Version 1.7.0 AT&T Global Network Client for Mac User s Guide Version 1.7.3 experience may vary. This document is not an offer, commitment, representation or warranty by AT&T and is subject to change..
Notice The information in this document is believed to be complete and accurate at the time of publication. However, information is subject to change. Document revisions This document is revised and maintained by AT&T Global Network Client Development, AT&T Labs.
Notice... 2 Document revisions... 2 Overview... 5 Using This Document... 5 AT&T Global Network Client Overview... 6 Preparing for Installation... 6 System Requirements... 6 Requirements for Installation and Use... 7 Obtaining the AT&T Global Network Client... 7 Installation... 8 Upgrading Previous Releases... 8 Installation... 8 Client... 8 Installation Package... 8 Mobility Kernel Extension Installation... 11 Connecting to the Network... 12 Starting the AT&T Global Network Client... 12 Connecting... 12 Token Authentication... 14 Software Token Authentication... 15 Generic Challenge/Response Authentication... 16 Connected... 16 Network Awareness... 17 Disconnect... 17 Connecting to a Specific Type of Network... 18 Mobility Connections... 19 Mobility Details... 19 Changing the Mobile Service... 20 Configuring Mobile Provider Settings... 21 SIM Locked... 23
Wi-Fi Connections... 24 Associating to a Specific Wi-Fi Hotspot... 24 Wi-Fi Access Using AT&T Mobility SIM... 25 VPN Connections... 26 VPN Security Banner... 26 Auto Reconnect... 27 Auto Switch Wi-Fi... 27 Auto Reconnect User Overrides... 28 Maintenance and Support... 29 Software Updates... 29 Settings... 29 Profile Management... 29 Overriding Service Manager Auto Proxy Settings... 30 Customer Service... 31 Product Logs... 31 Uninstall... 32 Connecting Without Saving to Keychain... 34 Appendix A: Supported Mobility Devices... 35
Overview The AT&T Global Network Client is a program that enables your Mac OS X computer to easily connect to the Internet and your company s private network. Using This Document This document is intended for all users of the AT&T Global Network Client for Mac as a tool to understand the basic function and configuration of the client. The reader is assumed to have basic knowledge of Mac OS X and computer networking. This document may refer you to your Help Desk or Customer Account Administrator for additional help on various topics. Your Customer Account Administrator is an employee at your company who can provide you with additional support and is usually a technical resource for your company.
AT&T Global Network Client Overview The AT&T Global Network Client for Mac is software that is designed to allow Mac OS devices to easily access the Internet and your company s private network from many locations around the world. It provides a simple, powerful interface that detects and connects over cellular, Wi-Fi, and broadband networks. It also provides in-depth diagnostic logging. Preparing for Installation System Requirements The AT&T Global Network Client for Mac and its components are supported on the following operating systems and hardware. (The AT&T Global Network Client has not been formally tested on other operating systems and lesser hardware): Operating System Mac OS 10.9 or 10.10 Hardware 80 MB free disk space Wi-Fi connection: wireless adapter Mobility connection: AT&T Beam, AT&T USBConnect Momentum, or AT&T USBConnect Shockwave Administrator Rights Required: The user must have Mac OS administrator rights when the installation is executed.
Requirements for Installation and Use Before starting the AT&T Global Network Client for Mac installation and setup, verify you have the information required in the following checklist. If you are missing any information, please contact your Customer Account Administrator. Mac OS administrator rights to install or upgrade Hardware/Equipment necessary to establish basic network connectivity. For example, an existing Internet connection via cable or DSL, Wi-Fi, or Mobility modem/card. For credential driven connections: Account User ID Password Obtaining the AT&T Global Network Client The AT&T Global Network Client can be downloaded from the public Internet (URL listed below). If you have previously installed the AT&T Global Network Client from a private FTP/Intranet download location, you may be using a custom version of the AT&T Global Network Client; contact your Customer Account Administrator to request an updated version. Package Client Package Download http://www.corp.att.com/agnc/mac/agnc_mac.pkg Figure 1: Download Location Table
Installation Upgrading Previous Releases If you already have the AT&T Global Network Client for Mac installed on your workstation it will be uninstalled during the upgrade. Your profiles will be saved during an upgrade. Installation Begin the installation by double-clicking on the installation package on your installation media (USB drive, software download, etc.). Client AT&T Global Network Client for Mac Installation Package agnc_mac.pkg Figure 2: Installation Package File Name Step 1 Click Continue on the Introduction window to continue. Figure 3: Installation Introduction Window
Step 2 You must agree to the License Agreement to continue. Click Continue and Agree to the terms and conditions. Figure 4: License Agreement Window Step 3 Select the disk where you would like to install the AT&T Global Network Client and click Continue. Figure 5: Select Destination Step 4 The installation will display how much disk space is required for the installation and provides an opportunity to change it prior to installing. Click Install to begin the installation. Figure 6: Installation Type
Step 5 Enter your local Mac OS administrator Name and Password to authorize the installation. If you are unsure of the credentials or do not have the required permissions, contact your Customer Account Administrator. Click Install Software to continue. Figure 7: Installation When the installation has completed, you will see a dialog to let you know that your computer must be restarted in order for the AT&T Global Network Client to be ready to use. Click Restart in order to restart your workstation. Figure 8: Installation Complete
Mobility Kernel Extension Installation The installation of the AT&T Global Network Client installs kernel extensions to enable use of the supported Mobility devices. Appendix A contains the list of Mobility Devices supported by the AT&T Global Network Client.
