������

Aalto VPN servers require Multifactor Authentication (MFA, 2FA) for security reasons. The user will be directed to browser to sign-in and accept MFA. The authentication will continue normally after the acceptance. 

Multifactor Authentication does not apply to centrally managed Aalto University laptops.

When the VPN connection is in use, all of the device's online activity is conducted via the university's servers, which may restrict or slow down the use of local online services.

Aalto's Windows 11 laptops

You can connect to the VPN from the login screen or later when you are already logged in to your computer. 

Choose vpn1.aalto.fi or vpn2.aalto.fi

Connect VPN from the computer´s login screen

1. Connect to Cisco VPN from the login screen by pressing CTRL+ALT+DEL and clicking the network sign-in icon. 

2. Choose vpn1.aalto.fi or vpn2.aalto.fi

3. Click the Connect button to start Cisco VPN.

4. Sign in.

Connect VPN when you are already logged in to your computer

1.  Search for (search field is in the lower left corner of the desktop) "Aalto VPN" and select Aalto VPN connection (Cisco Secure Client) from the search results. 

2. In the window that opens, choose vpn1.aalto.fi or vpn2.aalto.fi

3. Click Connect.

4. Your laptop has now a remote connection.

When you want to close the connection

1. Select the arrow in the bottom right bar (item 1. in the image) and the VPN remote connection icon (item 2. in the image).

2. In the window that then opens, select Disconnect.

3. The remote connection has now been closed.

Aalto VPN is not operational in the eduroam network used on Aalto campuses. If, for some reason, you need the VPN connection while on campus, you can use Aalto Open and Cisco’s VPN application, for example.

Aalto's Mac laptops

1. Open the Spotlight search and use the search term Cisco. Select the Cisco Secure Client application and click it open.

2. The application opens a new window. Make sure that the address in the pull-down box is in the format vpn1.aalto.fi or vpn2.aalto.fi.

3. Press Connect to create a VPN connection.

NOTE! When you open the Cisco application, it might get updated automatically. During this there is a progress window.

4. Press the icon that has appeared in the top corner of the screen. This brings out the VPN menu. In this menu, you can, for instance, open the Cisco Secure Client window where you can check the status of the VPN connection by pressing the Show AnyConnect Window text. You can also close the VPN connection by pressing the Disconnect text below the grey VPN text.

5. The VPN connection has been established when there is green symbol above the lock in the AnyConnect window, and when the text Connected to vpn(number 1 or 2 or...).aalto.fi is shown below the VPN text.

NOTE! Aalto VPN is not operational in the eduroam network used on Aalto campuses. If you need the VPN connection while on campus, use the aalto open network and Cisco’s VPN connection. You can also use the wireless aalto network, in which case you do not need to use the VPN connection!

Aalto Ubuntu Laptops

Using VPN on Aalto Ubuntu Laptops is possible with OpenConnect client if package "aalto-vpn" has been installed. Using the package, VPN-connection can be established with the client certificate instead of username and password.

The package is set to be installed automatically on Ubuntu Laptops but it is possible that the package is not preinstalled if the laptop has not been connected ������-network for a long while. You may check if the package is already installed using command "dpkg -s aalto-vpn".

If the command gives a line that says "Status: install ok installed" the package is already installed. If the package is not installed, the primary user of the computer may install it using commands:

$ pkcon refresh

$ pkcon install aalto-vpn

Remote connection to students’ and employees’ own devices

A VPN remote connection can be installed on many different devices and platforms. However, the remote connection always requires the installation of the client software and the specification of the connection address from the device’s settings.

When you try installing the Aalto VPN, make sure you are not connected to the 'aalto' or 'eduroam' networks. The VPN does, however, work on the 'aalto open' network.

Once you have completed the installation, you can test it by going to or any other 'what is my IP address' type of website. Your IP address should be in the form '130.233.x.x' or '2001:708:20:*'.

The connection address is the same for all platforms: vpn1.aalto.fi or vpn2.aalto.fi

Android 

You can download Cisco Secure Client application for Android devices from .  

iOS 

You can download Cisco Secure Client application for iOS devices from Apple’s .

