge VPN Clients should read
these release notes.
There are different versions of Client software for
Windows 98/ME, Windows NT 4.0, Windows 2000 and XP.
Contact Blue Ridge Networks for a separate installation CD that
contains the Client software for Windows 98/ME and Windows NT 4.0
Important: The Blue Ridge VPN Client contains
technology that has restrictions when exporting the product
outside of the U.S. and Canada. Please refer to the "Export
Restrictions" section at the end of this document. The
Windows 2000/XP version is only available with DPF1.
_________________________________________________________________
_________________________________________________________________
Release Note Contents
- Overview
- System Requirements
- Contents of Blue Ridge VPN Client Software
- Release History
- Setup of the Network Interface
- Installing the Blue Ridge VPN Client Software
- Running the Client Software
- Running the Client Utilities
- Running IPX/SPX over the Client Tunnel
- Troubleshooting
- Uninstalling the Blue Ridge VPN Client
- Uninstalling the Skyline Alpha Client
- Known Anomalies with this Version
- Export Restrictions
- Referenced Trademarks and Products
- Trouble Report Form
- Blue Ridge Networks, Inc. Contact Information
________________________________________________________________
________________________________________________________________
________________________________________________________________
Overview
The Blue Ridge VPN Client is a Windows
application that securely connects a remote user to a
private or Home Network across public IP networks such as the
Internet. The remote user may connect over any IP-capable
medium including PPP dial-up, Ethernet, Token Ring, ISDN, xDSL,
ATM, and cellular modems. Once connected, the Client can
access network resources as if the workstation was physically
located on the Home Network. Supported client applications
include those using TCP/IP and NetBEUI protocols. IPX protocol
is not supported, but it is supported in the Windows 95/98, ME
and NT versions of the client software.
_________________________________________________________________
_________________________________________________________________
_________________________________________________________________
Systems Requirements
The Windows 2000/XP Blue Ridge VPN Client has the following requirements:
1. A Pentium-compatible 133 MHz CPU or higher PC with one of the
following Operating Systems:
a. Windows 2000 Professional with Service Pack 3 or greater.
b. XP Home Service Pack 1 or greater.
c. XP Professional Service Pack 1 or greater.
2. Minimum of 64 MB of RAM.
3. 20 MB of free disk space.
4. An installed modem or network interface card.
5. Microsoft TCP/IP installed on the modem or network
interface card.
6. Note: Currently the Microsoft IPX/SPX-compatible protocol is
not tested and is not supported for use with the Windows 2000/XP
Blue Ridge VPN Client even though this is compatible with the
clients running on the Windows 95/98 or Windows NT operating
systems.
7. The Blue Ridge VPN Client is not supported on the Windows 2000 Server.
__________________________________________________________________
Contents of Client Software
The Blue Ridge VPN Client Software contains the following:
Token Diskette or USB Key Guard -- updated with subscription and password
information from your Administrator
CD-ROM: Blue Ridge VPN Client Installation Software
You will also need a Product Code in order to install this software.
Contact your Adminstrator for a valid product code.
________________________________________________________________
Release History Windows 2000/XP Blue Ridge VPN Client
Client Version 6.8 10/03/06
1. A subnet roaming defect that was introduced in 6.7 was fixed in this release.
2. A problem that prevented the client from setting routes on the Win2K platform
has been resolved.
Client Version 6.7 09/15/06
1. The Client has the following enhancements:
a. On the Advanced Properties dialog, a "Split DNS Support" check
box has been added to support the feature which resolves issues that arise
when connecting to a Home Network that has DNS names that can be resolved
external to the Home Network (this feature was originally controlled by registry
settings). A split DNS infrastructure occurs when there are two zones for the
same domain, one to be used by the internal network, the other used by the external
network. Split DNS directs internal hosts to an internal domain name server for name
resolution and external hosts are directed to an external domain name server for
name resolution.
2. The following bug fixes were made in this version of the Client:
a. Problems associated with multiple NIC cards have been fixed in this release.
b. The Autoclient High CPU Utilization problem that occurred when a physical NIC
card is not present has been fixed.
Client Version 6.6 05/01/06
1. The Client has the following enhancements:
a. VLAN Tagging support has been enhanced to allow the client to be subscribed
to multiple Home Networks each having a unique VLAN tag. In order to
use this feature, the Backwards Compatible check box should NOT be checked
when creating the subscription.