Connecting to the Network Most users are able to establish a connection with no manual configuration prior to their first connection. The AT&T Global Network Client is designed to include an Automatic Connection feature which will attempt a connection over the possible network types installed on your computer. Starting the AT&T Global Network Client To launch the AT&T Global Network Client open the Launchpad and click the AT&T Global Network Client icon. Connecting Step 1 Figure 9: AT&T Global Network Client Icon To connect, click the big green Connect button on the Main Window or click on the Connect button underneath the method desired, e.g. Wi-Fi. Figure 11: Wi-Fi Connect Button Figure 10: Main Window
Step 2 The first time you connect the AT&T Global Network Client will prompt you to enter your Account, User ID, and Password. Select the Service you wish to use to connect. This information should have been provided to you by your company s Customer Account Administrator. If you are unsure of the type of service, please check with your Customer Account Administrator. There are two types of network connections. Internet Access With this option, you can choose to connect to the Internet only. This option can be used if you are on a mobile computer at an AT&T or AT&T Partner Mobile Wi-Fi Hotspot IPSec VPN Tunnel This option will allow you to connect to your company s private Figure 12: Initial Profile Creation network over an existing broadband connection, over an AT&T Wi-Fi or AT&T partner Wi-Fi hot spot, or using your supported AT&T mobility device If you are only using the AT&T Global Network Client to connect to the Internet using an AT&T mobility device and your Customer Account Administrator has not provided you any credentials, select the Connect without credentials option to connect without entering any credentials. Click OK to continue the connection.
Step 3 After you click OK and your profile has been created, you will be prompted for the password you will use to connect. The password prompt dialog also allows you to change the profile you are going to use to connect if you have multiple profiles defined. Enter your password in the Password field and click OK to begin the connection. Token Authentication If you are using an authentication type which requires a PIN and token, enter your PIN immediately followed by the current token in the Password field. If your token is in the New PIN state when you Figure 13: Prompt for Password initiate the connection, the AT&T Global Network Client has been designed to prompt you to enter your new PIN. If your token is in the Next Card Code required state when you initiate the connection, the AT&T Global Network Client has been designed to prompt you for your next card code after you have successfully authenticated using your current PIN and token. Figure 14: Prompt for New PIN Figure 15: Prompt for Next Card Code
Software Token Authentication If the RSA SecureID Software Token Authenticator is installed, the AT&T Global Network Client will recognize it and issue a prompt asking if the Software Token should be used for authentication. Figure 16: Prompt for Next Card Code If the answer is Yes, the credentials screen will prompt you to enter your PIN to authenticate. The AT&T Global Network Client will automatically obtain the token code during authentication using the PIN you entered. Figure 17: Prompt for PIN.
Generic Challenge/Response Authentication The AT&T Global Network Client includes support for generic challenge/response authentication, in addition to the New PIN and Next Card Code challenge/response scenarios. This support is useful if your company uses one of a variety of challenge/response authentication methods, including bingo cards and the like. Generic challenge/response support requires the appropriate configuration in the AT&T authentication server. When properly configured, the AT&T Global Network Client will display the challenge text from your company s authentication servers and provide you the opportunity to enter the appropriate response to complete the authentication. Figure 18: Generic Challenge/Response Connected Included on the Main Window when connected are details on the current connection including the current connection media and the bytes sent and received in the last second. Figure 19: Main Window Connected
Network Awareness The Customer Account Administrator should detect which networks are currently available and will enable and disable the connection panels appropriately. The Connect button is programmed so you can still attempt to connect, even if the AT&T Global Network Client does not recognize an existing connection. Disconnect Figure 20: Main Window: Network Awareness To end your session click the orange Disconnect button on the Main Window. Figure 21: Disconnect
Connecting to a Specific Type of Network In general, simply clicking the main Connect button on the main window of the AT&T Global Network Client will connect you to your network using the best connectivity option available. However, there may be times when you wish to connect to a specific network, instead of letting the AT&T Global Network Client determine the best network option, such as if a Wi-Fi access point is not functioning properly or the signal strength is low and you would prefer to connect using mobility. Figure 22 Connecting Directly Using Cellular If you wish to connect using a specific type of network, just click the Connect button in the connectivity type panel for the connectivity type you want to use. For Wi-Fi connections, all hot spots in the area that can be detected will be listed, along with an indication of what type of hot spot each one is.
