The vpn service allows you to establish a secure, encrypted tunnel from your device to the TU Berlin intranet. This will allow you to access network services which are not accessible from outside the TU Berlin intranet. This can be useful on business trips and at home.

Note: The VPN service does not replace a contract with an internet provider

To install the software, you need local admin priviledges. If you don’t have those priviledges, contact your local IT admin.

VPN users can now choose between two different profiles for their secured connection to the TU network:

• 1-TU-Split-Tunnel: The standard option virtually connects your device to the TU Berlin’s network. Users have access to the university’s resources, such as library services, scanners, printers ect. For services provided by TU Berlin, your computer will route its data directly to the TU network, other network traffic such as social media or streaming-related data bypasses the TU network. Please note that different rules may apply for certain institutions, such as for ZUV.
• 2-TU-Full-Tunnel: This option opens up the possibility to access additional external resources that are specifically unlocked for TU members and require an IP address provided by TU, such as research data bases or eletronic publishing platform.
  This connection routes all your traffic through the TU network, including private data such as audio and video streams or social media activities. We kindly ask you to only use the „Full-Tunnel“ option when needed to avoid unnecessary load on the TU’s network.

You can choose between both profiles at each launch of the Cisco Anyconnect Secure Mobility Client. We ask you to use „1-TU-Split-Tunnel“ whenever possible, if you don’t require the additional features oft he „2-TU-Full-Tunnel“ option.

One-time installation guide

1. Point your browser to https://vpn.tu-berlin.de/ [10], choose one of the two available VPN profiles and log in with you TU account credentials. For more information about the profiles, see above.
2. Click on „Download for Windows“ and save the file.
3. Open the install file and follow the on-screen directions.
4. Once installation is finished, you will see an icon for Cisco AnyConnect in your taskbar. If it’s not shown right away, you might have to restart your computer for changes to take effect.
   
   

How to use

From now on, there’s an icon for Cisco Anyconnect in your taskbar. To establish a VPN connection with TU Berlin, click on the icon. By default, you will be connected using the profile you had last used.You can manually pick a profile from the drop-down menu or by entering the URL into the textbox:

1. vpn.tu-berlin.de/split
2. vpn.tu-berlin.de/full

Authenticate using your TU account credentials.

Please make sure to always keep your operating system and your web browser up-to-date.

One-time Installation

1. Go to vpn.tu-berlin.de [13], choose one of the two following VPN profiles (see above for description) and log in with your TU account credentials.
   1. 1-TU-Split-Tunnel
   2. 2-TU-Full-Tunnel

2. Click on „Download“ and save the file.
3. Install the software and confirm both the certificate and execution of the software.
4. Once software installation is finished, launch the application via „Applications“ > „Cisco“ > "Cisco AnyConnect Secure Mobility Client".

Everyday use

From now on, there’s an icon for Cisco Anyconnect in your taskbar. To establish a VPN connection with TU Berlin, click on the icon. By default, you will be connected using the profile you had last used.
You can manually pick a profile from the drop-down menu or by entering the URL into the textbox:

1. vpn.tu-berlin.de/split
2. vpn.tu-berlin.de/full

Please make sure to always keep your operating system and your web browser up-to-date.

NetworkManager

To set up VPN under Ubuntu, an additional module is needs to be installed. For the installation, local admin priviledges are required.

1. Step: Open a terminal window and enter the following command:
   
   sudo apt-get install network-manager-openconnect-gnome
   
   Enter your password and confirm the following dialogue with „y“
2. Step 2: Click on Settings > Network > Add VPN (+) and choose „Openconnect“
   Name: TU-Berlin
   VPN-Protocol: Cisco AnyConnect or Openconnect
   Gateway: vpn.tu-berlin.de
   Click on „Confirm“
3. Step 3: Activate your VPN connection
   GROUP: Pick your preferred VPN profile (see above for description) from the dropdown menu
   1. 1-TU-Split-Tunnel
   2. 2-TU-Full-Tunnel   

   Activate the VPN connection and log in with your TU account credentials.
   User name: <TU-Accountname>@tu-berlin.de
   Your active VPN connection will be displayed in the status bar by a „VPN“ icon.
   To cancel the connection, click on the icon and choose „turn off“

1. Step: Launch Google PlayStore and install „Cisco AnyConnect“
2. Step: Launch the newly-installed app. This requires accepting the Terms of Service.
3. Step: Press „Connections“ > „Add new connection“ and enter the following settings:
   Description: TU Berlin
   Server address: According to your choice of VPN profile (see above):
   1. vpn.tu-berlin.de/split
   2. vpn.tu-berlin.de/full

   Confirm by pressing „Done“.

4. Step: Press „AnyConnect-VPN“ to establish a connection. Confirm by entering your TU account credentials and confirm the connection request.
5. Step: To cancel the connection, press „AnyConnect-VPN“ again.

1. Step: Enter the App store and install Cisco Anyconnect
2. Step: Launch the app, which requires agreeing to the Terms of Service.
3. Step: Choose Connections > Add VPN Connection
4. Step 4: Enter the following settings:
   Description: TU Berlin
   Server address: vpn.tu-berlin.de
   Confirm by clicking „Save“
5. Step: When asked to add a VPN configuration, confirm by entering your device PIN. Press „Back“
6. Step: Activate „AnyConnect-VPN“. In the options menu that follows, choose from the available profiles (see above for description):
   Group:         
   1. 1-TU-Split-Tunnel
   2. 2-TU-Full-Tunnel

   Confirm your selection by entering your TU account credentials.

7. Step: You will see a „Connected“ status. To cancel the connection, press „AnyConnect-VPN“ again.

CiscoAnyConnect for Windows [14]

CiscoAnyConnect for MacOS [15]