2. The following bug fixes were made in this version of the Client:
a. During subnet roaming, the Client would sometimes attempt a connection to another
BorderGuard in the Access Group.
b. In rare cases, when a DHCP renewal was performed on a physical NIC card, split
tunneling occurred.
Client Version 6.5 12/01/05
1. The Client has the following enhancements:
a. A new feature has been added to assist when the client is connecting
to a home network that has DNS names that can be resolved external to
the home network. Contact Blue Ridge Networks for more
information about this feature.
2. The following bug fixes were made in this version of the Client:
a. Under rare circumstances when a client was unable to connect to the primary
BorderGuard it would not attempt to connect to the backup BorderGuard. The
client has been modified to try the backup BorderGuard in all cases if it cannot
connect to the primary BorderGuard.
Client Version 6.4 11/01/05
1. The Client has the following enhancements:
a. For Autoclient installations a utility is included that enables the user
to update the subscription.
2. The following bug fixes were made in this version of the Client:
a. For a static IP subscription that had less than 3 DNS IP addresses
specified, the DNS settings were not getting set properly on the
Virtual NIC properties.
Client Version 6.3 09/30/05
1. The Client has the following enhancements:
a. This client supports protocol conformance. Version 5.0 of the
VPN Manager is required. Version 7.3-9 of the BorderGuard
Firmware is required.
b. This client supports VLAN tagging. Versin 5.0 of the VPN Manager
is required and Version 7.4 of the BorderGuard Firmware is
required.
c. The AutoClient can now be used with non-KeyGuard Subscriptions.
2. The following bug fixes were made in this version of the client:
a. When the autoclient entered a suspended state, the user was unable to
log off. This has now been fixed.
b. The client responses to KeyGuard insertion and extraction were
improved.
Client Version 6.2 08/30/05
1. The VPN Client was not connecting when a Modem connection to the
Internet was initiated from the VPN Client. This problem is now
fixed.
Client Version 6.1 06/30/05
1. Incorporated an installation product code to install a version of the
Fiberlink client which does not automatically launch the Blue Ridge VPN
Client upon connection.
2. Using wireless connections, subnet roaming is improved.
3. The auto-launch client has been improved:
a. Tray status indicator included
b. USB KeyGuard control:
i. Connection attempt whenever KeyGuard is inserted, not just at login
ii. Enhanced support for the disconnect on KeyGuard removal feature.
4. Win9x and WinNT Clients have been removed from this installation package.
Client Version 5.2 04/15/05
1. The conditions for verifying a valid DUN entry were relaxed in order
to support non-standard Dial-up programs.
2. The subscription update utility was fixed.
Client Version 5.1 12/01/04
1. The Client has the following enhancements:
a. The Client will now permit DNS lookup of the Cryptoservers. This
feature requires that the Subscription be generated by VPN Manager
version 4.1 or later. This feature works with Dynamic Tunnel Lock and
Permanent Tunnel Lock with DHCP Support. This feature does not
work with Permanent Tunnel Lock (with no DHCP Support).
b. The Client will now set up Wins and DNS settings for the VNIC when
a static IP subscription is used. This feature requires that the
Subscription be generated by VPN Manager version 4.1 or later.
c. The Client now supports "Access Group clustering". Contact your
Administrator for more information about this feature.
2. Auto-logon client: This install package contains a version of
the client that can be configured to connect to the VPN prior to the user
logging into Windows. Contact your Administrator for the Auto-logon
client product code. You must have your KeyGuard and password when installing
the Client with the Auto-logon Client product code. This client supports most
of the features that are supported by the standard client except for the
following limitations:
a. Only supports KeyGuard subscriptions.
b. "Disconnect on removal of KeyGuard mode" is not supported.
c. Does not support the "VPN Disconnect Actions" such as reboot, logoff, etc.
d. Does not support subscription enforcement of the Tunnel Lock and
Kiosk configurations.
Client Version 5.0 09/15/04
1. This client has the following enhancements:
a. Subnet roaming: The client will remain connected to the home network
when the active interface changes IP addresses. The Cryptoservers on
the home network must be running version 7.0 firmware in order to
support this feature.
b. The connection time required when connecting to a backup server has been
reduced.
2. Auto-logon client (alpha quality): This install package contains a version of
the client that can be configured to connect to the VPN prior to the user
logging into Windows. Contact your Administrator for the Auto-logon
client product code.
