NC State VPN FAQ

Contents

 

Can I use two-factor authentication (2FA) when logging in to NC State VPN services?
VPN users in the Student, Faculty and Staff, Student Health Center, and OIT Staff groups must authenticate with Duo Security when logging in to the VPN service. Duo further protects Unity credentials and campus resources against cyber threats with a two-step login process.

(Back to Top)

I have one broadband connection and use a router/firewall to share my connection with several desktops. How will that affect VPN services?

  • If your broadband connection is already working on the desktops, you can install the Cisco Secure Client on each one. You should be able to establish a VPN connection to NC State from all the desktops simultaneously.
  • NOTE: ComTech cannot support your home network. Before the Cisco Secure Client will work, you must have an internet connection from each desktop.

(Back to Top)

What is split tunneling?

  • Split tunneling, an NC State VPN service feature, routes user traffic based on the destination IP address.
  • Campus traffic is routed through the VPN tunnel, while internet traffic is routed through your commercial ISP.
  • Split tunneling reduces the amount of personal internet traffic routed through the campus internet connections, allowing us to reduce costs and adhere to the campus network’s appropriate use policy.

(Back to Top)

Internet 2 access?

  • Participating Internet 2 (I2) institutions are available via your commercial ISP.
  • Using the split tunneling feature, your VPN connection will route traffic destined for I2 through your commercial ISP.
  • From a network performance standpoint, there would be no benefit to the remote end user if I2 traffic were tunneled through the campus network.

(Back to Top)

What types of IP tunneling protocols do NC State’s VPN services support?

  • NC State VPN supports SSL VPN services using the same port as HTTPS.
  • Hybrid XUTH IPSec tunneling is also available on NC State VPN services but is not supported; instead, we ask that users use the Cisco Secure Client SSL VPN service.

(Back to Top)