Engineering Network Services - CSU

Engineering Network Services
 

VPN Information for Windows

Using DUO for Two-Factor Authentication

    Beginning April 25, 2018, connecting to CSU using Pulse Secure and secure.colostate.edu will not only require you to log in with your eID and Password, but will also require you to verify your identify using a second factor device (your cell phone, a land line, or a hardware token).

  1. Download the Duo Mobile App to your smartphone. If you donít have a smartphone or prefer not to use it for CSU business, you can skip this step.
  2. From your desktop or laptop computer, connect to the webpage https://authenticate.colostate.edu and review the documentation and FAQs Ė especially if you travel or work internationally, or if you use Pulse Secure.
  3. Click on the "Sign Up/Modify Devices" button and follow the instructions to register your second device. If you donít plan to use a smartphone, register your CSU desk phone. Alternatively, hardware tokens that you can carry with you are available for purchase through RamTech. To learn more, visit ACNS DUO help
  4. Return to the ACNS DUO page and click on the "Test Your Account" button to make sure it all works.
  5.  

    Pulse Secure SSL VPN

    These instructions are provided as a courtesy. The Pulse Secure VPN is supported by ACNS, not ENS. Please contact ACNS if you have any issues with this tool.

    1. Download the version for Windows 32bit/64bit here. Be sure to download the "Pulse Client manual installer VPN" client.
      (Not sure which operating system you have?)
    2. Double click on the file and install Pulse Secure. Just take all default settings during the installation.
    3. After the install finishes, you should see new icon in the lower right corner of your screen in the system tray.
      Pulse Secure tray icon
    4. Click on the Pulse icon and select "Open Pulse Secure". Click on the "+" icon.
      Pulse add connection
    5. In the next window, keep the default type as "UAC or SSL-VPN". For name you can put in what you want. Example: CSU
      The server URL is: https://secure.colostate.edu/2fa
      Pulse add connection info
    6. Click to "Add" button. You should now see the following:
      Pulse connection added
      At this point, click the "Connect" button and login with your CSU Eid and password.
    7. In the next window, click the "Save settings" check box, then click the "Connect" button.
      Pulse save and connect
      You should get a green check showing you are connected.
      From here you are now ready to start up RDP client to connect to the Virtual Lab.
    8. IMPORTANT! Before Pulse can connect, it will need you to supply your second authentication factor that you setup using DUO. Once you have supplied this, Pulse will fully connect to the CSU network.

    Now what? You may wish to map network drives or connect to a server.

    SSL VPN

    The Engineering SSL VPN does not work with the CSU wired network, but will work from the CSU wireless network, and from off-campus connections (wired or wireless).

    1. Make sure you have the latest Java Runtime Environment installed.
    2. Go to https://secure.colostate.edu/engr and log in with your CSU eName and ePassword.
    3. Allow Juniper Network Java applet to install (see note below if using Chrome or Opera).

    Once the applet installs, the web page will remain up. You can minimize the window or even close it and work as desired. There is a padlock icon in the System Tray. Double-clicking this will display the connection properties, including the IP address you've been assigned. Closing this window will disconnect the secure session.

    NOTE: If you are using Google Chrome or Opera as your browser you will need to click the start button for the "Network Connect" client application to start the vpn client.

    Now what? You may wish to map network drives or connect to a server.

    Open VPN for Windows

    !! ENS will no longer provide our OpenVPN Service starting October 2018. Please use Pulse Secure or the SSL vpn. !!

    Installing OpenVPN

    1. Log in as an administrator on the computer.
    2. Turn off UAC before install.(Why do we do this?)
    3. Uninstall all previous versions of OpenVPN. Delete the OpenVPN folder in C:\Program Files once the uninstall is complete.
    4. Download the latest OpenVPN package for your operating system. (Not sure which operating system you have?)
    5. Install the OpenVPN software package:
      1. Start the install package from the location where you downloaded it.
      2. Uncheck "OpenVPN Service".
      3. Ignore any warnings during the install and, if prompted, allow the program to install the adapter.
    6. Windows 8.x only: When the install is complete, disable IPv6 on the TAP-Win32 adapter. This is the virtual network adapter installed by OpenVPN.
      1. Press the Windows key and type view network connections, and click on it in the list.
      2. Right-click on the TAP-Win32 adapter v9 and select Properties. A local area connection properties window will appear.
      3. Scroll down the list, then disable Internet Protocol version 6.
      4. Click OK to save your changes.
      5. Right-click the OpenVPN icon on the desktop. Click Properties/Compatibility and tick Run this program as administrator, then click OK.
    7. Download the Engineering OpenVPN configuration file.
    8. Install the configuration file. Use the default installation path. You're done!

    Using OpenVPN

    1. Launch OpenVPN GUI from the Start Menu or desktop icon. Once OpenVPN starts, the taskbar will show an icon for the program.
    2. Right-click the OpenVPN taskbar icon and select Connect. The program will ask you for your Engineering username and password.
    3. You can tell you are successfully connected when the icon changes to green instead of grey.

    Now what? You may wish to map network drives or connect to a server

 
layout image
layout image

This document last modified Thursday July 26, 2018


Engineering Network Services home page link College of Engineering home page link