3. Performance of this client has been improved by 300%.
Client Version 4.0 12/15/03
1. The client can be configured in Kiosk Mode: In this mode the client will
require the user only to enter his password in order to connect. The user
will not have to configure properties beforehand. Settings do not remain
persistent between executions.
2. The client can be set up to disconnect from the VPN when the KeyGuard is
removed from the PC.
3. The client can be configured to perform one of the following actions when
it disconnects from the VPN:
a. Reboot
b. Shutdown
c. Logoff
d. Poweroff
e. None
4. A keyboard/mouse activity timeout feature is now incorporated.
5. AES encryption capability has been added to the client.
6. A version of LZS compression (LZSB) has been added to the client. This
compression algorithm determines if LZS compression actually reduces the
size of data packets. If the packet size will not be reduced or would
actually be increased by compression, the original packet is encrypted
and sent in uncompressed form. This is done on a packet by packet
basis in order to maximize bandwidth and performance.
7. Enhanced subscription control: Parameters embedded in the subscription
now control the following features:
a. Tunnel-Lock: Tunnel-lock settings in the subscription will determine
the minimum Tunnel-lock setting required for connection. If the client
configuration does not match or exceed the settings in the subscription,
the client will not connect.
b. Kiosk-Mode: If the Kiosk mode is set in the subscription then the
subscription will only be valid on clients that have been installed
with the Kiosk configuration.
c. KeyGuard disconnet: The client will disconnect when the KeyGuard is
removed from the machine if this subscription setting is set.
d. Disconnect Actions: This setting will determine action taken when the
client disconnects from the VPN.
e. Idle Timeout: This setting specifies how long the client can remain
idle (both keyboard/mouse inactivity and network inactivity) before
the VPN connection is terminated.
f. VNIC MTU: This sets the client's Virtual NIC's MTU size.
g. Allow Split Tunnel: This setting will enable split tunnelling by the
client.
h. Accept Microsoft Private IP: If this setting is enabled, the client will
accept a Microsoft Private IP if it cannot acquire a DHCP address on the
Home Network.
Client Version 3.1 Maintenance Release (3.1.9.20) 6/13/03
1. The edit boxes on the run tab now permit blanks embedded in the path names
as long as the path is contained in quotes.
Client Version 3.1 3/31/03
1. Client will scan available LAN adapters to find one suitable to connect
rather than requiring the user to manually change the setting in Properties.
2. Auto Reconnect feature added. If enabled, the client will attempt to reconnect
if the connection is lost. A user can swap interfaces and the client stays connected.
3. Reports Cable Disconnected while Client is not running.
4. If Windows is shutdown while the client is connected, the client will disconnect
and close without prompting the user. Windows will NOT shutdown, but will be
ready to properly shutdown if a second shutdown command is issued.
5. Improvements for launching programs before and after connecting.
6. A new registry entry, IdleWaitBeforeDisconnect, was added to enhance the Client
Idle time processing. The unit is in minutes. The default is 0, which means
that the Idle timeout is not enforced. The minimum value is 5 minutes.
Client Version 2.0 09/20/02
1. Adds USB Key Guard token for subscription and password security.
2. Incorporates SHA-1 update to the dpf driver.
3. Allows connections in Microsoft's Reserved IP space.
-If the home network does not have a DHCP server and the connected site uses
Microsoft's reserved IP space on the home network, the home network connection
results in an IP: 169.254.x.x. The client will display this message:
"A DHCP Server on the home network did not provide an IP address.
Connection terminated."
Set a new registry entry to allow the connection:
HKLM or HKCU\Software\Blue Ridge Networks\Client\Setting\
REG_DWORD AcceptMicrosoftPrivateIP value: 0
Client Version 1.3 04/16/02
1. Supports connection over AOL.
2. Performance improvements have been made.
Client Version 1.2 03/27/02
1. Supports the XP Home and Professional operating systems.
Client Version 1.1 10/23/01
1. Allows Users and Power Users to create Dial-up Networking
entries from the Client.
2. Scripts and commands launched from the client are now executed
in the correct user context.
Client Version 1.0 7/30/01
1. Incorporates the VNICparamUpdate functionality into the
RemoteClient.exe. There is no need to run the VNICparamUpdate
program independently.
2. Added Advanced Settings which allow the following options:
- Renew DHCP Address on Disconnect: If your Guest Network
uses DHCP, then this option should be checked. It has no
effect if your Guest Network uses static IP addresses. This
option is enabled by default. If the AOL option is being
used, this option will be disabled. (Do not change unless
directed by your administrator or you may have problems with
your Guest Network connection after disconnecting from the
Home Network).