Windows

1. Installation of the client software

   Download the 'Cisco VPN Client' from . Open the downloaded installer file and install the software. After installation, the VPN program can be found under the name 'Cisco Secure Client'.

2. Establishing a connection
   1. Open Cisco Secure Client.
   2. Type the name of the VPN server into the field (vpn1.aalto.fi or vpn2.aalto.fi).
   3. Connect to the VPN. The application opens a window where you can log in with your Aalto email address.

Cisco Secure Client may update itself on the first run.

NOTE: Windows may report that no internet connection was found. Check for yourself anyway whether the connection works or not.

Mac

1. Installation

   Download the 'Cisco VPN Client' for macOS from . Open the .dmg file by clicking it, and select 'Cisco Secure Client.pkg'. Go through the installation process.

2. Allow the application to run in the background

   Open System Settings -> General -> Login Items -> Allow 'Cisco Secure Client - AnyConnect VPN Service', then restart your computer.

3. Connect

Open Cisco Secure Client. Type either vpn1.aalto.fi or vpn2.aalto.fi into the AnyConnect VPN field and press 'Connect'. A window will open where you can log in with your Aalto credentials. Once logged in, you are connected to the Aalto VPN.

Linux

1. Install any dependencies

   If you do not yet have webkitgtk and libxml2 installed, install them with your package manager. You can check the specific package's name for your distro via the link. e.g. for Ubuntu they are webkit2gtk and libxml2 . For Fedora they are webkit2gtk4.1  and libxml2 . The package names may change with time, so it may also be good to apt search  or dnf search

2. Download the installation script

   Go to or , log in with your Aalto credentials, and download the Cisco Secure Client installation script in .deb or .rpm format. The .rpm format is for Fedora distros (package manager is dnf), and the .deb format is for Debian based distros (package manager is apt , e.g. Debian, Ubuntu, Linux Mint)

3. Install the package

   Clicking the .deb or .rpm file may start the installation process on your OS, if so, follow the installation prompts. If that does not work, you can install it via the terminal as follows:

   $ sudo apt install ~/Downloads/<file>.deb # installation with apt, file may be in a different path
   $ sudo dnf install ~/Downloads/<file>.rpm # installation with dnf, file may be in a different path

   NOTE: the command has to be given the file as a path, e.g. apt install file.deb  won't work, but apt install ./file.deb  does.

   After installation, Cisco Secure Client will appear in the application menu.

4. Connect

Open Cisco Secure Client. Type either vpn1.aalto.fi or vpn2.aalto.fi into the 'Connect to' field and press 'Connect'. A window will open where you can log in with your Aalto credentials. Once logged in, you are connected to the Aalto VPN.
 

FAQ

The VPN connection fails and opens a new page in your browser, what should I do?

How to set up your Aalto University account on your home Windows device and connect to Cisco VPN

If the VPN redirects you to the Microsoft 365 page () when you try to connect and the connection fails, it is possible that you have connected another organization's account to your device instead of an Aalto account. To fix this, add your Aalto account to the "Access work or school" tab according to the instructions below.

1. Search for Access work or school in the bottom left search bar.
2. Open the Access work or school tab. Once you open it, you should see a ‘+’ button with “Connect” next to it.
3. Click Connect.
4. Enter your Aalto University email address.
5. After entering your email, you will be prompted to enter your password. Enter your password and continue by pressing Sign in.
6. Wait for your device to log you in.
7. When logged in, your account should show in the listed accounts.

Connecting to AnyConnect VPN

1. Search for Cisco Secure Client in the bottom left search bar.
2. After a few moments, the VPN will open.
3. To connect to the Aalto University network, enter the Aalto VPN address (vpn2.aalto.fi / vpn1.aalto.fi /).
4. Click Connect.
5. You will be prompted to authenticate your identity.
6. After authenticating your identity, and waiting a few moments, you will be connected to the Aalto University network.

If connecting to the VPN on your home computer still fails, contact the IT Service Desk by submitting a service request at servicedesk@aalto.fi or through the self-service portal at servicedesk.aalto.fi