Use Duo with your Virtual Private Network (VPN)
Before you Connect to VPN
- Ensure that you have Duo Security Two-Factor Authentication set up on your UMN account.
- Set your Default Duo Device.
Connect to your VPN
- Launch the Cisco AnyConnect client -- the primary VPN tool supported by the University.
- All VPNs require Duo, including native clients, etc.
- If you are using another tool to access VPN (Windows, Mac OS, Linux Native clients or IPSEC) we strongly recommend transitioning to Cisco AnyConnect for future VPN access.
- To ensure that you can access the appropriate VPN pool (full, split, or departmental), click the drop-down menu and select “UMN - Departmental Pools”.
- Click “Connect.”
- In the pop-up that appears, click on the “Group:” drop-down menu and select the appropriate VPN pool.
- Verify your identity with Duo.
Verify your Identity with Duo
Based on the way you use Duo, you’ll need to do one of the following:
Mobile Device, U2F, or Phone Users
If you use cell phone, tablet, U2F token or landline telephone to verify your identity with Duo
- accept the “push notification” you get from Duo as you normally would.
- Note: there will not be a prompt from Cisco to “accept the push” on the device you are using to sign in to the VPN. You will simply receive a Duo request on the device you have set up with Duo to receive “push notifications.”
Token or Passcode Users
If you use a hardware token or passcodes to verify your identity with Duo
- In the VPN log in window, in the Account Name field, enter your UMN user ID.
- In the Password field, enter your UMN password, followed by a comma, then enter the passcode (do not enter any spaces).
When to Use VPN
As a reminder, VPN should only be used when resources cannot be accessed by other means. A VPN is not needed for web-based UMN resources and services, such as MyU, University Gmail, Canvas, G Suite, and Office 365, and others.