3 ms·
This is not particularly uncommon for universities, as their networks tended to evolve as large and open "flat LANs" traditionally. Almost all campus type VPNs
by g_p 5y ago
This is not particularly uncommon for universities, as their networks tended to evolve as large and open "flat LANs" traditionally.
Almost all campus type VPNs are based on "standard-ish" VPN protocols, and have an open source and widely used client available for them. Note that you might need to delve a little into the configuration file to work out what it is. Common ones are Cisco vpnc, ipsec, etc.
At least on Linux, with Network Manager, one of the options when configuring a network interface (including a VPN) is to set the subnets that are reached via it. Most universities will have a /8 or /16 subnet, within which their internal services sit (assuming the services are on-premises). You can do a split route, so this subnet is reachable via the tunnel, but everything else is routed through your regular WAN connection.
Many universities are shifting towards cloud services like 365, where IP/VPNs are less necessary, so I guess that this is primarily for on-prem services, where they feel requiring VPN adds a layer of security beyond the (usually not spectacular) login form on the application itself.
If you need to use internal DNS to resolve IPs for campus-based resources (as public WAN DNS isn't good enough), you might need to go a little further in setting this up (run your own local resolver and use their DNS server, which is through the VPN tunnel, for resolving subdomains of their main domain), or use a VM (for an easy option).
- patrick451 5y ago> At least on Linux, with Network Manager, one of the options when configuring a network interface (including a VPN) is to set the subnets that are reached via it. Most universities will have a /8 or /16 subnet, within which their internal services sit (assuming the services are on-premises). You can do a split route, so this subnet is reachable via the tunnel, but everything else is routed through your regular WAN connection. When I was in grad school, the VPN was mostly useful because it granted your access to most academic journals. Routing non university traffic around the VPN would probably break that.
- g_p 5y agoYou're right, but most universities also have a SSO-based proxy to let you do this, or alternatively have integration with an access federation. That means you have to do an SSO (or have a browser session already authenticated through SSO), but you should still have access to journals and resources without using the VPN. With Covid, I believe any that didn't do this have implemented it, so they weren't overloading their VPN routers with traffic. I've seen a few trying to remind people how to use resources via SSO and access federation, rather than VPN, just to reduce that load.