MFAVPN

What is a Virtual Private Network (VPN)?

A virtual private network, or VPN, is an encrypted connection over the Internet from a device to a network, such as the LBNL network. The encrypted connection helps ensure that sensitive data is safely transmitted and prevents unauthorized people from eavesdropping on the traffic and allows the user to conduct work remotely. The LBL-VPN also makes the device logically appear on the LBNL network, this can be useful to access resources that are restricted to the LBNL network.

Why do I need to use the LBL-VPN?

Maybe you don't? The majority of Lab services are accessible from any place on the Internet, without using the LBL-VPN. You can access Gmail, Google Calendar, and the rest of the Google Suite without LBL-VPN. Zoom and video conferences doesn't need LBL-VPN. The the vast majority of Lab Business Systems, such as LETS and eBuy, are accessible without LBL-VPN.

However, there are a few situations where you might need to use the LBL-VPN:

To access access resources at LBNL that are not available to the Internet; we're keeping a list at Berkeley Lab VPN Information
If you believe the network you are using is untrustworthy, for example a hotel or coffee shop, and you want additional security, use the LBL-VPN.
To circumvent network filtering, the most notable example being traveling to China, where traffic is heavily filtered

How do I use the LBL-VPN?

The instructions for setting up Cisco AnyConnect can be found here.

What login credential do I use to login to the LBL-VPN?

User your Berkeley lab identity or (LDAP) credential to login to the LBL-VPN. Do not use your AD credential, it will not work.

Can I use the LBL-VPN on a personally-owned computer?

Yes, you can, however, note that while connected to LBNL's VPN, all of your computer's network traffic will be routed through LBNL's network. When you browse the web, watch Netflix, or download a torrent file, your network traffic is tunneled to the Lab before being routed to its final destination. For all practical purposes, your computer is "at the Lab," and for that reason you may want to review the Lab's policy for appropriate computer use .

When my LBL-VPN tunnel is enabled, will network performance decrease?

While there is some overhead associated with VPN security features, end-users typically do not detect any performance degradation.

What are the IP ranges used by the VPN?

When you are assigned IP addresses by the VPN, you will get one IPv4 address in the range 131.243.144.0/20 and one IPv6 address in the 2620:83:8000:165::/64

Where can I get Cyber Security information about the LBL-VPN?

Additional details about the LBL-VPN, including the subnets, use cases, and pros and cons are at Berkeley Lab VPN Information

Additional VPN resources:

Page tree

VPN Information