MUNI Connection from Home (eduVPN)

After the VPN connection is established, the network identity of the client machine changes. This situation can cause some complications. For example, when downloading (or uploading) data, listening to Internet radio, watching streaming video, or downloading files from FTP servers, the connection to the server from which you are receiving (or to which you are uploading) data may be interrupted. Once the connection to the eduVPN server is re-established, you need to re-establish the connection. The same situation can occur after the connection is terminated.

The user logs in to eduVPN only via the MUNI Unified Login. To successfully log in, you must enter your UČO and primary password. Other information will not work.

When connecting via eduVPN, IP addresses are assigned from the following network ranges depending on the profile type:

IPv4:

• 100.65.0.0/16 (students)
• 100.67.0.0/16 (employees)
• 100.72.0.0/16 (external users)

When communicating outside the MUNI network using an IPv4 address, traffic is NATed to addresses in the range 147.251.0.0/16. When communicating within the MUNI network, the user communicates using the address that has been assigned.

IPv6:

• 2001:718:801:900:100::/72 (students)
• 2001:718:801:900:200::/72 (employees)
• 2001:718:801:900:300::/72 (external users)

When communicating using IPv6, the user always communicates using their assigned IPv6 address (even outside the MUNI network).

EduVPN works in the background with two protocols - Wireguard and OpenVPN. Wireguard is preferred because of its better features for end users and eduVPN administrators. Both use port 443, which is usually enabled in networks. The difference is that Wireguard currently runs exclusively on the UDP transport protocol, while OpenVPN is set to TCP. In some non-standard networks, only TCP communication is allowed. In such networks, the connection to Masaryk University via Wireguard is broken, so the application needs to enable TCP enforcement to switch to OpenVPN over TCP. On some platforms, the eduVPN app will take care of this itself if it detects communication problems. On Linux and Windows platforms, this should happen automatically, while on mobile platforms you need to force this behavior with the force TCP button in the app.

An example of a network that blocks UDP that we know of is the Czech Railways network. If you are travelling by train, we recommend using OpenVPN.

Yes, the MUNI VPN service is fully IPv6 compatible, so you can use MUNI VPN securely and privately even on networks that only use IPv6 addresses. MUNI VPN will provide you with protection and anonymity, regardless of whether it's a classic IPv4 or modern IPv6 network.