- Enable Sleeve Compression: Usually sleeve compression is
controlled by the CryptoServer settings. This option allows
the user to disable sleeve compression on the sleeve if the
Guest network connection is already using software compression.
This is enabled by default. (Do not change unless directed
by your administrator or you may not be able to connect to the
Home Network as a corresponding change must be made on the
CryptoServer).
- Enable Logging. When enabled, the client software logs its
activity to a log file located in the client executable
directory. This is enabled by default. After changing
this option, close the client and restart for the change
to take effect.
- Overwrite Log file: If this option is checked, the client's
activity will be logged to brnvpn.log. If this option is not
enabled, a new log file will be created each time the client
is opened. The log file will be brnvpn<date_time>.log. After
changing this option, close tne client and restart for the
change to take effect.
4. Added the capability of running scripts:
- before connection
- after connection to home network (this option was
in previous releases).
- before disconnecting from the home network.
- after disconnecting from the home network.
Windows 2000/XP Client Version 4.0 Alpha02b 3/21/01
1. This version of the client is compatible with the Windows
2000 operating system. This is an alpha quality release
Windows 2000/XP Client Version 4.0 Alpha02 2/01/01
1. This version of the client is compatible with the Windows
2000 operating system. This is an alpha quality release
Windows 2000/XP Client Version 4.0 Alpha 12/6/00
1. This version of the client is compatible with the Windows
2000 operating system. This is an alpha quality release
____________________________________________________________________
Set up of the Network Interface
It is strongly recommended that the dial-up or network interface
be setup and tested PRIOR to installing the Blue Ridge VPN
Client software. This interface should be tested before and
after installing the Blue Ridge VPN Client.
______________________________________________________________________
Windows XP Dial-Up Networking setup
If a Dial-Up Networking Connectin is not installed, you may
install it as follows:
1. Click on Network Connections
2. Click on Create New Connection under the Network Tasks section
The New Connection Wizard will start. When it does, click on "Next."
3. Click on "Connect to the network at my workplace" then click on "Next."
4. Click on "Dial-Up connection" then click on "Next."
5. Enter in the name selected for the connection.
6. Enter in the phone number of your ISP including the area code.
Click on "Next."
7. Click on "Do not use my smart card" then click on "Next."
8. Click on "Anyone's use" then click on "Next."
9. Click on "Finish"
10. Set the password and other dial information in the Client software.
After a Dial-Up Networking connection is installed, test the
connection by performing the following steps:
1. To dial a connection that you have already set up, double-click
its icon in the Dial-Up Networking window to connect to your
Internet Service Provider or other dial-up server.
2. Once your dial-up connection is established, from the Command
Prompt window enter the command "ipconfig/all"
3. Find the entry for the PPP Adapter. The IP Address field
should show a valid IP Address, not 0.0.0.0. If not, the
Client software will not work.
__________________________________________________________________________
Windows 2000 Dial-Up Networking Setup
If a Dial-Up Networking Connection is not installed, you may
install it as follows:
1. Right click on "My Network Places" to obtain the menu.
2. Right click on "Properties."
3. The "Network and Dial-up Connections" window appears.
Double click on the "Make New Connection" icon.
4. The network connection wizard will start. When it does, click
on "Next."
5. The Wizard may prompt for using or not using a smart card. Choose "No."
6. Click on the line that says "Dial-up to Private Network." Then
click "Next."
7. Enter in the phone number of your ISP including the area code.
Click on "Next."
8. Click on the line that says "For all users" and then click on
"Next."
9. Enter in the name selected for the connection. Click
on "Finish." A dial-up networking window should appear.
10. Enter the username and password for the ISP account. If
desired, click on the save password option.
11. Click "Dial" to verify the ISP connection. Continue with
step 2 of the test of the network connection (the next
paragraph) if testing will be done immediately.
After a Dial-Up Networking connection is installed, test the
connection by performing the following steps:
1. To dial a connection that you have already set up, double-click
its icon in the Dial-Up Networking window to connect to your
Internet Service Provider or other dial-up server.
2. Once your dial-up connection is established, from the Command
Prompt window enter the command "ipconfig/all"
3. Find the entry for the PPP Adapter. The IP Address field
should show a valid IP Address, not 0.0.0.0. If not, the
Client software will not work.
