eduVPN and security
What is the origin of the eduVPN service?
How is a VPN always more secure than a traditional connection?
How can eduVPN guarantee greater security?
How does this service differ from those of private companies?
Installation
How does the installation of the service work?
How long does the installation take?
What are the advantages of using a VLAN?
What traffic passes through the VLAN?
Does my organisation need to manage maintenance at VPN server level?
Configuration and app
Who does the configuration?
Is there a client interface?
How can I create a profile?
What is the default profile that Belnet offers?
How do I enable users to use the secure internet?
If there are multiple profiles, are there several separate IP ranges?
Miscellaneous
Is IPv6 enabled?
Is the functionality to change the geographical location of the VPN server available with eduVPN?
Where can I find more documentation?
What is the origin of the eduVPN service?
eduVPN is a project launched in 2015 by the Dutch NREN, SURFnet. Today, eduVPN is used in a number of countries and is in line with the "edu" services (see eduProduct catalogue) delivered and developed by GÉANT, such as eduGAIN and eduroam.
How is a VPN always more secure than a traditional connection?
When you use public Wi-Fi, in libraries, bars or public transport, the security measures used are often not known. Similarly, when you are telecommuting, your home network is not always properly protected. All the data you enter and receive on your phone, tablet or computer can be captured by malicious people. So, rather than trusting blindly what is being deployed, it is better to be more vigilant.
A VPN (virtual private network) service will allow you to secure your traffic through an encrypted connection between your (private) computer or smartphone and your organisation's network.
How can eduVPN guarantee greater security?
This service, like all VPN (virtual private network) solutions, allows you to secure your browsing, your traffic and your data thanks to the tunnel created between your PC, tablet or smartphone and the VPN server. Your data is encrypted and therefore safe.
With eduVPN, thanks to the use of one VLAN per organisation. The data is isolated from the other data circulating on the backbone.
How does this service differ from those of private companies?
- Belnet has a dedicated team with the required experience and skills.
- VPN servers are hosted on the Belnet network backbone.
- EduVPN is based on OpenVPN, an open source product well-established and recognised in the market.
How does the installation of the service work?
Installation takes place in two stages:
- The Belnet Networks team defines your VLAN on the Belnet routing infrastructure.
- Belnet's Services team installs your VPN server
How long does the installation take?
The installation process is more or less rapid, depending on the case:
- We install your VPN server in minutes.
- The VLAN installation takes a little more time, especially if you have to configure your firewall or reroute traffic through the VLAN to your network.
- If you are using consulting, it will take you a little longer.
What are the advantages of using a VLAN?
- Not expensive
- Easy to install
- Allows the isolation of your organisation's traffic
- We use your infrastructure to pass the VLAN (it is not another physical link).
What traffic passes through the VLAN?
It is separate traffic from other traffic. It is only for connection from eduVPN servers to your organisation's network.
Does my organisation need to manage maintenance at VPN server level?
The VPN servers are hosted by Belnet. So you don't have to worry about maintenance or updates.
Who does the configuration?
You don't need to worry about server configuration. Belnet does it for you.
Belnet configures your eduVPN to your needs. If you need to update your profiles, add new routes or create your own profile for your own use, Belnet will do it for you. For example, you can request a separate profile for your students.
Is there a client interface?
You have access to the service via the OSs of your choice. Download the application via Windows; macOS; Android; iOS; Google Play; Linux.
A web interface is also available via the custom URL: eduvpn-[name of your organisation].belnet.be.
How can I create a profile?
As a client, you cannot create a profile on the server. Belnet does it for you.
What is the default profile that Belnet offers?
By default, you have a profile for direct access to your organisation. For secure internet, however, you need to call Belnet to set up another profile so it can be integrated.
How do I enable users to use the secure internet?
If your users want to use the secure internet via a VPN connection, we can create a new dedicated profile for you. The profile can be configured in different ways:
- Separate from other profiles
- Integrated into an existing profile
If there are multiple profiles, are there several separate IP ranges?
Yes, each profile has its own IP range. eduVPN uses private addresses.
Is IPv6 enabled?
IPv6 is enabled for eduVPN.
Is the functionality to change the geographical location of the VPN server available with eduVPN?
This is not possible with eduVPN.
Where can I find more documentation?
For more information: https://eduvpn.org