To use Cornell's Virtual Private Network (VPN) with campus networks and services, you must use Cisco AnyConnect VPN software. See How to Install Cisco VPN Software for instructions.

Connect to CU VPN with NetID Login

1. In a Finder window, click Applications, then Cisco, and then double-click Cisco AnyConnect Security Mobility Client.
2. In the AnyConnect window be sure that cuvpn.cuvpn.cornell.edu is selected in the Connect To box, and then click Connect.
   
   
    
3. In the Cisco AnyConnect window:
   • In the Group box, select CornellVPN to log in to CU VPN.
   • In the User Name box, enter your Cornell NetID or GuestID.
     Note: If you are connecting to a departmental VPN, enter your NetID and the name of the departmental group, for example pqs665@departmental_group_name.
   • In the Password box, enter your NetID password.
     
     
      
4. Click OK. You're now connected to CU VPN.

Connect to CU VPN with Two-Step Login

Duo Security provides documentation on how to log in to the Cisco AnyConnect client used with Cornell's VPN service. For more information, see Logging in with Cisco AnyConnect Client.

1. In a Finder window, click Applications, then Cisco, and then double-click Cisco AnyConnect Security Mobility Client.
2. In the AnyConnect window be sure that cuvpn.cuvpn.cornell.edu is selected in the Connect To box, and then click Connect.
   
   
    
3. In the Cisco AnyConnect window:
   • In the Group box, select Two-Step_Login. This is required for departmental VPNs with Two-Step Login enabled, but you can use it any time.
   • In the User Name box, enter your Cornell NetID or GuestID.
     Note: If you are connecting to a departmental VPN, enter your NetID and the name of the departmental group, for example pqs665@departmental_group_name.
   • In the Password box, enter your NetID password.
   • In the DUO Passcode (push/SMS/phone) box, enter the method you use to complete Two-Step Login:
     push
phone
SMS to receive a new set of passcodes. (You'll need to log in again.)
     An actual seven-digit passcode
     
     
      
4. Click OK.
5. If you entered push or phone, complete the Two-Step Login process.
   You're now connected to the VPN.

If you don't have access to the default device you use for Two-Step Login, you can use an alternate device. In Step 3 above, enter the method you use to complete Two-Step Login followed by a number, for example push2 or phone2. To see the devices you have set up and the numbers to use for each, go to Your Two-Step Login Devices and use the number in the Device Number column.