Difference between revisions of "TTU VPN"

From ICO wiki
m (Packages)
m (Redirected page to TalTech VPN)
(Tag: New redirect)
 
Line 1: Line 1:
=Uni-ID=
+
#REDIRECT [[TalTech VPN]]
* EST https://wiki.ttu.ee/et:juhendid:it:doc:uni-id
 
* ENG https://wiki.ttu.ee/en:manuals:it:doc:uni-id
 
 
 
Uni-ID is required to use TTU VPN.
 
 
 
=Forticlient VPN=
 
'''FortiClient VPN is for employees only.''' Does not allow to access the TTU library outside university. You will get only a secure VPN connection.
 
 
 
* EST https://wiki.ttu.ee/et:juhendid:it:doc:vpn
 
* ENG https://wiki.ttu.ee/en:manuals:it:doc:vpn
 
 
 
==Packages==
 
* clean client https://www.forticlient.com/downloads
 
* for MS Windows, TTU preconfigured http://www.ttu.ee/FortiClient.exe
 
* for MS Windows, [https://portal.itcollege.ee:10443/SslvpnClient.exe IT College client] (requires login beforehand, usually older version than original one from Fortinet)
 
* [https://forticlient.com/downloads original FortiClient software packages (MS Windows, macOS, GNU/Linux, Android, iOS, Windows Phone, Chromebook)]
 
* Debian packages
 
** FortiClient (deprecated -> use OpenFortiGUI)
 
*** repository https://apt.iteas.at (older: https://styrion.at/apt/)
 
*** https://hadler.me/linux/forticlient-sslvpn-deb-packages/
 
**'''OpenFortiGUI - recommended'''
 
*** Ubuntu 16.04 repository https://styrion.at/apt/ (deprecated repo)
 
*** Ubuntu 16.04, 18.04, Debian Stretch https://apt.iteas.at
 
*** https://hadler.me/linux/openfortigui/ - direct .deb packages
 
 
 
==Connecting==
 
* use your Uni-ID credentials to login
 
* Web: https://vpn.ttu.ee:443/
 
* server: '''vpn.ttu.ee'''
 
* port: 443
 
 
 
'''... in IT College:'''
 
* use your IT College credentials to login
 
* Web: https://portal.itcollege.ee:10443/
 
* server: '''portal.itcollege.ee'''
 
* port: 10443
 
 
 
In IT College there is an option to use SSH tunnel using http://enos.itcollege.ee/ server using your IT College credentials. For convenient usage there is a [[Sshuttle]] (article in Estonian) available. This SSH tunnel is available also for students. MS Windows users [https://www.startpage.com/do/search?q=putty+SSH+tunnel can use puTTY]. Also macOS users [https://www.startpage.com/do/search?q=SSH+tunnel+macOS can use SSH tunnel].
 
 
 
=OpenVPN=
 
Allows to access the TTU library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID|Uni-ID account]] is required.
 
* EST https://wiki.ttu.ee/et:juhendid:it:doc:lib_toru
 
* ENG https://wiki.ttu.ee/en:manuals:it:doc:lib_toru
 
 
 
==Client software==
 
* for MS Windows and macOS clients, please login https://toru.ttu.ee/ and download university-customized version directly from there
 
** [https://openvpn.net/client-connect-vpn-for-windows/ official OpenVPN client for MS Windows] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-windows/ documentation]
 
** [https://openvpn.net/client-connect-vpn-for-mac-os/ official OpenVPN client for macOS] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/ documentation]
 
* GNU/Linux https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/
 
* Android https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-android/
 
* iOS https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-apple-ios/
 
 
 
==Installation in Debian/Ubuntu==
 
* open the terminal, e.g. CTRL+ALT+T and copy-paste the following line and press ''Enter''
 
** copy-paste in terminal: SHIFT+CTRL+C, SHIFT+CTRL+V
 
* ''sudo apt-get update && sudo apt-get install openvpn openvpn-blacklist && sudo apt-get clean''
 
* for GUI Network Manager:
 
** ''sudo apt-get update && sudo apt-get install network-manager-openvpn-gnome openvpn-systemd-resolved''<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Network Manager]</ref>
 
 
 
==Configuration==
 
* download the preconfigured ''client.ovpn'' from https://toru.ttu.ee/
 
* use your [[#Uni-ID|Uni-ID]] credentials to login and also later to authenticate in OpenVPN
 
* for GNU/Linux in file ''client.ovpn'' after ''setenv PUSH_PEER_INFO'' please add the following lines and then save the file:
 
''script-security 2''<br>
 
''up /etc/openvpn/update-resolv-conf''<br>
 
''down /etc/openvpn/update-resolv-conf''
 
 
 
==Connecting in Debian/Ubuntu==
 
* use your Uni-ID credentials
 
* open the terminal, e.g. using CTRL+ALT+T
 
* navigate to folder where the ''client.ovpn'' is saved or provide the full path
 
* ''sudo openvpn --config client.ovpn'' or use more convenient way - the alias created below
 
 
 
Usually there is possible to import *.ovpn files into graphical network manager<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Import .ovpn to Network Manager]</ref>. In Ubuntu 16.04 LTS cannot be imported current but in Ubuntu 18.04 LTS already can.
 
 
 
==Convenient login in GNU/Linux==
 
* open the terminal, e.g. using CTRL+ALT+T
 
* create an alias:
 
** ''nano ~/.bash_aliases'' #open CLI text editor
 
** ''alias vpn-ttu='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file
 
* ''source ~/.bash_aliases'' (or reopen terminal or relogin)
 
* add permissions to run OpenVPN without entering a password
 
** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like
 
** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file
 
* type your new alias ''vpn-ttu'' in terminal to start a VPN session
 
 
 
 
 
'''in nano text editor'''
 
* save the file:
 
** CTRL+O and ''Enter'' if you agree the proposed file name (or enter a new one if needed)
 
** or F3
 
* quit the file:
 
** CTRL+X
 
** or F2
 
 
 
 
 
'''More information about...'''
 
* ''sudoers'' at https://help.ubuntu.com/community/Sudoers
 
* ''alias''
 
** https://askubuntu.com/questions/1414/how-to-create-a-permanent-alias
 
** EST [[Alias bash shellis]]
 
** EST https://viki.pingviin.org/Alias
 
 
 
=Benefits of TTU VPN=
 
* you have a secure tunnel over insecure network, e.g. public WiFi, mobile internet or similar
 
* can use TTU library and its paid databases outside TTU http://www.ttu.ee/asutused/raamatukogu/10640/andmebaasid-databases/
 
 
 
=TTU helpdesk=
 
* in case of questions, issues - please contact TTU helpdesk
 
** https://wiki.ttu.ee/en:manuals:it:doc:contacts
 
** http://it.taltech.ee/ (choose website language if needed)
 
** self-service: http://helpdesk.ttu.ee (to visit self-service you must own [[#Uni-ID|Uni-ID account]])
 
 
 
=References=
 
<references />
 
 
 
[[Category:TTU]]
 

Latest revision as of 22:50, 22 April 2020

Redirect to: