Virtual private network for employees

From WSU Technology Knowledge Base
Jump to navigation Jump to search
Caution.JPG REVISION IN PROGRESS: This article contains useful information, but is being revised to reflect recent updates. Direct questions to TLT (tlt@winona.edu).

Winona State University Information Technology Services provides a secure virtual private network for employees working from off-campus locations. To maintain data security, access to some online systems and services requires a direct connection to our private campus network. Using our virtual private network (VPN), employees working remotely can emulate this direct, private connection and access these services as if they were on campus. Most employees do not need a continuous VPN connection when working remotely. Employees cannot establish a VPN connection using a personally-owned device and must use multi-factor authentication to verify their credentials when connecting to our VPN.

Setting up VPN

Step 1: Install an authenticator app

Winona State University Information Technology Services supports two authenticator apps for use with our VPN:

  • Microsoft Authenticator (recommended): Install this app if you prefer using your phone or tablet to verify your VPN credentials.
  • Authy: Install this app if you prefer using your WSU laptop to verify your VPN credentials.

Step 2: Add your VPN account to your authenticator app

Please use Google Chrome to complete this step. There are known issues with other browsers. This step must be completed while on the Winona or Rochester campus. If using a Winona State University laptop, you must be connected to the Wazoo wireless network. You can also complete this step using your office desktop with a secure wired network connection.

  1. If using a laptop, ensure that it's connected to the Wazoo wireless network wireless network
  2. Use Chrome to go to the VPN enrollment site at https://otp.winona.edu
  3. Select the link, "Proceed to set up my StarID for campus VPN access"
  4. Enter your StarID (e.g., ab1234cd) in the Username field and select Submit
  5. Enter your StarID password and select Submit
  6. Click Add OAUTH Token
  7. Click the radio button next to Online then click Add
  8. On the next page, scan the QR code with the authenticator app of your choice
  • You MUST click 'Done' after you scan your QR code!

Step 3: Test your VPN connection

For the next step you must be connected to an off-campus (home) network or it will fail with error: Connection attempt has timed out. Please verify Internet connectivity.

If you are on campus and would like to test your VPN connection, temporarily switch to the EduRoam Wi-Fi network and login with your StarID@minnstate.edu.

Connect to Cisco AnyConnect on Windows 10

  • Open the Start Menu and type Cisco
  • Select 'Cisco AnyConnect Secure Mobility Client' when it appears
    • If Cisco AnyConnect does not appear in your start menu, open your internet browser and go to https://ot.winona.edu

CACVPNPC.png

  • Once Cisco AnyConnect opens, replace tunnel.winona.edu with ot.winona.edu then hit Connect
  • Select your group from the drop down list. If you do not know your group, just choose grp_employee as shown in the screenshot below.
    • Username format is StarID-six digit auth code (ex: pp7998kk-042565). Do not forget the dash between your StarID and the six-digit code from your Microsoft Authenticator or Authy app that you setup to use for VPN. It will be the one called WINONA online under accounts for Microsoft Authenticator.
    • Password is the one you use with your Starid.

VPNmfa.png

Connect to Cisco AnyConnect on macOS

  • Click on Spotlight in the upper right corner of your Mac
  • Type in "Cisco"
  • Select "Cisco AnyConnect Secure Mobility Client" when it appears

VPN Mac Cisco Search.png

  • Once Cisco AnyConnect opens, replace tunnel.winona.edu with ot.winona.edu then hit Connect

OtVPN.png

  • Select your group from the drop down list. If you do not know your group, just choose grp_employee as shown in the screenshot below.
    • Username format is StarID-six digit auth code (ex: pp7998kk-042565). Do not forget the dash between your StarID and the six-digit code from your Microsoft Authenticator or Authy app that you setup to use for VPN.
    • Password is the one you use with your starid.

MacVPNmfa.png

How do I access my network storage off-campus?

You will first need to connect to your VPN client Cisco AnyConnect. Next follow steps below:

Windows 10

  • Open your Start Menu and click the "Click to Map Network Drives" tile located at the top middle of the screen
  • Re-open your Start Menu and click the "File Explorer" tile in the middle of the screen
  • Your network storage drives will be located under the "Network locations" heading. You may have to scroll down to find it.
Fig 2. Here is a sample of the server addresses you may need to connect to.

macOS

  • In Finder, press and hold the <Command> key then tap the <K> key to bring up the "Connect to Server" prompt
  • Connect to one of the network locations listed in Fig 2.
  • Just copy/paste one of the addresses below if your list is not pre-populated
  • Personal storage: smb://store.winona.edu/users/
  • Department drive: smb://store.winona.edu/department/


Related information

Retrieved from "https://learn.winona.edu/w/index.php?title=Virtual_private_network_for_employees&oldid=62626"