NC State VPN FAQ

Contents

 

Am I required to use two-factor authentication (2FA) when logging in to NC State VPN services?
VPN users in the Student, Faculty and Staff, Student Health Center, and OIT Staff groups are required to authenticate with Duo Security when logging in to the VPN service. A two-step login process, Duo further protects Unity credentials and campus resources against cyber threats.

(Back to Top)

I have one broadband connection and I use a router/firewall to share my connection among several desktops. How will that affect VPN services?

  • If your broadband connection is already working on the desktops, you can install the Cisco AnyConnect client on each one, and you should be able to establish a VPN connection to NC State from all the desktops simultaneously.
  • NOTE: ComTech cannot support your home network. You must have internet connection from each desktop before the Cisco AnyConnect client will work.

(Back to Top)

What is split-tunneling?

  • Split tunneling, a feature of the NC State VPN service, routes user traffic based on the destination IP address.
  • Campus traffic is routed through the VPN tunnel, while internet traffic is routed through your commercial ISP.
  • Split tunneling reduces the amount of personal internet traffic routed through the campus internet connections, allowing us to reduce costs and adhere to the campus network appropriate use policy.

(Back to Top)

Internet 2 access?

  • Access to participating Internet 2 (I2) institutions is available via your commercial ISP.
  • Your VPN connection will route traffic destined for I2 through your commercial ISP using the split tunneling feature.
  • From a network performance standpoint, there would be no benefit to the remote end user if I2 traffic were tunneled through the campus network.

(Back to Top)

What types of IP tunneling protocols do NC State’s VPN services support?

  • NC State VPN services support SSL VPN services, which use the same port as HTTPS.
  • Hybrid XUTH IPSec tunneling is also available on NC State VPN services, but it is not supported; instead, we ask that users use the Cisco AnyConnect SSL VPN service.

(Back to Top)

I can’t get my VPN to work. What should I do?

  • The ComTech Network Operations Center (NOC) does not provide desktop support or client installation support.
  • For those services, please contact the NC State Help Desk or your LAN administrator.
  • If you have the VPN client installed and can access internet sites but cannot establish a VPN connection to NC State, please report this problem to network@ncsu.edu or call our NOC line at 919.513.9675.

(Back to Top)

Is there a document that contains common AnyConnect errors?

See AnyConnect VPN Client Troubleshooting Guide – Common Problems.

(Back to Top)

The AnyConnect web install says the install failed?
In some cases, the client will install and run properly but will still offer the option to download and manually install the client.

  • If you see the lock icon, you are properly connected.
  • If you see the ellipsis (three dots) icon, you have the client installed but are not connected.

(Back to Top)

The AnyConnect client restarts the wireless interface.

  • Some wireless management software detects the new VPN IP as a new wireless connection and restarts the wireless discovery process.
  • This is caused by the wireless management software, not the AnyConnect client.
  • If you have this problem, disable that second party wireless manager and use the default Windows Wireless Manager.

(Back to Top)