Which Option? | Install On Mac or Windows | Install on Mobile | Troubleshoot
When you connect your computer or mobile device to a CMU Virtual Private Network, your device will act as if it's on campus. This means you'll be able to securely access CMU resources even when you’re out of the country.
VPN connections are encrypted, which make them more secure than connecting from public Wi-Fi or even from your home network. The VPN takes your computer's request and sends it to a website or system. The requested data is then forwarded back to you through that same secure connection.
At CMU, we use the Cisco AnyConnect Secure Mobility Client to connect to the network through VPN. You have two choices when connecting to VPN.
Option 1: Campus VPN
What it is:
The Campus VPN is a split-tunnel VPN. Basically, that means that your connection is only encrypted when you're using campus resources.
When to use:
If you are learning and working remotely, but only need to access some CMU resources, such as shared network drives, ACIS services (SIS, DecisionCast, HRIS), or library systems, Campus VPN is the solution for you.
Option 2: Full VPN
What it is: When to use:
Full VPN is just like being on campus. All of your online activity is encrypted and redirected through the CMU network.
Important!
You may notice decreased performance when connecting to this option as all of your activity will be tunneled through the CMU network.
If you are experiencing difficulty connecting to VPN, verify the following:
- You are connected to the Internet.
- You entered vpn.cmu.edu as your VPN.
- You are logging in with your Andrew userID and password.
Still not able to connect?
If you are still unable to connect, consider the following:
- Make sure your antivirus or firewall allows AnyConnect. You may need to temporarily disable your antivirus or firewall to determine if a connection can be established.
- Review the sleep settings on your computer. All VPNs rely on an active Internet connection. When your computer goes to sleep, it may automatically be disconnected from VPN.
- Uninstall or disconnect from other VPN apps. If you are currently running another VPN app, this may conflict with the Cisco AnyConnect Secure Mobility Client.
- Uninstall SSH Tectia.Remove the app from your computer or mobile device and then reinstall using the Typical installation method.
- Uninstall Cisco AnyConnect. Remove the app from your computer or mobile device, delete your Cisco profile, and reinstall AnyConnect.
Note: Do not enable proxy servers or Internet connection sharing for network devices when using Cisco AnyConnect software.
No VPN Prompt on iOS and macOS
You may not see the VPN prompt while on iOS or macOS devices. One of the following will happen:
- Error message - You cannot browse this page at "duo.com" because it is restricted.
- Gray box displays instead of the DUO prompt.
This is an issue with content restrictions. Follow the appropriate steps below to allow VPN.
iOS 12+
- Go to Settings > Screen Time > Content & Privacy Restrictions > Content Restrictions > Web Content on the device.
- Uncheck Limit Adult Websites to completely disable content restrictions.
If you do not want to fully disable content restrictions, allow duosecurity.com within the Content Restrictions option. This will allow the DUO prompt to display even if content restrictions are enabled.
iOS 11
- Go to Settings > General > Restrictions > Websites.
- Uncheck Limit Adult Content to disable content restrictions.
If you do not want to fully disable content restrictions, allow duosecurity.com within the Specific WebsitesOnly option. This will allow the DUO prompt to display even if content restrictions are enabled.
macOS 12+ (Monterey)
- Open System Preferences.
- Select Screen Time > Content & Privacy.
- Set Web Content restrictions to Unrestricted Access.
If you do not want to fully disable content restrictions, allow duosecurity.com within the AllowedWebsitesOnly option. This will allow the DUO prompt to display even if content restrictions are enabled.
Note: If you are opening Screen Time for the first time and haven't set up this feature, you will be prompted to set up the phone for yourself or a child and have the option to set a passcode.
- Uninstall all previous versions of Cisco VPN before installing the latest version. Remove the app from your computer or mobile device, delete your Cisco profile, and then reinstall AnyConnect.
- There is no need to manually update this application. New versions of this app will be pushed to your computer or mobile device.
