Remote Access Service - Virtual Private Networking (VPN)

A knowledge base article about Remote Access Service - Virtual Private Networking (VPN) provided by the UC Berkeley IT Service Hub - Knowledge Portal

What is Remote Access Virtual Private Network (VPN)?

The bSecure Remote Access VPN (Virtual Private Network) service is designed to allow CalNetID authenticated users to connect to the UC Berkeley network from outside of campus, as if they were on campus, and encrypts the information between the user and campus.

Two VPN gateways are available for general use, Split Tunnel and Library and Full Tunnel. Each gateway use group has different characteristics. Some access restrictions apply to certain groups based on the tunnel type; please see article KB0013194 for more information on your eligibility. (Note: there is no grace period for Remote Access VPN service eligibility when your affiliation with UCB expires.) The default tunnel when connecting for the first time is Split Tunnel but users can change which tunnel they use at any time.  Information on the service each gateway provides can be found in article KB0012522.

Downloading, Installing and Configuring VPN Client Software

For information on where to download VPN client software and how to install it, please see the following knowledge base articles.

Third Party Clients

While not specifically blocked, bIT does not recommend the use of VPN clients other than the officially distributed versions available via the software download page:

https://security.berkeley.edu/services/bsecure/bsecure-remote-access-vpn

Anyone who uses an unsupported client must assume full responsibility for supporting its use. bIT plans and tests future changes to the bSecure VPN service with respect to officially distributed clients only. Future changes in the bSecure VPN service may cause unsupported clients to stop functioning properly; therefore, an unsupported client that works today may not work tomorrow.

bIT may choose not to troubleshoot a campus VPN problem specific to an unsupported VPN client and reserves the right to not make custom changes to the bSecure VPN service to accommodate unsupported clients. You may use an unsupported client with the bSecure VPN service provided that you accept these conditions, the client meets minimum security standards, and the client does not cause operational problems for other users of the campus VPN service.