Skip to content

You are here: Home / IT Services / CALCULA Computing Services / Before you start (VPN info)

Before you start (VPN info)

VPN Access 

In order to make use of the VPN access service, it is necessary to install on a personal computer (fixed or laptop) a client program to make the connections. This service will allow to establish a secure connection to the department's network from the outside of the UPC via the Internet, in order to guarantee the privacy of the transmitted information and the protection of the internal network's information systems. The system is based on the use of an encrypted communication channel between the personal computer and the VPN server, which only its originator has access to. When the user requests a connection of this type, the login and password (the same ones that are used for access to the others Department Services) will be requested and a communication channel will be generated, which will remain active until the end of the connection.

For Windows:

Installation:

1. You must send an email to sitsc@tsc.upc.edu requesting access to the VPN service. In the email you must specify your TSC Intranet username. 

2. Download the OpenVPN software version for your Windows version according to our computer architecture. In the link you will find a box where you can select the appropriate version.

3. Install the program as an Administrator user. Right click, Run as Administrator.

4. Download the configuration file and copy it to the local directory which, depending on the version and the language, is:                              “C:\Arxius de programa\OpenVPN\config”, “C:\Archivos de Programa\OpenVPN\config” or “C:\Program Files\OpenVPN\config”.

Configuration:

In order to use the service, you need to have received the confirmation that we have been registered previously.
1. A client shortcut icon will be created on the desktop during installation. Right-click and select Run as Administrator.
2. It can also be accessed from the Windows main menu by pressing Start and typing "OpenVPN GUI". In this case, the OpenVPN client must be run as the Administrator user.               
 image-windows-config-1
.
3. Finally, we right click on the icon in the bottom bar to the right and select Connect or double-click. In the credentials box you must enter the username and password which are the same ones that are used for access to the others Department Services. 
.
From that point on it is already connected through the VPN and, therefore, it can access the systems and services of the internal network, as well as those of the UPC and the Internet, as if we were physically doing it from the department's own network.
.
If you have a problem with the installation of the software or the use of the service, you can consult the FAQ section of the Intranet dedicated to this service and, if the problem is not resolved, you can contact IT support staff by email sitsc@tsc.upc.edu.

For Linux:

Installation:

1. You must send an email to sitsc@tsc.upc.edu requesting access to the VPN service. In the email you must specify your TSC Intranet username. 

2. Download the CA-TSC.crt file and save it /home/usuari/openvpn (for example). 

3. Install OpenVPN for the network manager by opening a terminal and running:

“sudo apt-get install network-manager-openvpn openssl”

If you are using a GNOME desktop, you should run the following way:

“sudo apt-get install openvpn network-manager-openvpn-gnome network-manager-openvpn openssl”

You will be asked for your computer's root password in order to perform this installation.

4. Add new VPN connection:

To do this, click on the Network Manager icon located next to the clock and configure the network connections by adding a new OpenVPN connection

Configuration:

In order to use the service, you need to have received the confirmation that we have been registered previously.
.
Configure the VPN connection with the following data:
  • Gateway: vpntsc.upc.edu
  • Connection type: Password
  • CA file: (choose the file downloaded in point 2)
  • Username: TSC intranet username
  • Password: You can choose between storing it or asking for it always.
  • In "Advanced" check the option: "Use LZO compression".
  • In  "Advanced" -> "Security" -> Choose in the "Chipher" field, the option "BF-CBC".

Click OK to save the connection settings.

.
From that point on it is already connected through the VPN and, therefore, it can access the systems and services of the internal network, as well as those of the UPC and the Internet, as if we were physically doing it from the department's own network.
.
If you have a problem with the installation of the software or the use of the service, you can consult the FAQ section of the Intranet dedicated to this service and, if the problem is not resolved, you can contact IT support staff by email sitsc@tsc.upc.edu.

For MAC:

Installation:

1. You must send an email to sitsc@tsc.upc.edu requesting access to the VPN service. In the email you must specify your TSC Intranet username. 

2. Download the latest stable version of Tunnelblick software:

If the previous website did not work, this repository can be used (*): https://intratsc.upc.edu/vpn/Tunnelblick_3.6.1_build_4543.4551.dmg
(*) At the time of writing this manual, the latest version of the software was 3.6.1

3. Once downloaded, double-click on the installer and then on Tunnelblick

4. Click the "Open" option.

5. Enter the Mac username / password as you need administrator permissions to install the software.

6. Once installed, the Tunnelblick software must be launched.

7. The application informs us that no VPN configuration is installed, and it is selected that we have configuration files.

