91�����

Aalto VPN servers require Multifactor Authentication (MFA, 2FA) since May 2021. The user will be directed to browser to sign-in and accept MFA. The authentication will continue normally after the acceptance. This change was needed to improve security.

This change does not apply to centrally managed Aalto University laptops apart from Aalto Linux workstation. 

When the VPN connection is in use, all of the device's online activity is conducted via the university's servers, which may restrict or slow down the use of local online services.

Aalto's Windows 10 laptops

You can connect to the VPN from the login screen or later when you are already logged in to your computer. 

Choose primarily vpn1.aalto.fi or vpn2.aalto.fi

Connect VPN from the computer´s login screen

Connect VPN when you are already logged in to your computer

1. Open the Start menu by pressing the Windows key on the keyboard or clicking on the lower left corner of the desktop. Type "Aalto VPN" and select Aalto VPN connection from the search results. You can also find it directly in the Start menu Aalto IT -> Aalto VPN connection (Cisco Secure Client).

2. In the window that opens, choose primarily vpn1.aalto.fi or vpn2.aalto.fi

3. Click Connect.

4. Your laptop has now a remote connection.

When you want to close the connection,

1. Select the arrow in the bottom right bar (item 1. in the image) and the VPN remote connection icon (item 2. in the image).

2. In the window that then opens, select Disconnect.

3. The remote connection has now been closed.

Aalto VPN is not operational in the eduroam network used on Aalto campuses. If, for some reason, you need the VPN connection while on campus, you can use Aalto Open and Cisco’s VPN application, for example.

Aalto's Mac laptops

1. Open the Spotlight search and use the search term Cisco. Select the Cisco Secure Client application and click it open.

2. The application opens a new window. Make sure that the address in the pull-down box is in the format vpn1.aalto.fi or vpn2.aalto.fi (or vpn.aalto.fi).

3. Press Connect to create a VPN connection.

NOTE! When you open the Cisco application, it might get updated automatically. During this there is a progress window.

4. Press the icon that has appeared in the top corner of the screen. This brings out the VPN menu. In this menu, you can, for instance, open the Cisco Secure Client window where you can check the status of the VPN connection by pressing the Show AnyConnect Window text. You can also close the VPN connection by pressing the Disconnect text below the grey VPN text.

5. The VPN connection has been established when there is green symbol above the lock in the AnyConnect window, and when the text Connected to vpn.aalto.fi is shown below the VPN text.

NOTE! Aalto VPN is not operational in the eduroam network used on Aalto campuses. If you need the VPN connection while on campus, use the aalto open network and Cisco’s VPN connection. You can also use the wireless aalto network, in which case you do not need to use the VPN connection!

Aalto Ubuntu Laptops

Using VPN on Aalto Ubuntu Laptops is possible with OpenConnect client if package "aalto-vpn" has been installed. Using the package, VPN-connection can be established with the client certificate instead of username and password.

The package is set to be installed automatically on Ubuntu Laptops but it is possible that the package is not preinstalled if the laptop has not been connected 91�����-network for a long while. You may check if the package is already installed using command "dpkg -s aalto-vpn".

If the command gives a line that says "Status: install ok installed" the package is already installed. If the package is not installed, the primary user of the computer may install it using commands:

$ pkcon refresh

$ pkcon install aalto-vpn

Remote connection to students’ and employees’ own devices

A VPN remote connection can be installed on many different devices and platforms. However, the remote connection always requires the installation of the client software and the specification of the connection address from the device’s settings.

The connection address is the same for all platforms: vpn1.aalto.fi or vpn2.aalto.fi (or vpn.aalto.fi)

1. Installation of the client software

• Windows, Mac, Linux computers You can download the Cisco VPN Client software from  (recommended). The software can also be downloaded from 
• Android You can download Cisco Secure Client application for Android devices from .  
• iOS You can download Cisco Secure Client application for iOS devices from Apple’s .

2. Establishing a connection

Once you have installed the Client application on your device, enter the connection address as vpn1.aalto.fi or vpn2.aalto.fi (or vpn.aalto.fi). After this, use your own Aalto user ID (aalto\user ID) for the log-in.

FAQ

The VPN connection fails and opens a new page in your browser, what should I do?

How to set up your Aalto University account on your home Windows device and connect to Cisco VPN

If the VPN redirects you to the Microsoft 365 page () when you try to connect and the connection fails, it is possible that you have connected another organization's account to your device instead of an Aalto account. To fix this, add your Aalto account to the "Access work or school" tab according to the instructions below.

1. Search for Access work or school in the bottom left search bar.
2. Open the Access work or school tab. Once you open it, you should see a ‘+’ button with “Connect” next to it.
3. Click Connect.
4. Enter your Aalto University email address.
5. After entering your email, you will be prompted to enter your password. Enter your password and continue by pressing Sign in.
6. Wait for your device to log you in.
7. When logged in, your account should show in the listed accounts.

Connecting to AnyConnect VPN

1. Search for Cisco Secure Client in the bottom left search bar.
2. After a few moments, the VPN will open.
3. To connect to the Aalto University network, enter the Aalto VPN address (vpn2.aalto.fi / vpn1.aalto.fi / vpn.aalto.fi).
4. Click Connect.
5. You will be prompted to authenticate your identity.
6. After authenticating your identity, and waiting a few moments, you will be connected to the Aalto University network.

If connecting to the VPN on your home computer still fails, contact the IT Service Desk by submitting a service request at servicedesk@aalto.fi or through the self-service portal at servicedesk.aalto.fi