How do I use the IU Groups VPN to restrict remote access to my team's administrative resources?

The Indiana University Groups VPN provides dedicated VPN IP space for teams needing to restrict remote access to their internal administrative environments. Access permissions for Groups VPN IP ranges are controlled with Active Directory security groups. All users must authenticate via Two-Step Login (Duo). A VPN IP address from a team's dedicated IP space is assigned only if the user is a member of the appropriate AD security group.

To set up Groups VPN access for your team:

  1. Contact Campus Network Engineering (CNE) to request a dedicated Groups VPN IP range. In your request, indicate the AD security group you want to use to grant access permissions for your team's dedicated VPN IP space. (You can use an existing AD group that you manage, or create a new group containing the individuals on your team.) Also, include an estimate of how many users you expect will be connecting concurrently. Campus network engineers will process your request and respond with a dedicated VPN IP range for the specified AD security group.
  2. Set Data Center and host-based firewall rules for HTTP, HTTPS, RDP, and/or SSH to allow connections only from IP addresses within your Groups VPN IP range. For Data Center firewall requests, use the Campus Network Portal (CNP); for help, see Firewall management. To set host-based rules, use Windows Firewall (on Windows machines), ipfw or pf on OS X machines, or iptables (on Linux machines).

If you have questions or need help, contact Campus Network Engineering (CNE).

This is document apab in the Knowledge Base.
Last modified on 2017-09-29 17:21:15.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.