Difference between revisions of "Cisco VPN"

From ITSwiki
Jump to: navigation, search
[quality revision][quality revision]
(Setup on Windows)
(Access to DTU Compute network using central DTU (AIT) Cisco VPN service with the Cisco AnyConnect client)
Line 1: Line 1:
 
=== Access to DTU Compute network using central DTU (AIT) Cisco VPN service with the Cisco AnyConnect client===
 
=== Access to DTU Compute network using central DTU (AIT) Cisco VPN service with the Cisco AnyConnect client===
You get access to general DTU services and if your primary affiliation (guest or employe) at DTU is with '''DTU Compute''', you get access to the DTU Compute network as well.
+
You get access to general DTU services, and if your primary affiliation (guest or employee) at DTU is with '''DTU Compute''', you get access to the DTU Compute network as well.
  
You may also use [[OpenVPN]], but this does not work on IOS devices like Ipads. On most Android devices Cisco VPN does not work.
+
You may also use [[OpenVPN]]. This is needed If your primary affiliation is not '''DTU Compute''', but you need to access DTU Compute resources.
  
This is a detailed description for use on Ipads. (DTU AIT has a [http://portalen.dtu.dk/Administrationen/Adm_faelles/AIT/FAQ_wiki.aspx/VPN/Vpn%20vejledning%20for%20adm%20fotonik%20danchip%20og%20nanotech description of the VPN service for use in the administration] which you can also have a look at),
+
DTU AIT has a [https://www.inside.dtu.dk/da/medarbejder/it-og-telefoni/it-support-og-kontakt/guides/remote/vpn-cisco-anyconnect?rfb=eyJwIjpmYWxzZSwidWlkIjoiMjYzMTA5ODgtYWViOS00YzAyLWI1ZWQtNDg0NDIwZTZjZGJhIiwic2NwIjoiaW50ZXJuYWwiLCJrYmlkIjozNTAsInNpZCI6IlVDUWhqU0ltNnJsd2U4LWhrRUV1b2ciLCJhaWQiOjExMzIwNzIsInNlY2lkIjo3MDMwMzIyOCwic3QiOiJ3ZWJfc2NyYXBlIn0 guide on inside] If this is no longer available, try searching for VPN on Inside.
  
Note; the use of CiscoVPN requires MultiFactor Authentication (MFA) (see https://www.inside.dtu.dk/da/medarbejder/it-og-telefoni/it-support-og-kontakt/guides/mfa)
+
Note: the use of CiscoVPN requires Multifactor Authentication (MFA) (see https://www.inside.dtu.dk/da/medarbejder/it-og-telefoni/it-support-og-kontakt/guides/mfa)
  
 
==Setup on Windows==
 
==Setup on Windows==

Revision as of 17:14, 24 November 2023

Access to DTU Compute network using central DTU (AIT) Cisco VPN service with the Cisco AnyConnect client

You get access to general DTU services, and if your primary affiliation (guest or employee) at DTU is with DTU Compute, you get access to the DTU Compute network as well.

You may also use OpenVPN. This is needed If your primary affiliation is not DTU Compute, but you need to access DTU Compute resources.

DTU AIT has a guide on inside If this is no longer available, try searching for VPN on Inside.

Note: the use of CiscoVPN requires Multifactor Authentication (MFA) (see https://www.inside.dtu.dk/da/medarbejder/it-og-telefoni/it-support-og-kontakt/guides/mfa)

Setup on Windows

  • Go to https://net.ait.dtu.dk/vpn/ and logon with your DTU credentials
  • Download version for your OS (Windows, Mac)
  • Install the client from the download
  • Once you connect, connect to the server vpn.dtu.dk using your DTU credentials

Setup on Linux

You can use either the official Cisco AnyConnect client for Linux or the compatible OpenConnect. For Debian based distros (Ubuntu) you can install OpenConnect with:

sudo apt install network-manager-openconnect-gnome

This will also install the GUI configuration under system settings (Network > VPN).

Ait-vpn-openconnect1.png

Important settings here are:

  • VPN Protocol = Cisco AnyConnect or openconnct
  • Gateway = vpn.dtu.dk
  • User Agent = AnyConnect

OpenConnect can also be started from the commandline:

sudo openconnect --useragent=AnyConnect vpn.dtu.dk

Setup on Ipad/Iphone

Go to Appstore on your device and download the following app: "Cisco AnyConnect"

Now open the "Cisco AnyConnect" app. If a window appears asking for permission to enable the software, click "OK".

Go to the left side of the screen and select "Add VPN connection..." .

In the window that appears, select "Server Address" and type: "vpn.dtu.dk", then click "Save" in the top right corner.

Back in the main window, go to the top left corner and move the switch at "AnyConnect VPN" from "OFF" to "ON".

In the window that appears set the following values:

Username: Your DTU username (same as for Portalen)
Password: Your DTU password

Now click "Connect" and exit the app.

Access Windows host with Remote Desktop on Ipad

Go to Appstore on your device and download the following app: "Microsoft remote desktop" (this is free, but there are several other remote desktop apps). Open the "Microsoft remote desktop" app and click "New Remote Desktop". In the pop-up window click "PC name" and type:

the address of the windows host you want to access like comp-mypc.compute.dtu.dk.

Click "Save". Now click "User name" and set the following values:

Username: Your DTU username
Password: Your DTU password

Then click "Save". Click "Save" again to return to the main window. Now the IP address of your remote desktop has appeared together with your username under the heading "Remote Desktops". Click on the remote computer and select "Connect always". In the "Logon" window select "Password" and type: Your DTU password. Select "Logon".