8. Download the VPN configuration file and double click. If this option does not work, you can drag the vpn_tsc.ovpn configuration file to the Tunnelblick icon.

9. If the process was successful, it will end with the following message: Tunnelblick successfully: installed one configuration.

Configuration:

In order to use the service, you need to have received the confirmation that we have been registered previously.

1. To activate the VPN connection, go to the top right bar at the top and hover over the Tunnelblick icon. When the Tunnelblick window comes out click to connect.

2. Enter the username and the password (the same ones that are used for access to the others Department Services).

3. If everything worked correctly, the following window will appear:

image-mac-config-1

.
From that point on it is already connected through the VPN and, therefore, it can access the systems and services of the internal network, as well as those of the UPC and the Internet, as if we were physically doing it from the department's own network.
.
If you have a problem with the installation of the software or the use of the service, you can consult the FAQ section of the Intranet dedicated to this service and, if the problem is not resolved, you can contact IT support staff by email sitsc@tsc.upc.edu.

For Android:

Installation:

1. You must send an email to sitsc@tsc.upc.edu requesting access to the VPN service. In the email you must specify your TSC Intranet username. 

2. Download the vpn_tsc.ovpn file.

3. Install OpenVPN from Play Store or the latest version from 

  • https://play.google.com/store/apps/details?id=de.blinkt.openvpn&hl=es
  • http://plai.de/android/ics-openvpn-latest-stable.apk
  • https://intratsc.upc.edu/vpn/ics-openvpn-0.6.52.apk (if the other links don't work*)
(*) At the time of writing, the latest version of the software was 0.6.52

4. Open the OpenVPN for Android application and from the folder icon open the vpn_tsc.ovpn file downloaded in step 2.

Configuration:

In order to use the service, you need to have received the confirmation that we have been registered previously.

1. Run the vpn_tsc profile created during installation

2. Enter the username and password (the same ones that are used for access to the others Department Services)

.
From that point on it is already connected through the VPN and, therefore, it can access the systems and services of the internal network, as well as those of the UPC and the Internet, as if we were physically doing it from the department's own network.
.

For IOS:

Installation:

1. You must send an email to sitsc@tsc.upc.edu requesting access to the VPN service. In the email you must specify your TSC Intranet username. 

2. Install OpenVPN from App Store or the latest version from 

  • https://apps.apple.com/es/app/openvpn-connect/id590379981
(*) At the time of writing, the latest version of the software was 3.2.3

 

3. Download the vpn_tsc.ovpn file.

4. Go to Files App-> Downloads ->Select File and touch the share button at bottom left and select Openvpn .

 

5. In Openvpn Window Select Add. In Imported PRofile windows put the Profile Name and username and put add at the top right.

If you have a problem with the installation of the software or the use of the service, you can consult the FAQ section of the Intranet dedicated to this service and, if the problem is not resolved, you can contact IT support staff by email sitsc@tsc.upc.edu.

FAQ (Frequently Asked Questions):

  • Question: What is the VPN Remote Access service?
    Answer: This service makes it possible to establish a secure connection to the department's network from outside the UPC through the Internet, with the aim of guaranteeing the privacy of the information transmitted and the protection of the UPC's information systems.
  • Question: How does this service work?
    Answer: The system is based on the use of an encrypted communication channel between the personal computer and the VPN server, to which only its originator has access. When the user requests such a connection, the user and password (the same ones that are used for access to the others Department Services) will be used and a communication channel will be generated that will remain active until the end of the connection.
  • Question: What does this service provide me?
    Answer: Once the connection has been established, it will be possible to access the systems and services of the internal network and the UPC as if we did it physically from within the same department, therefore we will have access to those services that are not normally accessible from an Internet connection provided by any provider other than the UPC.

Linux:

  • Question: Do I need to enable any options in my kernel to access the VPN?

    Answer: The kernel must support the TUN / TAP driver (Universal TUN / TAP device driver support).

Window:

  • Question: When trying to connect to the VPN it gives me the following error message: 'Error opening logfile for writing. c:\Archivos de Programa\OpenVPN\log\vpn-tsc.log. You probably don't have administrator privileges, which are necessary to run OpenVPN.'
    Answer: You must have administrator permissions to run OpenVPN.