Difference between revisions of "Cisco VPN"

From ITSwiki
Jump to: navigation, search
[quality revision][quality revision]
m (Access to Compute network via AITs Cisco VPN service with the anyconnect client)
Line 1: Line 1:
=== Access to Compute network via AITs Cisco VPN service with the anyconnect client===
+
=== Access to DTU Compute network using central DTU (AIT) Cisco VPN service with the Cisco AnyConnect client===
 
You get access to general DTU services and if your primary affiliation (guest or employe) at DTU is with DTU Compute, you get access to the DTU Compute network as well.
 
You get access to general DTU services and if your primary affiliation (guest or employe) at DTU is with DTU Compute, you get access to the DTU Compute network as well.
  
You may also use [[OpenVPN]], but this does not work on IOS devices like Ipads. On most android devices Cisco VPN does not work.
+
You may also use [[OpenVPN]], but this does not work on IOS devices like Ipads. On most Android devices Cisco VPN does not work.
  
 
This is a detailed description for use on Ipads. (DTU AIT has a [http://portalen.dtu.dk/Administrationen/Adm_faelles/AIT/FAQ_wiki.aspx/VPN/Vpn%20vejledning%20for%20adm%20fotonik%20danchip%20og%20nanotech description of the VPN service for use in the administration] which you can also have a look at),
 
This is a detailed description for use on Ipads. (DTU AIT has a [http://portalen.dtu.dk/Administrationen/Adm_faelles/AIT/FAQ_wiki.aspx/VPN/Vpn%20vejledning%20for%20adm%20fotonik%20danchip%20og%20nanotech description of the VPN service for use in the administration] which you can also have a look at),
Line 9: Line 9:
  
 
==Setup on Windows==
 
==Setup on Windows==
* Go to https://vpn.dtu.dk and logon with std. DTU credentials
+
* Go to https://net.ait.dtu.dk/vpn/ and logon with your DTU credentials
* In the menu to the left, select '''AnyConnect'''
+
* Download version for your OS (Windows, Mac or Linux)
* Follow the instructions and install the client.
+
* Install the client from the download
* Once you connect, connect to the server '''vpn.dtu.dk''' using std. DTU credentials '''[Update related to Corona: if vpn.dtu.dk does not work try extra-vpn.ait.dtu.dk]'''
+
* Once you connect, connect to the server '''vpn.dtu.dk''' using your DTU credentials '''[Update related to Corona: if vpn.dtu.dk does not work try extra-vpn.dtu.dk]'''
  
 
==Setup on Linux==
 
==Setup on Linux==

Revision as of 17:56, 18 May 2022

Access to DTU Compute network using central DTU (AIT) Cisco VPN service with the Cisco AnyConnect client

You get access to general DTU services and if your primary affiliation (guest or employe) at DTU is with DTU Compute, you get access to the DTU Compute network as well.

You may also use OpenVPN, but this does not work on IOS devices like Ipads. On most Android devices Cisco VPN does not work.

This is a detailed description for use on Ipads. (DTU AIT has a description of the VPN service for use in the administration which you can also have a look at),

Note; the use of CiscoVPN requires MultiFactor Authentication (MFA) (see https://www.inside.dtu.dk/da/Medarbejder/IT-og-telefoni/IT-systemer-og-vaerktoejer/IT-systemer-AIT/Multi-Factor-Authentication/Setting-up-MFA-for-Internal-Systems)

Setup on Windows

  • Go to https://net.ait.dtu.dk/vpn/ and logon with your DTU credentials
  • Download version for your OS (Windows, Mac or Linux)
  • Install the client from the download
  • Once you connect, connect to the server vpn.dtu.dk using your DTU credentials [Update related to Corona: if vpn.dtu.dk does not work try extra-vpn.dtu.dk]

Setup on Linux

You can use either the official Cisco AnyConnect client for Linux or the compatible OpenConnect. For Debian based distros (Ubuntu) you can install OpenConnect with:

sudo apt install network-manager-openconnect-gnome

This will also install the GUI configuration under system settings (Network > VPN).

Ait-vpn-openconnect.png

Important settings here are:

  • VPN Protocol = Cisco AnyConnect or openconnct
  • Gateway = vpn.dtu.dk
  • Reported OS = win

OpenConnect can also be started from the commandline:

sudo openconnect vpn.dtu.dk --os win

Setup on Ipad/Iphone

Go to Appstore on your device and download the following app: "Cisco AnyConnect"

Now open the "Cisco AnyConnect" app. If a window appears asking for permission to enable the software, click "OK".

Go to the left side of the screen and select "Add VPN connection..." .

In the window that appears, select "Server Address" and type: "vpn.dtu.dk", then click "Save" in the top right corner.

Back in the main window, go to the top left corner and move the switch at "AnyConnect VPN" from "OFF" to "ON".

In the window that appears set the following values:

Username: Your DTU username (same as for Portalen)
Password: Your DTU password

Now click "Connect" and exit the app.

Access Windows host with Remote Desktop on Ipad

Go to Appstore on your device and download the following app: "Microsoft remote desktop" (this is free, but there are several other remote desktop apps). Open the "Microsoft remote desktop" app and click "New Remote Desktop". In the pop-up window click "PC name" and type:

the address of the windows host you want to access like comp-mypc.compute.dtu.dk.

Click "Save". Now click "User name" and set the following values:

Username: Your DTU username
Password: Your DTU password

Then click "Save". Click "Save" again to return to the main window. Now the IP address of your remote desktop has appeared together with your username under the heading "Remote Desktops". Click on the remote computer and select "Connect always". In the "Logon" window select "Password" and type: Your DTU password. Select "Logon".