|
|
| Line 1: |
Line 1: |
| − | =Uni-ID=
| + | #REDIRECT [[TalTech VPN]] |
| − | * EST https://wiki.ttu.ee/et:juhendid:it:doc:uni-id
| |
| − | * ENG https://wiki.ttu.ee/en:manuals:it:doc:uni-id
| |
| − | | |
| − | Uni-ID is required to use TTU VPN.
| |
| − | | |
| − | =Forticlient VPN=
| |
| − | '''FortiClient VPN is for employees only.''' Does not allow to access the TTU library outside university. You will get only a secure VPN connection.
| |
| − | | |
| − | * EST https://wiki.ttu.ee/et:juhendid:it:doc:vpn
| |
| − | * ENG https://wiki.ttu.ee/en:manuals:it:doc:vpn
| |
| − | | |
| − | ==Packages==
| |
| − | * clean client https://www.forticlient.com/downloads
| |
| − | * for MS Windows, TTU preconfigured http://www.ttu.ee/FortiClient.exe
| |
| − | * for MS Windows, [https://portal.itcollege.ee:10443/SslvpnClient.exe IT College client] (requires login beforehand, usually older version than original one from Fortinet)
| |
| − | * [https://forticlient.com/downloads original FortiClient software packages (MS Windows, macOS, GNU/Linux, Android, iOS, Windows Phone, Chromebook)]
| |
| − | * Debian packages
| |
| − | ** FortiClient (deprecated -> use OpenFortiGUI)
| |
| − | *** repository https://apt.iteas.at (older: https://styrion.at/apt/)
| |
| − | *** https://hadler.me/linux/forticlient-sslvpn-deb-packages/
| |
| − | **'''OpenFortiGUI - recommended'''
| |
| − | *** Ubuntu 16.04 repository https://styrion.at/apt/ (deprecated repo)
| |
| − | *** Ubuntu 16.04, 18.04, Debian Stretch https://apt.iteas.at
| |
| − | *** https://hadler.me/linux/openfortigui/ - direct .deb packages
| |
| − | | |
| − | ==Connecting==
| |
| − | * use your Uni-ID credentials to login
| |
| − | * Web: https://vpn.ttu.ee:443/
| |
| − | * server: '''vpn.ttu.ee'''
| |
| − | * port: 443
| |
| − | | |
| − | '''... in IT College:'''
| |
| − | * use your IT College credentials to login
| |
| − | * Web: https://portal.itcollege.ee:10443/
| |
| − | * server: '''portal.itcollege.ee'''
| |
| − | * port: 10443
| |
| − | | |
| − | In IT College there is an option to use SSH tunnel using http://enos.itcollege.ee/ server using your IT College credentials. For convenient usage there is a [[Sshuttle]] (article in Estonian) available. This SSH tunnel is available also for students. MS Windows users [https://www.startpage.com/do/search?q=putty+SSH+tunnel can use puTTY]. Also macOS users [https://www.startpage.com/do/search?q=SSH+tunnel+macOS can use SSH tunnel].
| |
| − | | |
| − | =OpenVPN=
| |
| − | Allows to access the TTU library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID|Uni-ID account]] is required.
