FAQ - VPN (Virtual Private Network)

You should always install the VPN client in the default installation path, otherwise it will not work.

If the problem still exists, please try a different VPN client version.

When uninstalling Cisco AnyConnect, it may happen that the software cannot be completely uninstalled.
This means that reinstallation is no longer possible, even if the software under the folder has been completely removed.

To avoid this problem, enter the following command in the terminal as the final step of the deinstallation: sudo pkgutil --forget com.cisco.pkg.anyconnect.vpn

Please make sure that you always enter the exact name of the package.

To change your IP into dynamic, please proceed with the following steps:

1. Go to "Network and Sharing Center"
2. Select the active LAN/Wireless connection and then right click to show the "Properties"
3. The "Local Area Connections Properties" window will open where you can see a list of the installed protocols. Select the TCP/IP protocol and click on "Properties".
4. In the "Internet Protocol Version Properties" tab, select "Obtain an IP address automatically" and "Obtain DNS server address automatically".

Using Full Tunnel, every Internet connection runs over the RWTH VPN. 

In Split Tunnel, data is only transported through the VPN tunnel if it comes from a website or from IT services within the RWTH Aachen University.

IP addresses via the VPN are assigned from the following range: 134.61.96.1 - 134.61.103.254. The private IP addresses inside the tunnel are in the range 172.x.x.x and are assigned to the range 134.61.96.1 - 134.61.103.254.

This means that your device will use an IP address in the range 172.x.x.x, but your IP address will outwardly be displayed as being in the range 134.61.96.1 - 134.61.103.254 by the VPN. You can use the Command Prompt app (search for "cmd") to verify whether IPv4 is working correctly. Enter the commands "ping -4 www.google.com" and "ping -6 www.google.com" and check whether the displayed IP address is within the range 134.61.96.1 - 134.61.103.254.

Open the start menu and select "Network connections". If a network bridge is listed, delete it.

If deleting is denied by Windows, disable all network connections and try again. The network bridge must be removed so the VPN client can work.

There are different possible reasons:

1. The username or the password are incorrect.Please note:

• Your username for the vpn account has the form ab123456
• You must set a password for your vpn account in the selfservice

If  you have lost your username or password, please contact the IT-ServiceDesk.

2. Your account has been deactivated due to viruses and/or spam e-mails: My account has been deactivated, what should I do to activate it again?

3. A firewall prevents the traffic to the VPN server. In this case, please switch off the firewall and try again.

In none of the reasons are relevant for you, please contact the IT-ServiceDesk and provide the following information:

• Are you using the Cisco Anyconnect Mobility client to connect to the vpn?
• What version of the  Anyconnect client do you use?
• What is your IP-address (IPv4 and IPv6 if you have one)? You can check your IP-address using the following pages:
  • https://www.wieistmeineip.de/
  • https://www.whatismyip.com
• What operating system in what version do you have?
• What antivirus software in what version do you use? 
• When did you try to connect to the vpn last time (date and time)?
• Please send us the logs of the Anyconnect client:
  • Click on the setting symbol on in the bottom left corner of the AnyConnect window.
  • Choose "Message History"
  • Copy the information and paste it into the mail text.

Alternatively, OpenConnect can be used.

Please launch the OpenConnect client always with the user agent:

AnyConnect

However, no support can be offered for OpenConnect, since it cannot be guaranteed that OpenConnect will still work when the RWTH VPN standards are updated.

You can easily solve this problem by a minor adjustment in the Cisco client. Open the client and click on "Options". Then click on "Properties" and then "General". Check the "Allow local LAN access" flag and confirm with "OK". You should now be able to print with existing VPN connection, except when using the MoPS profile.

IP addresses are assigned from the following range:

• vpn:
  134.61.96.1 - 134.61.103.254

There is always a reason if your account has been locked.

The most common reason is due to viruses and /or spam sent through the deactivated account. Mistakes are almost impossible.

You can check the status of your account on our Selfservice. Enter your username and password and check in "Accounts" if your vpn account has been deactivated. To re-activate your account, you need to make sure that your computer is virus-free and that all known security vulnerabilities are eliminated (especially in Microsoft Systems).

Attention! First install all (Windows) updates offline before you use the internet!

In addition, the IT Center notifies deactivated users on their email address Firstname.Lastname@rwth-aachen.de. It is therefore important to check your emails on a regular basis.

Upon initial deactivation: If your system has been scanned and repaired or possibly reinstalled, you can regain your access by calling 0241 80-24 680.

Repeated deactivation: You need to bring your device to the IT-ServiceDesk and provide on-site evidence that your computer is safe for the network.

In case of repeated violations of the Network Code of Conduct, a reactivation of the account can not be guaranteed.

The IT Center alerts the user via email on their email address firstname.lastname@rwth-aachen.de or...@post.rwth-aachen.de if a virus has been detected on their computer. It is therefore essential to check your emails regularly. If you have received a virus warning, please immediately remove the virus from your system. The IT ServiceDesk will gladly provide assistance if needed. Otherwise, your access will be deactivated to prevent the virus from spreading from your computer to the network. Your account will not be deactivated if you deleted the virus immediately and inform noc@rwth-aachen.de via email that your computer is virus free. (Although exceptions can happen due to high viral load in the network).

It may happen that the VPN connection under Ubuntu does not work anymore. The reason for that is that some additional packages for the Network Manager should be installed. A list of packages available for the installation can be found here:

https://wiki.ubuntuusers.de/NetworkManager/VPN_Plugins/

The recommended version of AnyConnect for macOS 10.13 (High Sierra) is AnyConnect 4.5.02XXX and above.

How to uninstall Cisco AnyConnect VPN Client on Mac

Using the Uninstall AnyConnect program

If you no longer need the Cisco AnyConnect VPN Client, or if you are having problems installing a new version, you can remove the AnyConnect Client from your Mac using this guide.

Warning: Do not try to remove the client by the typical Mac method of deleting it from the Applications folder, as this will result in an incomplete uninstallation!

Steps:

• sudo /opt/cisco/anyconnect/bin/anyconnect_uninstall.sh

If that does not work, or if you receive an error message when you run the Terminal command shown above, you can try running the following commands in the Terminal one at a time (confirm each line with the Enter key at the end): video tutorial of the process

• sudo rm -R /opt/cisco/anyconnect
• sudo rm -R /Applications/Cisco
• sudo pkgutil --forget com.cisco.pkg.anyconnect.vpn

The AnyConnect software should now be completely uninstalled.

You can now reinstall the AnyConnect Client if necessary.

• Open the "Cisco" folder in the Applications folder.
• Double-click the "Uninstall AnyConnect" program.
• Click the "Uninstall" button in the following dialog.
• Uninstalling AnyConnect with Terminal commands

If the uninstallation with the "Uninstall AnyConnect" program does not work, or if the program or the "Cisco" folder cannot be found in your Applications folder, then the AnyConnect Client may not have been fully uninstalled previously.

In this case, you must manually uninstall the AnyConnect Client using the "Terminal" program.

• Open the "Terminal" program. You can find it using Spotlight Search (the magnifying glass at the top right of the menu bar), or in the "Applications" folder, in the "Utilities" subfolder.
• Copy the following command into the Terminal window:
• Press the Enter key.
• You will then be prompted to enter your computer's administrator password. This password will not be displayed during entry (you must type it in "blindly"); then you must confirm the entry with the Enter key.