Networking

What a VPN is and how you might use it

VPN is a tool to make your computer think it is physically at UMSL.

VPN software is available for most systems, including smart phones. The VPN software can be downloaded and installed on your system.

Triton VPN with Multi Factor Authentication instructions

Windows Computer with MFA

Triton VPN instructions

Apple Computer

Apple Mobile Device 

Windows Computer

Step 1: Find the name of your Windows workstation:

• 在你的工作站上，打开Windows搜索栏，输入“计算机名”，然后回车.

• Search for the computer name:

  • 在Windows 10/11上，选择“查看您的PC名称”，然后寻找“完整设备名称”。

  Make a note of the computer name, (this will be your computer name with .stl.karitsaiset.net or .umad.umsystem.edu at the end).

Step 2: Run or install your Microsoft Remote Desktop Client:

Windows computers already have the Remote Desktop Client installed; all you have to do is search for it. mac、IOS设备(iphone / ipad)和Android设备需要安装微软RDP应用程序.

步骤3:配置Microsoft远程桌面客户端使用远程桌面网关

The Remote Desktop client must be configured to use rdp.karitsaiset.net as the Gateway hostname.

• Windows  includes a Remote Desktop client, which you can launch from the Start Menu

Install and configure Microsoft Remote Desktop app for

• Windows (Windows Store)
• Mac OS X
• iPad and IOS devices
• Android and Chromebook devices

Step 4: Connect to your computer

The computer name must be entered as computername.stl.karitsaiset.net.

Your username must include the domain name: ssoid@umsystem.edu

You must have the name of the machine you want to connect to.

You must install Microsoft Remote Desktop from the app store.

1. Launch the Microsoft Remote Desktop app

   

2. Click the Settings gear, and select Preferences...
   

3. From the Preferences window, click the Gateways tab
   

4. On the Gateways tab, click +
   

5. For Gateway name enter rdp.karitsaiset.net, click the drop-down arrows, and click Add User Account...
   
   

6. Enter User name as SSOID@umsystem.edu, with your SSO password. The Friendly name is optional. Click Add.
   
   

7. Click Add 
   

8. Close Preferences by clicking the red Close button.
   

9. Click Add PC
   

10. Enter the PC name, select the User account and Gateway you created, then click Add
    

11. Click the connection with the desired computer name
    

Follow any prompts you may receive.  如果提示“验证证书”，请检查主机名并单击“信任”，然后单击“继续”.

Network Usage:

• All UMSL network traffic to and from the Internet must go through the firewall. 任何绕过防火墙的网络流量都必须得到计算机安全事件响应小组(CSIRT)的解释和明确允许。.
• Computer Security Incidents and Abuses can be reported to the CSIRT at abuse@karitsaiset.net , or call the Technology Support Center at 314-516-6034.
• Applications which transmit sensitive information over the network in clear text, such as telnet and ftp, are prohibited and will be blocked. Exceptions must be accounted for and explicitly allowed by the CSIRT. Secure free replacements to telnet and ftp are SSH and SFTP.
• UMSL已启用端口锁定，将特定PC锁定到特定网口. Moving a PC to another port, 或者将新PC插入旧PC的端口将导致该端口自动禁用. The Technology Support Center will have to reset the port.
• Users may not go outside UMSL for network connectivity, such as signing up for a connection to an outside Internet Service Provider, without the consent of Information Technology Services (ITS).
• 禁止妨碍他人连接或使用网络的活动. This includes, but is not limited to: unauthorized file-sharing, initiating denial of service attacks, initiating viruses or worms, and network scanning.
• ITS将尝试满足研究或教学所需的所有特殊网络拓扑的要求. There may be costs associated with these accommodations.

Workstation Configuration and Network Administration:

• 只有UMSL批准和更新的操作系统才允许pc加拿大APP下载网络.
• Windows based Faculty and Staff systems must be joined to the UMSL Domain. Exceptions must be approved by ITS.
• 教职员工的Windows系统必须运行当前的校园杀毒软件.
• 教职员工负责他们管理的服务器，并使其符合校园规则.
• Students may not provide accounts, disk storage, or web pages for other users.
• Users may not set up servers without first notifying ITS. This includes but is not limited to DHCP, DNS, WINS, FTP, Web, or Mail servers.
• 缺省情况下，通过DHCP协议自动分配IP地址。. The use of a hard-coded or non-approved IP address is prohibited. IP地址可以在不通知的情况下更改，除非与ITS安排分配静态IP.
• 一台电脑不应该同时通过有线和无线连接到网络.
• Network administration tools are not allowed without the consent of ITS. This includes, but is not limited to:
  • Network monitors
  • Sniffers
  • Vulnerability scanners
  • Port scanners
  • SNMP tools

Network Hardware:

• University computing equipment must not be tampered with in any way.
• Wiring may not be split, re-wired, or re-configured.
• Mini-hubs, routers, switches, bridges, wireless access points, wireless bridges, or other network hardware are not allowed.
• 有多个网卡的PC机不允许作为网络地址转换网关. For example, Windows Internet Connection Sharing is prohibited. No device other than an ITS device will be permitted to route or bridge packets.
• A PC with a wireless card may not be configured to act as a wireless access point.

Network Maintenance Window:

Sunday mornings (midnight thru noon), 1st and 3rd Wednesday of the month (4:00.am. thru 7:00.am.) and 2nd and 4th Friday of the month (5:30p.m. thru Sat 6:00.am.) are reserved for network maintenance. Every effort will be made to give prior notice. 在此期间，网络和/或服务器可能不可用，因此可以进行更新. Access to the network may be suspended to preserve the integrity of the network.

Temporary Guest Accounts:

经ITS批准，非umsl用户可以获得临时访客帐户，以帮助促进与其他大学和网站的研究人员的合作. These accounts will be allowed to VPN into UMSL. A faculty member must request the account, fill out a form, and be responsible for the account's usage.

Individual Responsibility for Security on the Student Network:

马萨诸塞大学学生公寓的用户应该采取合理的措施，确保他们的计算机系统在连接到网络时不会产生安全风险. This includes but is not be limited to the following steps:

• 用户必须使用SSO/ MyGateway用户名和密码在学生网络上注册他们的计算机.
• Windows based systems must run a current and updated anti-virus software.
• 操作系统和软件必须使用供应商提供的最新补丁和服务包.
• 有线Windows和Macintosh学生系统必须安装NAC Persistent Agent.
• All accounts on student owned machines should have passwords.
• It is recommended that individual computers be protected by a personal firewall.
• 建议用户使用反间谍软件对恶意软件进行定期扫描.

University of Missouri-St. Louis Information Technology Network Usage Policy

The University of Missouri-St. Louis (UMSL) campus network provides access to the campus computing facilities. All users of the UMSL network must conform to the University of Missouri-St. Louis Acceptable Use Policy. 将计算机连接到UMSL网络后，必须遵循其他策略. 违反下列任何一项政策都可能导致网络立即断开连接.

For more information, visit ITS Security.