| |
| − | * EST https://wiki.ttu.ee/et:juhendid:it:doc:lib_toru
| |
| − | * ENG https://wiki.ttu.ee/en:manuals:it:doc:lib_toru
| |
| − | | |
| − | ==Client software==
| |
| − | * for MS Windows and macOS clients, please login https://toru.ttu.ee/ and download university-customized version directly from there
| |
| − | ** [https://openvpn.net/client-connect-vpn-for-windows/ official OpenVPN client for MS Windows] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-windows/ documentation]
| |
| − | ** [https://openvpn.net/client-connect-vpn-for-mac-os/ official OpenVPN client for macOS] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/ documentation]
| |
| − | * GNU/Linux https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/
| |
| − | * Android https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-android/
| |
| − | * iOS https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-apple-ios/
| |
| − | | |
| − | ==Installation in Debian/Ubuntu==
| |
| − | * open the terminal, e.g. CTRL+ALT+T and copy-paste the following line and press ''Enter''
| |
| − | ** copy-paste in terminal: SHIFT+CTRL+C, SHIFT+CTRL+V
| |
| − | * ''sudo apt-get update && sudo apt-get install openvpn openvpn-blacklist && sudo apt-get clean''
| |
| − | * for GUI Network Manager:
| |
| − | ** ''sudo apt-get update && sudo apt-get install network-manager-openvpn-gnome openvpn-systemd-resolved''<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Network Manager]</ref>
| |
| − | | |
| − | ==Configuration==
| |
| − | * download the preconfigured ''client.ovpn'' from https://toru.ttu.ee/
| |
| − | * use your [[#Uni-ID|Uni-ID]] credentials to login and also later to authenticate in OpenVPN
| |
| − | * for GNU/Linux in file ''client.ovpn'' after ''setenv PUSH_PEER_INFO'' please add the following lines and then save the file:
| |
| − | ''script-security 2''<br>
| |
| − | ''up /etc/openvpn/update-resolv-conf''<br>
| |
| − | ''down /etc/openvpn/update-resolv-conf''
| |
| − | | |
| − | ==Connecting in Debian/Ubuntu==
| |
| − | * use your Uni-ID credentials
| |
| − | * open the terminal, e.g. using CTRL+ALT+T
| |
| − | * navigate to folder where the ''client.ovpn'' is saved or provide the full path
| |
| − | * ''sudo openvpn --config client.ovpn'' or use more convenient way - the alias created below
| |
| − | | |
| − | Usually there is possible to import *.ovpn files into graphical network manager<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Import .ovpn to Network Manager]</ref>. In Ubuntu 16.04 LTS cannot be imported current but in Ubuntu 18.04 LTS already can.
| |
| − | | |
| − | ==Convenient login in GNU/Linux==
| |
| − | * open the terminal, e.g. using CTRL+ALT+T
| |
| − | * create an alias:
| |
| − | ** ''nano ~/.bash_aliases'' #open CLI text editor
| |
| − | ** ''alias vpn-ttu='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file
| |
| − | * ''source ~/.bash_aliases'' (or reopen terminal or relogin)
| |
| − | * add permissions to run OpenVPN without entering a password
| |
| − | ** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like
| |
| − | ** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file
| |
| − | * type your new alias ''vpn-ttu'' in terminal to start a VPN session
| |
| − | | |
| − | | |
| − | '''in nano text editor'''
| |
| − | * save the file:
| |
| − | ** CTRL+O and ''Enter'' if you agree the proposed file name (or enter a new one if needed)
| |
| − | ** or F3
| |
| − | * quit the file:
| |
| − | ** CTRL+X
| |
| − | ** or F2
| |
| − | | |
| − | | |
| − | '''More information about...'''
| |
| − | * ''sudoers'' at https://help.ubuntu.com/community/Sudoers
| |
| − | * ''alias''
| |
| − | ** https://askubuntu.com/questions/1414/how-to-create-a-permanent-alias
| |
| − | ** EST [[Alias bash shellis]]
| |
| − | ** EST https://viki.pingviin.org/Alias
| |
| − | | |
| − | =Benefits of TTU VPN=
| |
| − | * you have a secure tunnel over insecure network, e.g. public WiFi, mobile internet or similar
| |
| − | * can use TTU library and its paid databases outside TTU http://www.ttu.ee/asutused/raamatukogu/10640/andmebaasid-databases/
| |
| − | | |
| − | =TTU helpdesk=
| |
| − | * in case of questions, issues - please contact TTU helpdesk
| |
| − | ** https://wiki.ttu.ee/en:manuals:it:doc:contacts
| |
| − | ** http://it.taltech.ee/ (choose website language if needed)
| |
| − | ** self-service: http://helpdesk.ttu.ee (to visit self-service you must own [[#Uni-ID|Uni-ID account]])
| |
| − | | |
| − | =References=
| |
| − | <references />
| |
| − | | |
| − | [[Category:TTU]]
| |
