VPN Upgrade Project

The new VPN server will be announced widely to campus next week. The old server will be shut down in September before school starts. Service Desk is likely to get questions as email reminders about this change go out.

Key points:

  1. New server: vpn.oregonstate.edu. It is in production now and customers can start switching to it.
  2. Need Latest Cisco AnyConnect client: customers need to install the latest Cisco AnyConnect client and connect to vpn.oregonstate.edu. There is no longer an auto-configuration method via the web. Mac users need the AnyConnect client, too; they can no longer use the built-in VPN.
  3. Exceptions for non-ONID users: Anyone who does not have an ONID account with Duo enabled will not be able to use the new VPN until they have been granted an exception to do so. Department IT will need to request exceptions for current external VPN users.
  4. Exception Process: IT Pros will submit the exception form on behalf of their departments and create a delegated or sponsored account. OIS will review and approve or deny the request. Service Desk technicians will then add the external user to either the split tunnel group or full tunnel group in Active Directory.
  5. DINO accounts won’t work anymore: DINO accounts will not be able to connect to the new VPN. These customers will need either a delegated account in the ONID domain, or a sponsored ONID account. In either case, they will need an exception approved by the Office of Information Security.

Helpful Links: