1. Step 1:  Install Microsoft Authenticator
2. Step 2. Configure Microsoft Authenticator
3. Step 3. Call the Service Desk
4. Step 4. Configure Cisco AnyConnect VPN Client
5. Step 5. Connect to VPN
6. Step 6. Complete Your Second Factor of Authentication

杏吧原创

Students requiring VPN access will need to follow these steps:

Note:  Only current students can request VPN access, alumni do not get VPN access.

Step 1:  Install Microsoft Authenticator

If you already have the Microsoft Authenticator app installed on your mobile device proceed to Step 2.

1. Start by installing the to your mobile device.
2. There is no need to open the app at this step in the process.

Step 2. Configure Microsoft Authenticator

1. Go to
2. Sign in using your @cmail.carleton.ca account credentials
3. Click ‘+ Add sign-in method’, then click ‘Authenticator App’ in the drop-down menu and follow the steps that are listed, then proceed to Step 3.

Step 3. Call the Service Desk

1. Contact the ITS Service Desk by phone to verify your ID at 613-520-3700 to finish the setup process.
2. Please note access can only be granted between 8:30 and 4:30 Mon – Fri

Step 4. Configure Cisco AnyConnect VPN Client

If you need to download & install the VPN client, go to . Enter your Cmail address, and you will be redirected to log in with your MC1 Username and Password.  Chromebook users can go to the , search for and install the Cisco Secure Client (AnyConnect) app.

• Launch the Cisco AnyConnect client
• Manually enter cuvpn.carleton.ca/mfa and click ‘Connect’
• Each time you connect to the VPN in the future, you will see杏吧原创U-RemoteVPN-MicrosoftMFAprofile when logging in.

Once you have selected the profile, click Connect.

Step 5. Connect to VPN

Enter your My杏吧原创One account (firstnamelastname@cmail.carleton.ca) and click next.

You should be redirected to the ADFS login page. Enter your password and click Sign In.

Step 6. Complete Your Second Factor of Authentication

You will be prompted to complete your second factor of authentication via the app or phone call.

1. Installing Cisco VPN from Apple Devices
2. Using the Cisco AnyConnect Security Mobility Client

杏吧原创

The Cisco Secure Client AnyConnect VPN is available for Apple iOS 10.0 and later and it .

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. .

By default Students do not get VPN access, any Student requiring VPN access will need to request access

Installing Cisco VPN from Apple Devices

1. Install the from the Apple App Store.
2. Open AnyConnect App, and tap on the Home icon at the bottom left then tap Connections
3. To configure VPN service, tap Add VPN Connection.
   
4. In the Server Address field:
   • cuvpn.carleton.ca/mfa
5. Tap Save
6. For the Description section, enter a friendly name you will remember.
7. Allow AnyConnect to add the connection

Using the Cisco AnyConnect Security Mobility Client

To use the VPN Service with MFA, you can launch the Cisco AnyConnect Security Mobility Client on your iOS device.

Next, take the following steps:

1. Flip the AnyConnect VPN toggle in the upper right corner. You will be prompted for your full email address (Staff: @cunet.carleton.ca , Student: @cmail.carleton.ca) and MC! Password.
2. You should be redirected to the AD FS login page. Enter your password and click Sign in.
   
3. You will be prompted to complete your second factor of authentication. Please see the following for assistance:

   Once the second factor authentication completes, you are presented with the notice to Accept the VPN service terms.

Please contact the ITS Service Desk if you would like any assistance.

1. On your computer search bar (bottom left), type system.
2. On the search results click System under the Settings headingThe 杏吧原创 window will open, under the Device specifications heading look for Device Name. This is your computer name

1. Installing VPN for Android
2. Using the Cisco AnyConnect Security Mobility Client

杏吧原创

Cisco AnyConnect Secure Mobility Client for Mobile Platforms is available for 4.0 and later. The Cisco AnyConnect App can be downloaded from Google Play Store.

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. .

By default Students do not get VPN access, any Student requiring VPN access will need to request access

Installing VPN for Android

1. Download and install the Cisco AnyConnect App from Google Play Store.
   
2. Open AnyConnect App, and tap Connection.
   
3. To configure VPN service, tap Add New VPN Connection.
   
4. In the Server Address field, type cuvpn.carleton.ca/mfa and tap Done.
   

Using the Cisco AnyConnect Security Mobility Client

Beginning in November 2022, multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. To use the VPN Service with MFA, open AnyConnect App from your device.

After Cisco AnyConnect has been installed,

1. To use VPN service, tap the on the off/on button. The Authentication dialog will appear.
2. You will be prompted for to enter full 杏吧原创 issued email address and password. 
   • In the Password field, enter your MC1 password. 
     • You will be redirected to Microsoft MFA screen to confirm the login attempt.
       • To do this, open the Microsoft Authenticator app on your phone and . You can also use a hardware token associated with your account, the request process can be founder .