_____________________________________________________________________
Windows Network Adapter Setup
If your network adapter connection is not installed, you may
install it as follows:
1. Double-click on the "My Computer" icon, and then double-click
on the Control Panel icon.
2. Double click on the "Network and Dial-up Connections" icon.
3. Click on the "Network Identification." The Network
Identification is not an icon but a link on the left side.
4. Click on the "Hardware" tab.
5. Use the Hardware Wizard to add the adapter. Follow the
instructions on the screen that would be appropriate. One
possible series of entry screens would be as follows:
a. Add/Troubleshoot a device
b. Click "Next"
c. Hardware wizard finds the Ethernet adapter
d. Click "Next"
e. Click "Finish"
f. Click "OK"
After your network adapter connection is installed, test the
connection by performing the following steps:
1. Once your network connection is established, run "IPCONFIG"
from a Command Prompt window.
2. Find the entry for the Ethernet adapter. The IP address field
should show a valid IP address. If not, the Client software
will not work. Refer to the Troubleshooting section below
if this happens.
_________________________________________________________________
Installing the Blue Ridge VPN Client Software
Prerequisites:
1. Disable any virus checkers.
2. Close all applications and utilities.
3. Turn off power management. Windows offers a power management
feature called suspend, which reduces power consumption after
the computer has remained idle for a predefined period of time.
Mobile users often utilize this feature. The Blue Ridge VPN
Client may not work properly if the computer goes into the
suspended mode. See a network administrator if instructions
are required to do this.
4. Ensure that the dial-up and/or network adapter access is set
up properly.
_________________________________________________________________
Install the Blue Ridge VPN Client software:
Please read all installation instructions before beginning.
1. To run the installation program, logon as a user with
ADMINISTRATOR rights on the system. The Installation will
check the rights and terminate with an error if the user
doesn't have the ADMINISTRATOR privileges on the system.
2. The system should have at least the minimum configuration described
above.
3. Check the Driver Signing Options
This is done by the following steps:
a. Click on "My Computer"
b. Click on the "Control Panel"
c. Click on the "System" icon
d. Click on the "Hardware" tab
On the "Hardware" tab, there is an option for the Driver Signing
Option. This option should be set to either "Warn" or "Ignore". If
"Block" is selected, the installation will not succeed. Click on
"OK" and then "OK" to exit.
4. Insert the Client CD-ROM in the appropriate drive
of your computer. The install should start running from the CD.
If the install does not start automatically, then follow these steps:
a. Click on "My Computer"
b. Click on the "Control Panel"
c. Click on the "Add or Remove Programs"
d. Click on "install" or "Add new Programs"
The installation program can be started directly from the CD by clicking on "Setup.exe"
5. Follow the installation directions.
You may be required to reboot during the Client installation
process.
6. If you set your Driver Signing Option to "Warn",
the VPN Client installation will halt during the installation process. At this time,
a window will pop up warning you about the Digital Signature. Click "Continue anyway."
The installation will complete. If you click "Cancel" on the installation window,
a cryptographic device will be partially installed, and will need to be removed before the VPN
Client can be sucessfully installed.
7. Reboot the Client workstation if prompted.
8. If you install the Auto-logon feature and do not have the KeyGuard and password, the install will
complete without enabling the feature. You may add or change the password with the utility included
in the Client installation folder.
_________________________________________________________________
Running the Blue Ridge VPN Client Software
Prerequisite: None - The user does not require Administrator
Privileges to run the client.
1. Insert Token Disk or USB token
Insert your token diskette into the floppy drive (unless you
have already transferred the Token to the hard drive) OR insert
Key Guard token in a USB port. Key Guard tokens cannot be transferred
to the hard drive.
2. Start the Client Application after your computer is fully booted up.
Double-click on the Blue Ridge VPN Client short cut symbol on the
Windows Desktop.
3. Enter Password
After double clicking on the Blue Ridge VPN Client short-cut,
the Remote Client window will appear. Enter your password.
If this is the first time you have clicked on the Client
symbol, click on the "Properties" button. If the connection
information has been previously entered and is correct as
displayed, click on the "Connect" button.
4. Token Validation
Your token will be validated at this time, and a status
message will appear at the bottom of the Remote Client
window.
5. Enter Connection Information
If you clicked on the "Properties" button, enter your modem
or LAN connection information, choose the correct Home
Network from the drop-down box if necessary, and, if desired,
enter a script file to be run immediately after connection,
such as Microsoft Outlook. Click on "OK", then click on
"Connect" to initiate your secure VPN connection. This
information will be saved for each subsequent connection.
If connection information changes, click on the "Properties"
button again to reconfigure your information. Click on the
"Connect" button of the Remote Client window to establish
your connection.
6. Status Messages and Icons
Status messages and icons will be displayed on the bottom of
the Remote Client window. When the connection is successful,
a duration timer message will appear on the bottom of the
window, the "Connect" button will change to "Disconnect",
and the window will minimize after thirty seconds into a green
PC icon on the taskbar. If there are any connectivity problems,
refer to Appendix D - Troubleshooting in the Client User
Guide for help in diagnosing the problem.
7. Contact Button
Click on the "Contact" button at any time to display the
contact information for your organization.
8. Utilities Button
Click on the "Utilities" button to change your user password,
transfer your token diskette to/from the hard drive, or update your
subscription information. There are more details about the
utilities in the next section of this document.
9. Terminate Client Connection
When you are finished using the Blue Ridge VPN Client
application, terminate the application by clicking on either
the "Close" or the "Disconnect" button. If the Remote Client
window is not on the desktop, double-click on the icon in the
taskbar to restore it. The "Disconnect" button will disconnect
your secure Client connection, but keep your connection to the
Internet open and the Remote Client window active on the
desktop. Terminating the Client connection with the "Close"
button will automatically terminate any modem connection
established.
_________________________________________________________________
_________________________________________________________________
Running the Client Utilities
The utilities are available in the Blue Ridge VPN Client when the client
is not actually connected to the home network.
1. Launch the Client Utilities
To launch the Client Utilities, insert the Key Guard token in the USB port
or the token diskette in the floppy drive (unless the token has been
transferred to the hard drive).
Double-click on the Blue Ridge VPN Client short cut symbol on the desktop.
Enter your password, then click on the "Utilities" button.
2. Change Password
Use this utility to change your password for the Blue Ridge VPN
application. Each time the Client application is launched, the
current password must be entered.
3. Transfer Token disk Subscription to Hard Drive
This utility transfers the token disk subscription information
file to the hard drive. Key Guard tokens may not be transferred to
the hard drive. Once the token diskette subscription files
are transferred to the hard drive, the token diskette is no
longer required to run the Client application. This process
speeds up the validation of the token when the Client application
is started. The original token floppy disk must be preserved
if the user expects to transfer the token back to the diskette
at some time in the future.
***********************Caution*********************************
If you use the Defragmenter that comes with Windows 2000 (or another
one that doesn't allow you to explicitly exlude files), it is
recommended that you move the token back to the diskette prior to
running the defragmenter. If your defragmenter software allows
you to exclude files from being moved, specify the following
file: \Documents and Settings\<user name>\AX NF ZZ\Image.IDX
***************************************************************
4. Transfer Token/Subscription to Diskette
Use this utility to transfer the access authorization token
back from the hard drive to the ORIGINAL token diskette. The
original token diskette must be inserted into the floppy
drive. A message will appear when the transfer is successful.
5. Update Subscription
If your Administrator sends you updated subscription files,
via a floppy disk, e-mail, or downloaded from an FTP Server,
you must update your subscription files. Save the files,
named "subsinfo.dat" and "contact.dat", in a temporary drive
on your computer. A temporary password to "unlock" the new
subscription is required from your Administrator. The process
to update your subscription is as follows:
a. Click on the "Update Subscription" button. You will be
prompted for the password of the new subscription, and
the location of the subscription files.
b. Enter the new password, provided from your Administrator.
c. Enter the correct location of the "subsinfo.dat" file,
or click on the "Browse" button to locate it.
d. If you have not transferred your token to the hard drive,
insert your token diskette at the prompt, and click on
"OK".
e. After the subscription has been successfully updated, you
will receive a message that your subscription has been
successfully updated. NOTE: Your Blue Ridge VPN
password has not changed, only the subscription.
_________________________________________________________________
_________________________________________________________________
Troubleshooting
Technical Support
Contact your Network Administrator for technical support.
Choose the Contact button on the Blue Ridge VPN Client window
to access contact information. Additional contact information
is contained on the last page of this document.
________________________________________________________________
________________________________________________________________
Uninstalling the Blue Ridge VPN Client
To uninstall the Blue Ridge VPN Client, perform the following
steps:
1. Remove the Blue Ridge VPN Client application:
a. From Windows Start menu, select Settings->Control
Panel->Add/Remove Programs.
b. Select "Blue Ridge VPN Client".
c. Click on "Change/Remove".
2. If you have used the Key Guard token, you will also have Rainbow
iKey Driver installed. If you do not use any other Rainbow iKey
devices, you may uninstall the Rainbow iKey driver.
a. From Windows Start menu, select Settings->Control
Panel->Add/Remove Programs.
b. Select->"Rainbow iKey Driver".
c. Click on "Change/Remove".
________________________________________________________________
________________________________________________________________
Uninstalling the Alpha02 Blue Ridge VPN Client[Win2000/XP]
Note: If you have the Alpha version of the Skyline Client
Installed on your Windows 2000 platform please follow the instructions
for uninstalling that version (see Uninstalling the Alpha Skyline Client
below).
[For Windows 2000 Alpha02b Version]
To uninstall the Blue Ridge VPN Client, perform the following
steps:
1. Remove the Blue Ridge VPN Client application:
a. From Windows Start menu, select Settings->Control
Panel->Add/Remove Programs.
b. Select "Blue Ridge VPN Client".
c. Click on "Change/Remove".
2. During the Uninstallation process a locked file may be detected.
When this happens, a “Locked File Detected” window will be displayed.
Click on the “Ignore” button.
________________________________________________________________
________________________________________________________________
Uninstalling the Alpha Skyline Client
[For Windows 2000 Alpha Version]
To uninstall the Skyline Client, perform the following
steps:
1. Removing Drivers
To get to the Device Manager, do the following:
a. Click on "My Computer"
b. Click on "Control Panel"
c. Click on "Administrative Tools"
d. Click on "Computer Management"
e. Right click on "Device Manager" to see a pull-down menu.
Two devices need to be removed:
a. Cyptographic Device by Blue Ridge Networks
This device is under either Cryptographic Devices or
Under "description of device class here."
b. BlueRidgeVNIC Network Adapter by Blue Ridge Networks
This device is under the Network Adapters.
Right click on each of the two devices to be removed. Select
"uninstall" from the menu.
2. Stop the BlueRidgeSkyline Service.
The Service needs to be done using the Services Icon.
This can be found by doing the following:
a. Click on "My computer"
b. Click on "Control Panel"
c. Click on "Administrative Tools"
d. Click on "Services"
Under services, you will see a list of services. Find the Blue
Ridge Networks Client Services and right-click on it. This will
bring up another menu that will give you an option to stop
the Service.
3. Remove the Programs
Go to the directory containing the Skyline client files (the
directory must be C:\Skyline). Delete the files in this
directory.
_________________________________________________________________
_________________________________________________________________
Known Anomalies with this Version
1. The AutoClient does not recognize subscription controls for the
enforcement of TunnelLock installation.
2. When the Win2K Autoclient using KeyGuard comes out of hibernation
or standby it will not connect. The work-around is either to use a non-KeyGuard
version of the Autoclient or restart the Autoclient service (re logging
on will accomplish this as well).
3. Fast User Switching in XP is not supported by the Blue Ridge VPN Client.
4. After the install, in some cases (rarely), when Blue Ridge VPN client
is launched, you may receive the message:
The Blue Ridge Client Service is in STOP mode. Please
start the service using the Administrative Tools Control
Panel.
The service needs to be started.
If you have this case, go to the Services Icon. This can be
found by doing the following:
a. Click on "My computer"
b. Click on "Control Panel"
c. Click on "Administrative Tools"
d. Click on Services
Under services, you will see a list of services. Find the Blue
Ridge Networks Client Services and right-click on it. This will
bring up another menu that will give you an option to start
the Service.
5. Occasionally, Blue Ridge VPN Client Messages are hidden behind other
dialog boxes. If your system does not appear to be responding,
minimize any open windows to check for Blue Ridge VPN message boxes.
6. Some disk defragmenters may corrupt a token that has been moved to
the hard drive. It is recommended that you do either one of the
following:
a. If your defragment software has the option of excluding files,
exclude the following file:
\Documents and Settings\<user name>\AX NF ZZ\Image.IDX
\Documents and Settings\<user name>\AX NF ZZ\skyline.ekb
b. Move the token back onto Diskette before defragmenting your hard
drive.
7. The DNS and WINS settings in the subscription do not work with the Win2000
client. You must set these manually.
