Frequently Asked Questions
By establishing the VPN, the identity (and seemingly also the location) of the client machine changes, so some problems may occur. For example, if you download (or send) some data (by listening to an Internet radio, watching streamed videos, downloading files from FTP servers, etc.), the connection to the server you change data with is interrupted. Once the connection to the VPN server is established, the connection to the other server must be restored. The same happens after the VPN connection is ended.
The username you enter is your UČO (your personal number you use to log into the IS). Your nickname set in the IS will NOT work. The password is the secondary password, the one that is used, for example, in a PC room to log into the computer. If you do not have or know it, set it here.
By connecting to a VPN, you become a part of the MU network, so we recommend that you use the following mail server settings:
|name of the SMTP server||relay.muni.cz|
|port||587 - when using MSA (recommended for newer clients)
25 - when using TLS
465 - when using SSL
|use SSL encryption||yes, always (in Thunderbird: TLS)|
|password||your secondary password|
Mail may also work via some other mail servers at the faculties. In this case, it depends on the settings of the individual servers.
The firewall must let the VPN connection through, i.e. the UDP port 1194.
If you do not want to send all network traffic to the MU network, you can use so-called Split tunneling. Only traffic designated by MU will be tunneled.
Please note that the configuration for split tunneling must contain a list of all MU networks. This list may change over the years, so your configuration may become outdated, and some services may become unavailable. In that case, try using a full VPN, and if access to the service does not work for you, update the split tunneling configuration by downloading the new version.
- Split tunel for Windows
- Split tunel for Linux
- Split tunel for macOS
- Split tunel for mobile connection
Split configuration for special servers can be found on their page.
Instruction for Installation with the use of Split Tunneling
- If you have not done so, install OpenVPN.
- After installation, right-click on the OpenVPN icon and select the "Import configuration file". Then select the downloaded configuration file.
- Connect to the tunnel by right-clicking on the OpenVPN icon in the system tray, select the split tunnel and click on "Connect".
- Install Tunnelblick and double-click the downloaded file. Tunnelblick will guide you through the import.
- V distribucích používající NetworkManager je nutné OpenVPN pro split tunelling spouštět z. In distributions using NetworkManager, it is necessary to run OpenVPN for split tunneling from the command line.
When connected via VPN, IP addresses are assigned from the following network ranges:
126.96.36.199/24 (primary VPN)
188.8.131.52/24 (primary VPN)
184.108.40.206/27 (macOS devices and mobile devices)
220.127.116.11/27 (macOS devices and mobile devices)
18.104.22.168/25 (employees only)
22.214.171.124/25 (employees only)
126.96.36.199/24 (employees and external - static addresses)
188.8.131.52/25 (VPN over HTTPS)
184.108.40.206 (Department of Psychology FSS)
220.127.116.11/26 (Faculty of Science)
18.104.22.168/27 (Faculty of Law)
22.214.171.124/28 (Faculty of Social Studies)
126.96.36.199/27 (Faculty of Arts)
188.8.131.52/28 (Department of Experimental Biology)
172.16.128.0/26 (admission procedure PhD. students)
2001:718:801:384::/112 (primary VPN)
2001:718:801:385::/112 (primary VPN)
2001:718:801:387::/112 (employees only)
2001:718:801:389::/112 (employees only)
2001:718:801:386::/112 (employees and external - static addresses)
You can verify your IP address e.g. at ip4.me. If it is within the above range, you are connected via MUNI VPN.