MUNI Connection from Home (VPN)

By establishing the VPN, the identity (and seemingly also the location) of the client machine changes, so some problems may occur. For example, if you download (or send) some data (by listening to an Internet radio, watching streamed videos, downloading files from FTP servers, etc.), the connection to the server you change data with is interrupted. Once the connection to the VPN server is established, the connection to the other server must be restored. The same happens after the VPN connection is ended.

The username you enter is your UČO (your personal number you use to log into the IS). Your nickname set in the IS will NOT work. The password is the secondary password, the one that is used, for example, in a PC room to log into the computer. If you do not have or know it, set it here.

By connecting to a VPN, you become a part of the MU network, so we recommend that you use the following mail server settings:

Mail may also work via some other mail servers at the faculties. In this case, it depends on the settings of the individual servers.

The firewall must let the VPN connection through, i.e. the UDP port 1194.

If you do not want to send all network traffic to the MU network, you can use so-called Split tunneling. Only traffic designated by MU will be tunneled.

Please note that the configuration for split tunneling must list all MU networks. This list may change over the years, so your configuration may become outdated and consequently some services will be unavailable. In that case, try using a full VPN and if accessing the service from that VPN works, update the split tunneling configuration by downloading a new version.

Instruction for Installation with the use of Split Tunneling

Windows

1. If you have not done so, install OpenVPN.
2. After installation, right-click on the OpenVPN icon and select the "Import configuration file". Then select the downloaded configuration file.
3. Connect to the tunnel by right-clicking on the OpenVPN icon in the system tray, select the muni-main-split-windows and click on "Connect".

MacOS, iOS, Android

1. Install OpenVPN Connect.
2. Import the downloaded configuration file.
3. Connect by selecting the imported profile.

GNU/Linux

1. NetworkManager which is used in most distributions does not yet support this type of configuration.
2. Use the command line​ connection with the downloaded configuration file.
3. Or use the Pritunl graphics client with the downloaded configuration file.

When connected via VPN, IP addresses are assigned from the following network ranges:

IPv4:
147.251.68.0/24 (primary VPN)
147.251.69.0/24 (primary VPN)

147.251.91.32/27 (macOS devices and mobile devices)
147.251.91.128/27 (macOS devices and mobile devices)

147.251.55.0/25 (employees only)
147.251.55.128/25 (employees only)
147.251.56.0/24 (employees and external - static addresses)

147.251.60.128/25 (VPN over HTTPS)
147.251.61.128/26 (Faculty of Science)
147.251.61.32/27 (Faculty of Law)

IPv6:
2001:718:801:384::/112 (primary VPN)
2001:718:801:385::/112 (primary VPN)

2001:718:801:387::/112 (employees only)
2001:718:801:389::/112 (employees only)
2001:718:801:386::/112 (employees and external - static addresses)

You can verify your IP address e.g. at ip4.me. If it is within the above range, you are connected via MUNI VPN.

If you are a more advanced user and are looking for a default configuration file for your operating system, you can find them here: Windows, macOS a Linux.