VPN for Employees

From WSU Technology Knowledge Base
Revision as of 11:05, 19 January 2019 by KGraetz (talk | contribs)
Jump to: navigation, search

(Looking for the VPN for Students page?)

Step One: Configure an Authenticator App

Before you start, you must have access to an Authenticator app. This is typically a mobile phone app that can generate six-digit verification codes to allow multi-factor authentication.

Download the authy app

Click here for instructions on how to set up Microsoft Authenticator with your WSU account

Click here for instructions on setting up Authy Authenticator

Step Two: Enroll at https://otp.winona.edu

  1. You must have access to an Authenticator app. This is typically a mobile phone app that can generate six-digit verification codes to allow multi-factor authentication.
  2. Ensure your computer is connected to the Wazoo wireless network on campus
  • If you are on a desktop computer your wired network connection should suffice
  1. All employees must start by setting up their One-Time Password (OTP) at this link while on campus: https://otp.winona.edu
  2. Once on that page, enter your StarID in the Username field
  3. Enter your network password on the next screen
  4. Click Add OAUTH Token
  5. Click the radio button next to Online then click Add
  6. On the next page, scan the QR code with the authenticator app of your choice
  • You MUST click 'Done' after you scan your QR code!


For the next steps you must be connected to an off-campus (home) network or VPN will fail to connect.

If you would like to test your VPN connection while still on-campus, connect to the EduRoam wifi network.


Connect to VPN on Windows 10

  • Open the Start Menu and type Cisco
  • Select 'Cisco AnyConnect Secure Mobility Client' when it appears
    • If Cisco AnyConnect does not appear in your start menu, open your internet browser and go to https://ot.winona.edu

CACVPNPC.png

  • Once Cisco AnyConnect opens, replace tunnel.winona.edu with ot.winona.edu then hit Connect
  • You will be prompted to login with your StarID, your six-digit authentication code, and your StarID password
  • Select your group from the drop down list. If you do not know your group, just choose grp_employee as shown in the screenshot below.
    • The format is StarID-123456 for username. Do not forget the dash between your StarID and the six-digit code from your Microsoft Authenticator or Authy app

VPNmfa.png

Connect to VPN on macOS

  • Click on Spotlight in the upper right corner of your Mac
  • Type in "Cisco"
  • Select "Cisco AnyConnect Secure Mobility Client" when it appears

VPN Mac Cisco Search.png

  • Once Cisco AnyConnect opens, replace tunnel.winona.edu with ot.winona.edu then hit Connect

OtVPN.png

  • You will be prompted to login with your StarID, your six-digit authentication code, and your StarID password
  • Select your group from the drop down list. If you do not know your group, just choose grp_employee as shown in the screenshot below.
    • The format is StarID-123456 for username. Do not forget the dash between your StarID and the six-digit code from your Microsoft Authenticator or Authy app

MacVPNmfa.png

How do I access my network storage?

If you want to connect to personal network or department network drives from off-campus, you will first need to connect to VPN.

Windows 10

  • Open your Start Menu and click the "Click to Map Network Drives" tile located at the top middle of the screen
  • Re-open your Start Menu and click the "File Explorer" tile in the middle of the screen
  • Your network storage drives will be located under the "Network locations" heading. You may have to scroll down to find it.

macOS

  • In Finder, press and hold the <Command> key then tap the <K> key to bring up the "Connect to Server" prompt
  • Connect to one of the network locations listed in Fig 2.
  • Just copy/paste one of the addresses below if your list is not pre-populated
  • Personal storage: smb://store.winona.edu/users/
  • Department drive: smb://store.winona.edu/department/
Fig 2. Here is a sample of the server addresses you may need to connect to.

Related information