MUNI Connection from Home (VPN)


Frequently Asked Questions

What will it do to my computer?

By establishing the VPN, the identity (and seemingly also the location) of the client machine changes, so some problems may occur. For example, if you download (or send) some data (by listening to an Internet radio, watching streamed videos, downloading files from FTP servers, etc.), the connection to the server you change data with is interrupted. Once the connection to the VPN server is established, the connection to the other server must be restored. The same happens after the VPN connection is ended.

Which login and password should I use?

The username you enter is your UČO (your personal number you use to log into the IS). Your nickname set in the IS will NOT work. The password is the secondary password, the one that is used, for example, in a PC room to log into the computer. If you do not have or know it, set it here.

How to set up the server for outgoing mail?

By connecting to a VPN, you become a part of the MU network, so we recommend that you use the following mail server settings:

name of the SMTP server relay.muni.cz
port 587 - when using MSA (recommended for newer clients)
25 - when using TLS
465 - when using SSL
use SSL encryption yes, always (in Thunderbird: TLS)
login login-name-in-IS@IS.MUNI.CZ
password your secondary password

Mail may also work via some other mail servers at the faculties. In this case, it depends on the settings of the individual servers.

How do I set up a firewall correctly?

The firewall must let the VPN connection through, i.e. the UDP port 1194.

Tunnel Only for Connection to the MU Network (Split Tunneling)

If you do not want to send all network traffic to the MU network, you can use so-called Split tunneling. Only traffic designated by MU will be tunneled.

Please note that the configuration for split tunneling must contain a list of all MU networks. This list may change over the years, so your configuration may become outdated, and some services may become unavailable. In that case, try using a full VPN, and if access to the service does not work for you, update the split tunneling configuration by downloading the new version.

Split configuration for special servers can be found on their page.

Instruction for Installation with the use of Split Tunneling

Windows

  1. If you have not done so, install OpenVPN.
  2. After installation, right-click on the OpenVPN icon and select the "Import configuration file". Then select the downloaded configuration file.
  3. Connect to the tunnel by right-clicking on the OpenVPN icon in the system tray, select the split tunnel and click on "Connect".

MacOS

  1. Install Tunnelblick and double-click the downloaded file. Tunnelblick will guide you through the import.

GNU/Linux

  • V distribucích používající NetworkManager je nutné OpenVPN pro split tunelling spouštět z. In distributions using NetworkManager, it is necessary to run OpenVPN for split tunneling from the command line.

What addresses are allocated to the devices connected to VPN MU?

When connected via VPN, IP addresses are assigned from the following network ranges:

IPv4:
147.251.68.0/24 (primary VPN)
147.251.69.0/24 (primary VPN)

147.251.91.32/27 (macOS devices and mobile devices)
147.251.91.128/27 (macOS devices and mobile devices)

147.251.55.0/25 (employees only)
147.251.55.128/25 (employees only)
147.251.56.0/24 (employees and external - static addresses)

147.251.60.128/25 (VPN over HTTPS)
147.251.61.16 (Department of Psychology FSS)
147.251.61.128/26 (Faculty of Science)
147.251.61.32/27 (Faculty of Law)
147.251.61.80/28 (Faculty of Social Studies)
147.251.61.96/27 (Faculty of Arts)
147.251.61.64/28 (Department of Experimental Biology)
172.16.128.0/26 (admission procedure PhD. students)

IPv6:
2001:718:801:384::/112 (primary VPN)
2001:718:801:385::/112 (primary VPN)

2001:718:801:387::/112 (employees only)
2001:718:801:389::/112 (employees only)
2001:718:801:386::/112 (employees and external - static addresses)


You can verify your IP address e.g. at ip4.me. If it is within the above range, you are connected via MUNI VPN.

Where to find default configuration file?

If you are a more advanced user and are looking for a default configuration file for your operating system, you can find them here: Windows, macOS a Linux.

You are running an old browser version. We recommend updating your browser to its latest version.