8. Static Subscription DNS and Wins settings stay on VNIC even after
swtiching to a DHCP Subsription. You must reset these manually.
9. The shutdown and power off options for "action after disconnect" in
the subscrption do not work with the 6.x client.
10. DNS Look up does not work Permanent Tunnel Lock and with Permanent Tunnel Lock/DHCP.
11. There are interoperability issues when TunnelLock is installed and the
Windows Firewall is enabled for the Blue Ridge VNIC. These issues are
known to affect FTP only.
12. The client may not connect through the selected interface when multiple interfaces
are active on the PC.
13. The subnet roaming capability is directly dependent upon the wireless network
adapter's ability to roam quickly and properly. This may take time so it is
recommended that the sleeve "status timeout" time be changed from the default of
60 seconds to 120 seconds.
________________________________________________________________
________________________________________________________________
Export Restrictions
Please contact your Administrator if you intend to use this
product outside the U.S. or Canada. Please read the following:
Personal Use Exception for Cryptographic Products
The Federal Register dated February 16, 1996 contains the
Department of State ruling that amended the International Arms
Traffic Regulations (ITAR), in establishing an exemption for the
temporary export of products for personal use. This change
removed the regulation of obtaining a State License for your
personal computer (which has encryption)when traveling abroad
and being used for personal use. The exception does not apply
to other circumstances, for example, those in which a person
contemplates sales, marketing or demonstration. This exception
does not allow export to the countries of Cuba, Iran, Iraq,
Libya, North Korea, Sudan, and Syria.
There are special guidelines:
The encryption product remaining in the possession of the exporting
person or the possession of another U.S. citizen or lawful
permanent resident traveling with him/her, is for their exclusive
use and not for copying, demonstration, marketing, sale, re-export
or transfer of ownership or control. The exporter takes
precautions to ensure the security of the product by locking the
product in a hotel room, safe, or other comparably secure location.
Also, while in transit, the exporter keeps the product in his/her
carry-on luggage or locked baggage accompanying the exporter,
which has been checked with the carrier.
The exporter, upon request from a U.S. Customs officer, will
submit the products to inspection at time of export and/or
import.
Use of this exemption requires the exporter, in lieu of filing a
Shippers' Export Declaration, to maintain, for a period of five
years from the date of each temporary export, a record of that
temporary export and the subsequent import. Included in this
record of that temporary export and the subsequent import must
be a self-certification that the individual complied with the
conditions of assurance that the products were under their
possession at all times and has no reason to believe that any
of the temporarily exported cryptographic products were stolen,
lost, copied, sold or otherwise compromised or transferred while
abroad. The self-certification record should contain the
following information:
1. A description of the cryptographic product and serial number
of the product.
2. Countries entered, along with the date of entry and exit.
3. The dates of temporary export from the U.S.
The Department of Commerce Export Administration Regulations
Part 740.9 (a)(1)(2) defines the license exception (TMP).
This exception permits the temporary export of cryptographic
products based on the Department of State ruling.
__________________________________________________________________
__________________________________________________________________
Referenced Trademarks and Products
The information in this document is subject to change without
notice and should not be construed as a commitment by
Blue Ridge Networks. Blue Ridge Networks assumes no responsibility
for any errors that may appear in this document.
Blue Ridge Networks does not by publication of the descriptions and
technical documentation contained in this document, grant a
license to make, have made, use, sell, sublicense, or lease any
equipment or programs designed or constructed in accordance with
this document or programs designed or constructed in accordance
with this information.
Blue Ridge VPN is a trademark of Blue Ridge Networks.
The following are third party trademarks:
IEEE is a registered trademark of the Institute of Electrical and
Electronic Engineers, Inc.
MS-DOS is a registered trademark of Microsoft Corporation.
Novell and NetWare are registered trademarks of Novell, Inc.
__________________________________________________________________
__________________________________________________________________
Download Driver Pack
After your driver has been downloaded, follow these simple steps to install it.
Expand the archive file (if the download file is in zip or rar format).
If the expanded file has an .exe extension, double click it and follow the installation instructions.
Otherwise, open Device Manager by right-clicking the Start menu and selecting Device Manager.
Find the device and model you want to update in the device list.
Double-click on it to open the Properties dialog box.
From the Properties dialog box, select the Driver tab.
Click the Update Driver button, then follow the instructions.
Very important: You must reboot your system to ensure that any driver updates have taken effect.
For more help, visit our Driver Support section for step-by-step videos on how to install drivers for every file type.