Mobility Connections The AT&T Global Network Client supports all Mobility Devices listed in Appendix A. AT&T Mobility kernel extensions should be installed automatically with the AT&T Global Network Client. When a Mobility connection is available, the Mobile panel should be enabled on the Main Window. Mobility Details Figure 23 Mobile Panel Mobility connection details can be viewed by clicking the Devices tab Figure 24 Mobility Details Panel
Changing the Mobile Service The mobile service (if supported by the mobility device) can be changed by clicking on Settings->Mobile- >Mobile Service Selection from the applications menu at the top of the screen. Figure 25 Mobile Service Selection Within the Mobile Service Selection drop-down Automatic sets the card to the manufacturer s default setting LTE Only enables the card to attach only to a 4G LTE network 3G Only enables the card to attach only to a 3G network The 3G Only option can be used to force the cellular connection to 3G for GSM devices. The AT&T Global Network Client does not include support for CDMA cellular devices. The mobile service can also be changed from the Settings->Mobile->Mobile Provider Setup window. See the Configuring Mobile Provider Settings section for more information.
Configuring Mobile Provider Settings Mobility Provider settings can be manually configured by clicking on Settings->Mobile->Mobile Provider Setup from the applications menu at the top of the screen. Figure 26 Mobile Provider Setup Navigation Some reasons you might need to manually configure Mobile Provider settings are: Your Customer Account Administrator has specifically instructed you to configure an APN or credentials to access your mobile network. The AT&T Global Network Client is not able to automatically determine your mobility provider or mobile network credentials. You need to modify your APN, mobile network credentials, or mobile service. The Mobile Provider Setup window will initially display the APN and mobile service that is currently configured on the mobile device.
Figure 27 Mobile Provider Setup initial display To manually configure a new APN, select Add custom APN from the Select APN to use dropdown. Enter the APN you received from your Customer Account Administrator and, if necessary, the mobile network credentials. It might also be necessary to modify the Mobile Service Selection. It is important that the correct Figure 28 Mobile Provider Setup Add APN mobile service is configured for your mobile network. For example, some mobile networks only support 3G, in which case a mobile connection cannot be established unless 3G is chosen as the mobile service. Figure 29 Mobile Provider Setup Add APN these settings. When the mobile provider information has been entered select the Use button. This will immediately configure your mobile device to use
SIM Locked If you are using a mobile device which has a SIM that is locked, the AT&T Global Network Client will prompt you for the PIN to unlock the SIM. This allows the device to be used for mobile connections. For security reasons, the SIM is only unlocked for the current session. Figure 30 Unlock SIM panel The SIM can also be unlocked by clicking on Settings->Mobile->Unlock SIM from the applications menu at the top of the screen. Figure 31 Unlock SIM navigation
Wi-Fi Connections The AT&T Global Network Client is designed to support connections to both public and private Wi-Fi hotspots. If wireless is enabled on your workstation, the Wi-Fi panel will be enabled on the Main Window of the client. By default, if there is no Ethernet connection currently available, the AT&T Global Network Client should automatically attempt to connect to an AT&T Wi-Fi or partner Wi-Fi hotspot nearby. The AT&T Global Network Client should attempt to connect using the AT&T Wi-Fi or partner Wi-Fi hotspot with the strongest signal strength first. It should then try other hotspots in order of signal strength if the previous connection attempt fails. Associating to a Specific Wi-Fi Hotspot If you would like to connect to a specific nearby hotspot for some reason, such as if there is no AT&T Wi-Fi or partner Wi-Fi hotspot nearby, or if you know that one of the nearby hotspots is working better than the default selection for some reason, you can pick which hotspot you wish to connect to by clicking on the Connect button in the Wi-Fi panel. You will then be shown a list of all the nearby hotspots. The currently available AT&T Wi-Fi and partner Wi-Fi hotspots will be displayed at the top of the dialog. Other available hot spots will be displayed at the bottom. If you select one of the AT&T Wi-Fi or partner Wi-Fi hotspots and click the Connect button on Figure 32: Main Window Wi-Fi Enabled this dialog, the AT&T Global Network Client will associate to the selected hotspot and perform the necessary authentication to establish your connection. If you are using a VPN account, the AT&T Global Network Client will also download your VPN configuration from the network and configure and establish your VPN connection for you at the same time. If you select one of the other available hotspots, and if that hotspot is not encrypted, the AT&T Global Network Client will attempt to associate to the hotspot for you. If you are using a VPN account, after the association is complete, the
