TABLE OF CONTENTS
- REQUIREMENTS
- PROCESS OVERVIEW
- ENROLLMENT IN DUO FOR MULTI-FACTOR AUTHENTICATION
- CONNECTION METHODS
- CONNECTING TO THE VPN WITH CISCO ANYCONNECT
- INSTALLING THE ANYCONNECT CLIENT
- USING THE ANYCONNECT CLIENT
This document provides the requirements and procedures for access to the Campus Network for MSU Authorized Users as defined in the MSU IT Data Center and Campus Network Remote Access Policy.
REQUIREMENTS
Access to the Campus Network via VPN requires:
- An MSU NetID
- Enrollment in Duo for Multi-factor Authentication (MFA)
- An installation of the Cisco AnyConnect client or the use of the VPN’s SSL Web Interface (for accessing web-based applications only)
- Due to current licensing limitations, a business related justification for why you are requesting access to the VPN. For example, the name of the application or service you are trying to access that is not available from off campus.
PROCESS OVERVIEW
To obtain access to the VPN:
- Contact the University Service Desk via phone (x7971, opt. 1) or email (itservicedesk@montclair.edu) to request VPN access. Be sure to provide your name, NetID, and a short justification statement on why you are requesting VPN access. (The Service Desk should use the “Campus Network Access (VPN)” template.)
- You will receive a response confirming your access has been provisioned.
- Proceed to enroll in Duo Multi-factor Authentication, if you have not already done so.
- Decide on your preferred VPN connection method and follow the instructions provided below.
ENROLLMENT IN DUO FOR MULTI-FACTOR AUTHENTICATION
All logins to the Campus VPN require multi-factor authentication. This is a second verification step that significantly reduces the likelihood of an unauthorized person using a compromised NetID account to access the campus network.
IT provides users with a Duo account to accomplish this. Once your request for VPN access is processed, you will receive further instructions on how to enroll in Duo. If you are already enrolled in Duo, you may proceed with the instructions below.
CONNECTION METHODS
There are two methods to connect to the campus VPN.
The Cisco AnyConnect client provides a full service VPN connection to a computer. Once connected, the computer is essentially on the campus network. Generally, any service you would use from a computer directly attached to the campus network is reachable from a remote location.
The SSL Web Interface provides the ability to connect to web sites only. This is useful when you must reach a campus web service that is not available externally but you are not on a computer that you can install the Cisco AnyConnect client on (i.e. kiosk, public computer, managed computer, etc.)
For more information, see Connecting to the VPN via SSL Web Interface.
CONNECTING TO THE VPN WITH CISCO ANYCONNECT
For University-provided computers, the Cisco AnyConnect client can be installed from the Software Center app. Open the Software Center on your computer, log in with your NetID and
password, then select the “Utilities” category and click on the Cisco AnyConnect VPN icon to install it on your machine. If you encounter any difficulty using the Software Center, please contact the IT Service Desk at (973)655-7971, opt. 1 or your local College technical team for installation assistance.
For installation on non-University provided (personally owned) computers, you may also download AnyConnect directly from our software repository using your MSU NetID.
INSTALLING THE ANYCONNECT CLIENT
For Windows
Download the installer from the link above, and double click it to run . Follow the dialog boxes to install the software.
Click Next.
Click “I accept” and Next.
Click Install. Once the installation is complete, proceed to the “Using AnyConnect Client” section below.
For macOS
Download the disk image from the link above and double-click to open it. The following screen should appear on your desktop:
Double-click the “vpn.pkg” file to run it.
Click Continue.
Click Continue.
Click Install. Once the installation is complete, proceed to the “Using AnyConnect Client” section below.
USING THE ANYCONNECT CLIENT
(Note screenshots are from the Windows or Mac version but are otherwise similar.)
Enter vpn.montclair.edu in the text box and click Connect.
After you connect for the first time, the Cisco AnyConnect client will show “Connect to MSU VPN” and you will not need to type in the host name.
When prompted for username and password, first pull down the Group menu and select “Campus”. In the fields labeled Username and Password , enter your MSU NetID and password.
In the field labeled Second Password you can type one of the following words:
push Duo will send a push notification to your phone with the Duo Mobile app installed
sms Duo will send an SMS to your registered cell phone
phone Duo will call your registered cell phone
Alternatively, you can enter the token generated by the Duo Mobile app in the field labeled Second Password . To reveal this token, open the Duo Mobile app and tap Montclair State University.
Once you enter the code, the VPN should connect. You will then be able to access campus applications and services as if you were directly on the campus network.
If you require assistance, please contact the IT Service Desk or local College/School technical team.