Clip art of VPN

Campus VPN – Remote Access Guide

TABLE OF CONTENTS

This document provides the requirements and procedures for access to the Campus Network for MSU Authorized Users as defined in the MSU IT Data Center and Campus Network Remote Access Policy.

REQUIREMENTS

Access to the Campus Network via VPN requires:

  • An MSU NetID
  • Enrollment in Duo for Multi-factor Authentication (MFA)
  • An installation of the Cisco AnyConnect client or the use of the VPN’s SSL Web Interface (for accessing web-based applications only)
  • Due to current licensing limitations, a business related justification for why you are requesting access to the VPN. For example, the name of the application or service you are trying to access that is not available from off campus.

PROCESS OVERVIEW

To obtain access to the VPN:

  1. Contact the University Service Desk via phone (x7971, opt. 1) or email (itservicedesk@montclair.edu) to request VPN access. Be sure to provide your name, NetID, and a short justification statement on why you are requesting VPN access. (The Service Desk should use the “Campus Network Access (VPN)” template.)
  2. You will receive a response confirming your access has been provisioned.
  3. Proceed to enroll in Duo Multi-factor Authentication, if you have not already done so.
  4. Decide on your preferred VPN connection method and follow the instructions provided below.

ENROLLMENT IN DUO FOR MULTI-FACTOR AUTHENTICATION

All logins to the Campus VPN require multi-factor authentication. This is a second verification step that significantly reduces the likelihood of an unauthorized person using a compromised NetID account to access the campus network.

IT provides users with a Duo account to accomplish this. Once your request for VPN access is processed, you will receive further instructions on how to enroll in Duo. If you are already enrolled in Duo, you may proceed with the instructions below.

(return to top of page)

CONNECTION METHODS

There are two methods to connect to the campus VPN.

The Cisco AnyConnect client provides a full service VPN connection to a computer. Once connected, the computer is essentially on the campus network. Generally, any service you would use from a computer directly attached to the campus network is reachable from a remote location.

The SSL Web Interface provides the ability to connect to web sites only. This is useful when you must reach a campus web service that is not available externally but you are not on a computer that you can install the Cisco AnyConnect client on (i.e. kiosk, public computer, managed computer, etc.)

For more information, see Connecting to the VPN via SSL Web Interface.

CONNECTING TO THE VPN WITH CISCO ANYCONNECT

For University-provided computers, the Cisco AnyConnect client can be installed from the Software Center app. Open the Software Center on your computer, log in with your NetID and
password, then select the “Utilities” category and click on the Cisco AnyConnect VPN icon to install it on your machine. If you encounter any difficulty using the Software Center, please contact the IT Service Desk at (973)655-7971, opt. 1 or your local College technical team for installation assistance.

For installation on non-University provided (personally owned) computers, you may also download AnyConnect directly from our software repository using your MSU NetID.

INSTALLING THE ANYCONNECT CLIENT

For Windows

Download the installer from the link above, and double click it to run . Follow the dialog boxes to install the software.

Click Next.

Click “I accept” and Next.

Click Install. Once the installation is complete, proceed to the “Using AnyConnect Client” section below.
For macOS

Download the disk image from the link above and double-click to open it. The following screen should appear on your desktop:

Double-click the “vpn.pkg” file to run it.

Click Continue.

Click Continue.

Click Install. Once the installation is complete, proceed to the “Using AnyConnect Client” section below.

(return to top of page)

USING THE ANYCONNECT CLIENT

(Note screenshots are from the Windows or Mac version but are otherwise similar.)

Enter vpn.montclair.edu in the text box and click Connect.

After you connect for the first time, the Cisco AnyConnect client will show “Connect to MSU VPN” and you will not need to type in the host name. *Note if on campus use vpn-oncampus.montclair.edu

When prompted for username and password, first pull down the Group menu and select “Campus”. In the fields labeled Username and Password , enter your MSU NetID and password.

In the field labeled Second Password you can type one of the following words:

push    Duo will send a push notification to your phone with the Duo Mobile app installed
sms     Duo will send an SMS to your registered cell phone
phone  Duo will call your registered cell phone

Alternatively, you can enter the token generated by the Duo Mobile app in the field labeled Second Password . To reveal this token, open the Duo Mobile app and tap Montclair State University.

Once you enter the code, the VPN should connect. You will then be able to access campus applications and services as if you were directly on the campus network.

If you require assistance, please contact the IT Service Desk or local College/School technical team.

(return to top of page)