# VPN Access

## via `vpn.psi.ch` using Cisco Secure Client, formerly known as AnyConnect

### Installation
#### Managed RHEL

Best ask your system administrator to set in Hiera
```
cisco_vpn::enable: true
```

or run as `root`
```
dnf install cisco-secure-client-vpn cisco-secure-client-dart
```

#### Other Distributions

Please check out (https://www.psi.ch/en/computing/linux-english).
For questions and support please reach out to the [Network Team](mailto:network@psi.ch). There is no support from the Linux Team for this.

### Connect To VPN

Start the "Cisco Secure Client":

![icon Cisco Secure Client](vpn/client_icon.png)

Then enter `vpn.psi.ch` (if not already set):

![initial Cisco Secure Client window](vpn/connect1.png)

After clicking "Continue" enter your login name and password:

![password entry in Cisco Secure Client window](vpn/connect2.png)

Continue by clicking "Connect" and approve on your MFA app (e.g. Microsoft Authenticator) or enter your MFA token.

After you may close the window. For Disconnect open it again and click on "Disconnect".


### Support

For support best create a DART-bundle which includes log files, etc. to be analyzed.
To create such a bundle open the "Cisco Secure Client - DART" tool:

![icon Cisco Secure Client - DART](vpn/dart_icon.png)

Then click through:

![initial Cisco Secure Client - DART  window](vpn/dart1.png)
![Cisco Secure Client - DART  window](vpn/dart2.png)
![Cisco Secure Client - DART  window](vpn/dart3.png)

Then it might ask you for the password to select information as `root` if you have such permissions.

Finally it tells you where to get the DART bundle:

![Cisco Secure Client - DART  window](vpn/dart4.png)

Please attach it to the ServiceDesk ticket with your problem.