Computer Lab VPN "VPN2"

A Virtual Private Network (VPN) is a means of extending a private network over a public link. In the context of the Computer Laboratory, it generally refers to a means of making a personal machine, typically a laptop or home computer, appear to be on the university or departmental network. There are three main reasons for doing this:

• To bypass firewall and access control restrictions that apply to direct connections from the external network
• To gain access to external services such as online journals that are authenticated by calling IP address
• To add a layer of security to your network traffic when using an untrusted network, particularly when travelling

In order to open a VPN, the machine must present credentials to prove entitlement to access the private network.

There are multiple VPNs available. This page describes the Computer Laboratory in-house VPN "vpn2". This VPN exists as an in-house alternative to the 'main' Computer Lab VPN (which is managed by University Information Services).

Security precautions

When you are connected to a VPN, your machine behaves in most respects as if it were directly connected to the remote network. This means that when using the VPN services described here, you become subject to the CUDN and JANET acceptable use policies. All VPN connections are logged against your CRSid and network traffic may be traced back to you. You should ensure that the anti-virus software on your machine is up to date, and take appropriate precautions to protect your credentials from unauthorised use.

Obtaining credentials

Authorised members of the department may obtain their username and password for the Computer Laboratory VPN at vpnpassword.cl.cam.ac.uk.

Configuring your VPN connection

• Windows
• Apple devices (including Mac and iPhone)
• Linux
• Android devices
• Other devices (technical/generic instructions)

Testing split VPN

The intended behaviour of this VPN (unlike some others) is to direct only your connections to University systems through the VPN; the rest of your internet access should not be affected. This is done to minimise the amount of network traffic that must pass through the VPN.

You can check that this is working correctly by using our 'My IP address' test page.  Contact sys-admin if you would like assistance interpreting the results.