Note: The first time you connect to the VPN service using multi-factor authentication (MFA), the Cisco AnyConnect VPN client will download an updated profile, which will include a longer timeout value when using the push or phone methods. We recommend that you use a passcode the first time you use this configuration.

3. You will be presented with the policy and privacy acknowledgement to accept before establishing the connection. Once connected you should have access to all the same resources allowed to you. Click Accept to proceed.

4. After you connect using multi-factor authentication (MFA), when you next launch the Cisco AnyConnect VPN client you should see an alternate profile available. Please use 杏吧原创U-RemoteVPN-MicrosoftMFA profile that has been assigned to you when connecting to the VPN service in the future.

Please contact the ITS Service Desk if you would like any assistance.

1. Installing VPN for iOS- iPad
2. Using the Cisco AnyConnect Security Mobility Client

杏吧原创

The Cisco Secure Client AnyConnect VPN is available for Apple iOS 10.0 and later and it .

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. .

By default Students do not get VPN access, any Student requiring VPN access will need to request access

Installing VPN for iOS- iPad

1. Install the from the Apple App Store.
   
2. Open AnyConnect App, and tap Connections.
   
3. To configure VPN service, tap Add VPN Connection.
   
4. In the Server Address field, type:
   • For staff and/or faculty: 杏吧原创U-RemoteVPN-MicrosoftMFA or cuvpn.carleton.ca/mfa
   • For students: 杏吧原创U-RemoteVPN-MicrosoftMFA or cuvpn.carleton.ca/mfa
     and tap Save.

Using the Cisco AnyConnect Security Mobility Client

Beginning in November 2022, multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. To use the VPN Service with MFA, you can launch the Cisco AnyConnect Security Mobility Client on your iOS device.

After successfully installing Cisco SecureClient AnyConnect, take the following steps:

1. Flip the AnyConnect VPN toggle in the upper left corner. You will be prompted for a Username, Password and Second Password.
2. In the Username field, enter your My杏吧原创One (MC1) account (do not include @cunet.carleton.ca.) In the Password field, enter your MC1 password.
3. The Second Password asks for the Duo second factor that you would like to use. You have two options:
   • • Option 1 (Recommended method for first-time users of the VPN with MFA): Enter a passcode (6-digit pin) from the Duo mobile application on your phone. To do this, open the Duo app on your phone and . You can also use a hardware token associated with your Duo account, or a bypass code created by the Service Desk. OR
     • Option 2: Enter the word push to have Duo push an authentication prompt to your default mobile application, or the word phone to receive a phone call to your default phone number. Accept the prompt to proceed.

   Note: The first time you connect to the VPN service using multi-factor authentication (MFA), the Cisco AnyConnect VPN client will download an updated profile, which will include a longer timeout value when using the push or phone methods. We recommend that you use a passcode the first time you use this configuration.

4. Once you’ve completed all fields, click OK.
5. You will be presented with the policy and privacy acknowledgement to accept before establishing the connection. Once connected you should have access to all the same resources allowed to you. Click Accept to proceed.
6. After you connect using multi-factor authentication (MFA), when you next launch the Cisco AnyConnect VPN client you should see an alternate profile available. Please use 杏吧原创U-RA-Duo, 杏吧原创U-RemoteVPN-Duo, or other Duo enabled profile that has been assigned to you when connecting to the VPN service in the future.

Please contact the ITS Service Desk if you would like any assistance.

1. Installing VPN for Linux
2. Using the Cisco AnyConnect Security Mobility Client

杏吧原创

Cisco AnyConnect 4.1 supports Linux Red Hat 6, 7 & Ubuntu 12.04 (LTS), and 14.04 (LTS) (64-bit only).

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. .

By default Students do not get VPN access, any Student requiring VPN access will need to request access

* Note: The Connection Server address is cuvpn.carleton.ca/mfa

Installing VPN for Linux

Note: The following installation procedure was tested on Ubuntu 14.04 with Firefox.

1. Go to:  and login with your MC1 Username and Password.
   
2. The WebLaunch will detect the version of Java you have installed and attempt to automatically install Cisco AnyConnect Security Mobility Client. If failed, below screen will appear, and click AnyConnect VPN to download the client.
3. Under the heading What should Firefox do with this file? Select Save File, then the OK button
4. Exe installation scripts can be found in: /opt/cisco/anyconnect/bin/vpnui
5. Run the script sh to have the Cisco AnyConnect Secure Mobility Client setup.
   

Using the Cisco AnyConnect Security Mobility Client

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client.

1. To use the VPN Service with MFA, go to Applications -> Internet ->Cisco AnyConnect Secure Mobility Client and launch the client.
   
   2.Select the 杏吧原创U-RemoteVPN-MicrosoftMFA profile from the drop down menu, if you do not see this option or it fails to connect, type cuvpn.carleton.ca/mfa and press ‘Connect’.

