Duo MFA required for VPN
Duo multi-factor authentication (MFA) will be required when using CU Boulder’s VPN service starting Tuesday, March 14. In the same way you use Duo MFA to access Buff Portal or MyCUInfo, you will be prompted to authenticate with Duo when you manually connect to a campus VPN. Visit the VPN multi-factor requirement news story to learn more.
How to download, set up, and use Cisco VPN
- Download: Download the VPN client that will work for your device from the table below.
- Set up: Follow OIT's setup and connect instructions for your device (see documentation column below) to connect to the VPN.
- Required Setup Information: The first time you connect to the Cisco VPN service, enter the following information:
- Server Address: vpn.colorado.edu
- Your CU Boulder Credentials: IdentiKey username and password
- Authenticate with Duo MFA: After entering your IdentiKey credentials you'll be prompted to authenticate using Duo multi-factor authentication.
- Using VPN: After initial setup, open the Cisco Secure application and enter your IdentiKey credentials to connect to vpn.
Download and Installation Instructions for Cisco VPN
Cisco Secure Mobility Client is OIT's VPN option. Reference the following information to get started with Cisco Secure client on your desktop or mobile phone.
*Note: All downloads require users to accept the End User License Agreement (EULA) before being able to access the download files. The EULA is presented at each download log in page.
Custom VPN Service
If your department, group or service requires its own protected IP range, then you may request a custom VPN. A custom VPN will be established on the Cisco Secure client solution. Learn more by visiting the Custom VPN Service page.
Advanced Users
Users with advanced needs (such as server admins) can connect to a limited service that OIT provides. This service will only route your network traffic to the campus when you access campus resources such as file shares and servers. More detailed information can be found on the VPN Advanced Users and Server Administrators page.
Cost
CU Boulder's VPN is provided as a common-good service (no direct cost) to all faculty, staff and students.
Who can get it
CU Boulder Faculty, Staff and Student affiliations automatically receive a VPN entitlement. Some faculty or staff-like roles with HR appointment roles also have access; if you need access but don’t fall into one of these categories, please contact the IT Service Center.
How to get it
- Refer to the table above in the Cisco Secure client section for links to downloads and instructions.
- Visit the VPN - Help page for information about setting up Custom VPN, Cisco IPsec or Advanced VPN needs.
- For information about Duo, visit the Duo multi-factor authentication page.
- For further assistance with any of the VPN services, contact the IT Service Center.
