|  |   | 
| (4 intermediate revisions by the same user not shown) | 
| Line 1: | Line 1: | 
|  | =Uni-ID=
 |  | #REDIRECT [[TalTech VPN]] | 
|  | * EST https://wiki.ttu.ee/et:juhendid:it:doc:uni-id
 |  | 
|  | * ENG https://wiki.ttu.ee/en:manuals:it:doc:uni-id
 |  | 
|  |   |  | 
|  | Uni-ID is required to use TTU VPN.
 |  | 
|  |   |  | 
|  | =Forticlient VPN=
 |  | 
|  | '''FortiClient VPN is for employees only.''' Does not allow to access the TTU library outside university. You will get only a secure VPN connection.
 |  | 
|  |   |  | 
|  | * EST https://wiki.ttu.ee/et:juhendid:it:doc:vpn
 |  | 
|  | * ENG https://wiki.ttu.ee/en:manuals:it:doc:vpn
 |  | 
|  |   |  | 
|  | ==Packages==
 |  | 
|  | * clean client https://www.forticlient.com/downloads
 |  | 
|  | * for MS Windows, TTU preconfigured http://www.ttu.ee/FortiClient.exe
 |  | 
|  | * for MS Windows, [https://portal.itcollege.ee:10443/SslvpnClient.exe IT College client] (requires login beforehand, usually older version than original one from Fortinet)
 |  | 
|  | * [https://forticlient.com/downloads original FortiClient software packages (MS Windows, macOS, GNU/Linux, Android, iOS, Windows Phone, Chromebook)]
 |  | 
|  | * Debian packages
 |  | 
|  | ** FortiClient (deprecated -> use OpenFortiGUI)
 |  | 
|  | *** repository https://apt.iteas.at (older: https://styrion.at/apt/)
 |  | 
|  | *** https://hadler.me/linux/forticlient-sslvpn-deb-packages/
 |  | 
|  | **OpenFortiGUI
 |  | 
|  | *** Ubuntu 16.04 repository https://styrion.at/apt/ (deprecated repo)
 |  | 
|  | *** Ubuntu 16.04, 18.04, Debian Stretch https://apt.iteas.at
 |  | 
|  | *** https://hadler.me/linux/openfortigui/
 |  | 
|  |   |  | 
|  | ==Connecting==
 |  | 
|  | * use your Uni-ID credentials to login
 |  | 
|  | * Web: https://vpn.ttu.ee:443/
 |  | 
|  | * server: '''vpn.ttu.ee'''
 |  | 
|  | * port: 443
 |  | 
|  |   |  | 
|  | '''... in IT College:'''
 |  | 
|  | * use your IT College credentials to login
 |  | 
|  | * Web: https://portal.itcollege.ee:10443/
 |  | 
|  | * server: '''portal.itcollege.ee'''
 |  | 
|  | * port: 10443
 |  | 
|  |   |  | 
|  | In IT College there is an option to use SSH tunnel using http://enos.itcollege.ee/ server using your IT College credentials. For convenient usage there is a [[Sshuttle]] (article in Estonian) available. This SSH tunnel is available also for students. MS Windows users [https://www.startpage.com/do/search?q=putty+SSH+tunnel can use puTTY]. Also macOS users [https://www.startpage.com/do/search?q=SSH+tunnel+macOS can use SSH tunnel].
 |  | 
|  |   |  | 
|  | =OpenVPN=
 |  | 
|  | Allows to access the TTU library outside university. Additionally you will get a secure VPN connection. Uni-ID is required.