AT&T Global Network Client will prompt you for your password. After you enter your password, the AT&T Global Network Client will attempt to download your VPN configuration from the network and configure and establish your VPN connection for you. If you select an available hotspot that is encrypted, the AT&T Global Network Client will prompt you for the Passphrase for that hotspot. After you enter the required login information for the hotspot and click OK the AT&T Global Network Client will attempt to associate to the hotspot, using the information you provided in this Figure 33: Select Wi-Fi Hotspot authentication attempt. If successful, and if you are using a VPN account, the AT&T Global Network Client should then prompt you for your VPN password. After you enter your password, the AT&T Global Network Client will attempt to download your VPN configuration from the network and configure and establish your VPN connection for you. Wi-Fi Access Using AT&T Mobility SIM AT&T offers Wi-Fi access to users with certain AT&T mobility service plans. The AT&T Global Network Client can be used to connect to supported Wi-Fi locations using the AT&T Mobility credentials read from your AT&T mobility device. Figure 34: Enter Hotspot Credentials Your mobility data device must be attached to your computer for the connection to work to the AT&T Wi-Fi hotspot. This option is included in your default connection sequence without any additional configuration needed by you.
VPN Connections If you are using a VPN service, after you have entered your credentials and the AT&T Global Network Client has set up any necessary Internet connection, the AT&T Global Network Client will download your VPN configuration from the network and configure and establish your VPN connection for you at the same time. VPN Security Banner Most VPN services require you comply with rules and regulations of the service. Before you can use your connection you must click OK on the Security Banner agreeing to the terms and conditions outlined by your company. Click Disconnect on the Security Banner to terminate your connection. Refer all questions about the terms and conditions outlined in your security banner message to your Customer Account Administrator. Figure 35: Security Banner
Auto Reconnect The Auto Reconnect feature offers a more seamless user experience by keeping you connected with minimal user interaction. The client will attempt to automatically connect or reconnect to the network whenever possible. Listed below are some use cases: You launch the client and your session token is not expired or you are using saved credentials. The client will automatically attempt to connect to the network without any user. You are traveling from one location to another. The client is running when you close your laptop while in transit. You re-open your laptop after arriving at your destination. The client will automatically reconnect. Network roaming. The client will automatically reconnect over another available network connection if the previous network connection is lost, regardless of connection type (Wi-Fi, Ethernet, Mobile). The Auto Reconnect feature is enabled by default for all users. If it is not enabled, your Administrator may have disabled this feature. Auto Switch Wi-Fi Auto Switch Wi-Fi is a sub feature of Auto Reconnect that switches network connectivity from a mobile network (wireless wan) to AT&T Wi-Fi hotspots. This allows users to conserve some mobile data usage and possibly provide a better network connection. The Auto Reconnect feature must be enabled to use Auto Switch Wi-Fi. Auto Switch Wi-Fi is disabled by default therefore it must be enabled by your Administrator or through the user overrides within the AT&T Global Network Client. By default, Auto Switch Wi-Fi will prompt you before switching your connection to Wi-Fi, to obtain confirmation that you would like to use Wi-Fi instead of your mobile connection. Your response can be saved for the day or a week. Figure 36: Auto Switch Prompt The client can also be configured to automatically switch your network connection when an AT&T Wi-Fi hotspot is in range without prompting.
