VPN connection to DTU network 

Contents

VPN connection to DTU network

In order to connect to the network inside DTU from a remote location, you may use a VPN (Virtual Private Network) connection to the DTU network routers.

The user’s primary profile in DTUbasen determines which departmental VPN subnet the user will be logged into.

Any secondary profiles in DTUbasen will be ignored by the VPN server. DTU students will be logged in to the students’ VPN subnet and cannot use any departmental VPN subnet.

VPN login will permit you to access DTU’s central administrative systems, and possibly selected services in your department network, if configured by your department’s IT service. Contact your department IT service for further information.

Usage instructions 

The DTU Cisco routers have a service for which you need to install the Cisco AnyConnect_client on your remote computer. See DTU VPN information in the page VPN Cisco AnyConnect in DTU Inside.

The simple usage instructions are:

Go to the web-page https://extra-vpn.ait.dtu.dk. You may also use the older VPN server https://vpn.ait.dtu.dk, but it has fewer user licenses.
Log in with your DTU initials.
Select the icon AnyConnect and press Start to install the AnyConnect_client software on your PC.

Now you are connected to your department’s dedicated VPN subnet within the Cisco router. Please note that this is not the department internal network, but a special VPN subnet within the Cisco routers.

Further information about AnyConnect 

The AnyConnect_client product homepage.

Mac OS X users 

Try the automatic installation first:

If it continues to ask for your DTU password, quit your browser and start again.
If the automatic installation fails, it will give you the option of downloading and installing manually. Download the disk image and install by double-clicking on the package. It will install to a Cisco subfolder of your normal Applications folder, and the client will not be configured. First time you use it, type the address vpn.ait.dtu.dk manually.

Then it should work.

Notice: it is possible that with Mac OS 10.15, which only supports 64-bit applications, the Cisco AnyConnect 32-bit application (as of October 2019) cannot run. See Cisco Bug ID CSCvq32554 (login required). This issue may possibly be resolved now (March 2020).

OpenConnect for Mac 

Install openconnect using Homebrew.

Then run this command:

sudo openconnect --no-dtls vpn.ait.dtu.dk

The –no-dtls is required see the openconnect_manual.

Linux users 

Cisco doesn’t seem to offer AnyConnect software for Linux, so you may try the openconnect software package. To install this on CentOS/RHEL Linux use the EPEL repository:

yum install epel-release
yum install openconnect

Using openconnect (see connecting):

sudo openconnect https://vpn.ait.dtu.dk

Using OpenConnect VPN software 

Linux users may alternatively try to use the OpenConnect VPN software available from http://www.infradead.org/openconnect/connecting.html. For Fedora Linux the relevant RPM is NetworkManager-openconnect.

Usage instructions: Installing and Using AnyConnect on Ubuntu Desktop:

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Kmgmt-785-AnyConnect-Linux-Ubuntu.html

Linux machines should use the packages vpnc og openconnect. The command to start a VPN tunnel is:

sudo openconnect -s /etc/vpnc/vpnc-script vpn.ait.dtu.dk

See this VPN installation - Linux page.

Department of Physics (FYS) VPN users only 

For FYS users, the DTU VPN allows access also to internal HTTP/HTTPS web servers, Remote Desktop servers, and SSH servers.