3. You will be redirected to this login page.

• • In the Username field, enter your My杏吧原创One (MC1) account (do not include @cunet.carleton.ca.)
  • In the Password field, enter your MC1 password.

4. You will be prompted to complete your second factor of authentication. Please see the following for assistance:

5. You will be presented with the policy and privacy acknowledgement to accept before establishing the connection. Once connected you should have access to all the same resources allowed to you. Click Accept to proceed.

Please contact the ITS Service Desk if you would like any assistance.

1. Installing VPN for MacOS
2. Using the Cisco AnyConnect Security Mobility Client
3. Troubleshooting

杏吧原创

Students requiring VPN access visit this information site.

The Virtual Private Network (VPN) client software is required for access to 杏吧原创 University resources that are restricted to on-campus use. It provides a secure encrypted channel from your home to the campus and allows access to many campus resources.

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. .

By default Students do not get VPN access, any Student requiring VPN access will need to request access

Connection Server: cuvpn.carleton.ca/mfa

Installing VPN for MacOS

1. Go to: and login with your MC1 Username and Password.
   
2. On the following page, click Continue.
   
   
3. Click on the Download for macOS button.
4. Open the Cisco Secure Client file you just downloaded, and it will present the .dmg package:
5. The Install Cisco Secure Client window will appear, click on Continue and accept the
   License agreement.
6. In some circumstances depending on your computer system configuration, automatic installation may fail and you will be prompted to manually download installer package. Click AnyConnect VPN to continue. Depending on your browser:
   • Google Chrome: open the downloaded .dmg file
   • Microsoft Edge: click Run in the message bar at the bottom of the page
   • Mozilla Firefox: select Save File in the pop-up window. Click on the blue Downloads arrow in the top bar of the browser, and click on the Downloaded File.
7. Follow the prompts to run the Cisco Secure Client setup.
8. In many Mac computers, security settings will prompt you to approve the Cisco Anyconnect Extension.
9. Open the System Preferences > Security and Privacy and following the usual processes, click the Allow button.
10. Returning to the install screens click through until you reach this message:

Using the Cisco AnyConnect Security Mobility Client

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. Instructions on using to use Cisco AnyConnect Security Mobility Client with MFA are found .

Troubleshooting

If trying to reinstall the Cisco VPN software on a MAC and the computer is saying the software is already installed attempt the following fix:

• Click the Launchpad icon  in the Dock, type Terminal in the search field, then click Terminal … or
• In the Finder , open the /Applications/Utilities folder, then double-click Terminal.

and enter this command:

sudo /opt/cisco/anyconnect/bin/vpn_uninstall.sh

You will be prompted for the local computer password (not mc1 pw).  Answer ‘Yes’ when prompted to remove all profiles and certificates.

Please contact the ITS Service Desk if you would like any assistance.

1. Install VPN on ITS-Imaged Staff PCs (CUNET Domain)
   1. Use Software Center
2. Install VPN on Windows 10/11
   1. Use cuvpn.carleton.ca
3. Using the Cisco AnyConnect Security Mobility Client

杏吧原创

Students requiring VPN access visit this information site.

The Virtual Private Network (VPN) client software is required for access to 杏吧原创 University resources that are restricted to on-campus use.  It provides a secure encrypted channel from your home to the campus and allows access to many campus resources.

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client. .

By default Students do not get VPN access, any Student requiring VPN access will need to request access

* Note: The Connection Server address is cuvpn.carleton.ca/mfa

Install VPN on ITS-Imaged Staff PCs (CUNET Domain)

You can install the Cisco client using the Software Center on ITS-imaged PCs that are members of the CUNET domain without the need for administrative rights.

       Note: This must be done while the computer is on campus with a wired network connection

Use Software Center

1. Type software center in the search tool on the taskbar of your computer, and click to open the Software Center.
2. On the applications menu on the left-hand side, you will see the Cisco Secure Client, click on it and choose Install
   • This must be done while the computer is on campus with a wired network connection

Install VPN on Windows 10/11

Use cuvpn.carleton.ca

1. Go to:  and login with your MC1 Username and Password

2. On the following page, click Continue

3. Press Download for Windows

4. Depending on your browser:

• Google Chrome: open the downloaded .exe file
• Microsoft Edge: click Run in the message bar at the bottom of the page
• Mozilla Firefox: select Save File in the pop-up window. Click on the blue Downloads arrow in the top bar of the browser, and click on the Downloaded File

5. Follow the prompts to run the Cisco Anyconnect Security Mobility Client Setup. If a security message appears, click Yes to allow the software to be installed.

Using the Cisco AnyConnect Security Mobility Client

Multifactor authentication (MFA) is required when using the Cisco AnyConnect Security Mobility Client.  Instructions on using to use Cisco AnyConnect Security Mobility Client with MFA are found .

* Note: The Connection Server address is cuvpn.carleton.ca/mfa

Please contact the ITS Service Desk if you would like any assistance.