Auto Reconnect User Overrides If your administrator has granted access, you can modify Auto Reconnect settings. The following settings can be modified by selecting Auto Reconnect Options on the Profiles screen: Override Defaults Selecting this checkbox allows you to use Auto Reconnect settings that are different than your administrator s default settings. Automatically reconnect Enables/Disables the Auto Reconnect feature. Switch to attwifi or partner hotspot when in range Enables/Disables the Auto Switch Wi-Fi feature. Time before switching Number of seconds the client should wait before switching to Wi-Fi when a hotspot has been detected. The purpose of this setting is to prevent the client from repeatedly prompting you if hotspots are coming in range, but only momentarily. Minimum signal strength Minimum hotspot signal strength required for the client to switch the connection from the mobile network to Wi-Fi. Prompt before switching to Wi-Fi When this checkbox is enabled, you will be prompted before the client switches your network connection. This gives you the opportunity to selectively utilize the Auto Switch Wi-Fi feature. If disabled, the client will automatically switch to Wi-Fi when the hotspot is in range, without prompting you. Figure 37: Profile Settings Figure 38: Auto Reconnect Options
Maintenance and Support Software Updates To manually initiate a check for updates, click on the Maintenance & Support icon on the top of the AT&T Global Network Client and select the Product Updates tab. You will not be automatically notified of new updates. Figure 40: Update Available Click the Check for Available Updates button to initiate a check for an updated Hotspot Directory. If an update is available, the Update button will become enabled. Click the Update button to download and install the updated Hotspot Directory. Figure 39: Software Updates Settings Your Customer Account Administrator has preconfigured your network settings in a central AT&T network server. When you connect to the AT&T Global Network, the AT&T Global Network Client should retrieve those settings and apply them to your connection. Profile Management The AT&T Global Network Client stores user information in profiles. A profile includes:
Profile Name Account User ID Service Most users connect with the same information a majority of the time and will only require one profile. If you connect with different user IDs or services you may want to define profiles for your common combinations to easily switch between them. The AT&T Global Network Client profiles can be assigned common names to help you remember when to use them, for example, "My Internet Profile" or "VPN Servers - Germany". Overriding Service Manager Auto Proxy Settings If you want to add your own Auto proxy settings, We have added fields, one takes the auto proxy URL and the other one IP address and the port number. Once done entering the proxy settings hit save proxy. You will be notified about the savings. Note: Settings will be effective only if the client is in disconnect state and only give Auto Proxy URL or Proxy server not both at a time.
Customer Service If you need to contact the help desk for assistance with the AT&T Global Network Client you can find the help desk phone number for your country by clicking Maintenance & Support and selecting the Customer Svc. Tab. Select your country from the dropdown list and the help desk phone numbers for your country will be displayed. All countries have help desk staff that speak both the local language and English. You should call the phone number for the country to which you are trying to connect. Product Logs Figure 41: Customer Service When working with the help desk, the help desk representatives may want to see logs from the AT&T Global Network Client. To access the logs, click Maintenance & Support and select the Product Logs tab. You will be able to zip the logs into a single archive to share with the help desk. There is also an option to upload the log files to the help desk. Figure 42: Product Logs
If you have been instructed to upload the log files, you will be prompted with the Upload Logs window. Please enter the required First Name, Last Name, and help desk Ticket Number. In the Problem Description field please provide the steps taken to create the problem along with any other specific details that will help troubleshoot the problem. An optional Reference Code can be provided for your own tracking purposes. Click Submit to send the log files to the help desk after filling in your information. Figure 43: Upload Logs Uninstall The AT&T Global Network Client is removed via the AT&T Global Network Client Uninstaller icon in the Launchpad. Figure 44: Uninstall Icon in Launchpad Step 1 Click AT&T Global Network Client Uninstaller. Step 2 Click the Uninstall button on the AT&T Global Network Client Uninstaller. Figure 45: AT&T Global Network Client Uninstaller
Step 3 You will be prompted for your Mac OS administrator password for your computer in order to complete the removal of the AT&T Global Network Client will. Click OK to proceed with the uninstall. The removal of the AT&T Global Network Client will complete silently. No additional prompts will be displayed. Figure 46: Uninstaller Permission Prompt
Connecting Without Saving to Keychain The AT&T Global Network Client performs network configuration tasks that require administrative privileges at connect and disconnect time. Therefore, by default, the AT&T Global Network Client will create a keychain entry using your MAC OS X username and password, so that you are not prompted every time the AT&T Global Network Client connects or disconnects. If you prefer to use the AT&T Global Network Client without creating a keychain entry, deselect the Save username and password in Keychain checkbox. You will be presented with MAC OS X prompts if those credentials are needed to connect or disconnect you from the network.
Appendix A: Supported Mobility Devices Device drivers for the following list of devices can be installed automatically with the AT&T Global Network Client. Mobility Device AT&T Client Minimum Version AT&T Beam 1.2 AT&T USBConnect Momentum 4G 1.0 AT&T USBConnect Shockwave 1.0 AT&T USBConnect Adrenaline 1.0 Last Client Release Supported