 |  | 
|  | * EST https://wiki.ttu.ee/et:juhendid:it:doc:lib_toru
 |  | 
|  | * ENG https://wiki.ttu.ee/en:manuals:it:doc:lib_toru
 |  | 
|  |   |  | 
|  | ==Client software==
 |  | 
|  | * for MS Windows and macOS clients, please login https://toru.ttu.ee/ and download university-customized version directly from there
 |  | 
|  | ** [https://openvpn.net/client-connect-vpn-for-windows/ official OpenVPN client for MS Windows] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-windows/ documentation]
 |  | 
|  | ** [https://openvpn.net/client-connect-vpn-for-mac-os/ official OpenVPN client for macOS] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/ documentation]
 |  | 
|  | * GNU/Linux https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/
 |  | 
|  | * Android https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-android/
 |  | 
|  | * iOS https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-apple-ios/
 |  | 
|  |   |  | 
|  | ==Installation in Debian/Ubuntu==
 |  | 
|  | * open the terminal, e.g. CTRL+ALT+T and copy-paste the following line and press ''Enter''
 |  | 
|  | ** copy-paste in terminal: SHIFT+CTRL+C, SHIFT+CTRL+V
 |  | 
|  | * ''sudo apt-get update && sudo apt-get install openvpn openvpn-blacklist && sudo apt-get clean''
 |  | 
|  | * for GUI Network Manager:
 |  | 
|  | ** ''sudo apt-get update && sudo apt-get install network-manager-openvpn-gnome openvpn-systemd-resolved''<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Network Manager]</ref>
 |  | 
|  |   |  | 
|  | ==Configuration==
 |  | 
|  | * download the preconfigured ''client.ovpn'' from https://toru.ttu.ee/
 |  | 
|  | * use your Uni-ID credentials to login and also later to authenticate in OpenVPN
 |  | 
|  | * for GNU/Linux in file ''client.ovpn'' after ''setenv PUSH_PEER_INFO'' please add the following lines and then save the file:
 |  | 
|  | ''script-security 2''<br>
 |  | 
|  | ''up /etc/openvpn/update-resolv-conf''<br>
 |  | 
|  | ''down /etc/openvpn/update-resolv-conf''
 |  | 
|  |   |  | 
|  | ==Connecting in Debian/Ubuntu==
 |  | 
|  | * use your Uni-ID credentials
 |  | 
|  | * open the terminal, e.g. using CTRL+ALT+T
 |  | 
|  | * navigate to folder where the ''client.ovpn'' is saved or provide the full path
 |  | 
|  | * ''sudo openvpn --config client.ovpn'' or use more convenient way - the alias created below
 |  | 
|  |   |  | 
|  | Usually there is possible to import *.ovpn files into graphical network manager<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Import .ovpn to Network Manager]</ref>. In Ubuntu 16.04 LTS cannot be imported current but in Ubuntu 18.04 LTS already can.
 |  | 
|  |   |  | 
|  | ==Convenient login in GNU/Linux==
 |  | 
|  | * open the terminal, e.g. using CTRL+ALT+T
 |  | 
|  | * create an alias:
 |  | 
|  | ** ''nano ~/.bash_aliases'' #open CLI text editor
 |  | 
|  | ** ''alias vpn-ttu='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file
 |  | 
|  | * ''source ~/.bash_aliases'' (or reopen terminal or relogin)
 |  | 
|  | * add permissions to run OpenVPN without entering a password
 |  | 
|  | ** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like
 |  | 
|  | ** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file
 |  | 
|  | * type your new alias ''vpn-ttu'' in terminal to start a VPN session
 |  | 
|  |   |  | 
|  |   |  | 
|  | '''in nano text editor'''
 |  | 
|  | * save the file:
 |  | 
|  | ** CTRL+O and ''Enter'' if you agree the proposed file name (or enter a new one if needed)
 |  | 
|  | ** or F3
 |  | 
|  | * quit the file:
 |  | 
|  | ** CTRL+X
 |  | 
|  | ** or F2
 |  | 
|  |   |  | 
|  |   |  | 
|  | '''More information about...'''
 |  | 
|  | * ''sudoers'' at https://help.ubuntu.com/community/Sudoers
 |  | 
|  | * ''alias''
 |  | 
|  | ** https://askubuntu.com/questions/1414/how-to-create-a-permanent-alias
 |  | 
|  | ** EST [[Alias bash shellis]]
 |  | 
|  | ** EST https://viki.pingviin.org/Alias
 |  | 
|  |   |  | 
|  | =Benefits of TTU VPN=
 |  | 
|  | * you have a secure tunnel over insecure network, e.g. public WiFi, mobile internet or similar
 |  | 
|  | * can use TTU library and its paid databases outside TTU http://www.ttu.ee/asutused/raamatukogu/10640/andmebaasid-databases/
 |  | 
|  |   |  | 
|  | =TTU helpdesk=
 |  | 
|  | * in case of questions, issues - please contact TTU helpdesk
 |  | 
|  | ** https://wiki.ttu.ee/en:manuals:it:doc:contacts
 |  | 
|  | ** http://it.taltech.ee/ (choose website language if needed)
 |  | 
|  | ** self-service: http://helpdesk.ttu.ee (to visit self-service you must own [[#Uni-ID|Uni-ID account]])
 |  | 
|  |   |  | 
|  | =References=
 |  | 
|  | <references />
 |  | 
|  |   |  | 
|  | [[Category:TTU]]
 |  |