This page contains frequently asked questions about the campus Virtual Private Networking (VPN) system, which allows authenticated access to University of Illinois computing resources from any location.
If you are visiting the Urbana-Champaign campus, you can use the IllinoisNet_Guest WiFi for network access, or have your departmental sponsor get you a guest account to use IllinoisNet. Then you don't need the VPN software.
If you need VPN access from off campus, the person or department sponsoring your visit will also need to provide you with VPN software for your computer.
(On campus, we recommend guests self-register on the IllinoisNet_Guest WiFi.)
For more information, see Information for Short-Term Guests.
Yes. The VPN does not require any particular type of connection in order to function. You can use VPN to secure any wired or wireless network connection.
No. IllinoisNet WiFi, the preferred method for wireless network access on campus, is a full-featured wireless network that has authentication and security built into the wireless protocol itself. It does not require the VPN.
Eduroam may be available to you if you are visiting from an eduroam-participating institution. It is a secure, world-wide network for the international research and education community. It also does not require the VPN.
No, but you must download and install the software.
See Downloading and installing VPN client software for more information.
At this time, Technology Services offers VPN support for iPad & iPhone (iOS), and for Android devices.
For more information and links to community-developed configurations, see VPN Downloads and Installation and VPN Clients for Other Systems.
Maybe. Third-party VPN clients may or may not work with the VPN server, and the Technology Services Help Desk can only provide support for the Tech Services-released VPN client.
If you decide to use a third-party VPN client, you'll need to work with the VPN client's author to resolve any issues you have.
Similarly, some campus network administrators have released VPN clients for members of their own departments. If you have difficulty using a department-released VPN client, contact your department's IT staff for assistance.
Your instance of Cisco AnyConnect must have a separate VPN profile created for each VPN server with which you wish to connect.
Follow the instructions at VPN Downloads and Installation that describe how to create a new VPN profile specifically for the Urbana campus network.
NOTE: You do not need to download a new instance of the client software. Start with the step that involves adding vpn.cites.illinois.edu to your collection of profiles.
The firewall programs which are native to Microsoft Windows and Mac OS X will be automatically reconfigured to permit VPN traffic when the VPN client configuration is added to your computer's networking systems. You won't need to manually change the configuration for these firewalls.
On the other hand, some third-party firewalls are not automatically reconfigured when the VPN client is installed. ZoneAlarm is one commonly-used example of a firewall you will need to reconfigure yourself in order to allow VPN connections.
Guidelines for reconfiguring a firewall that offers program-based access control (like ZoneAlarm) and for reconfiguring a firewall that offers port-based access control (like many Unix firewalls) are given on the Firewall Ports page.
NOTE: If your computer is subject to group policy objects (e.g. your computer is department-owned or is on your department's intranet), you may need to work with your department's network administrator in order to configure your firewall for VPN.
The total maximum connection time is 24 hours (1440 minutes).
If your network connection is not being used, the connection times out in 90 minutes.
NOTE: Many laptops' power-saving features will put network cards to sleep sooner than our idle timeouts will. If you want to stay connected even when you aren't actively using your laptop / mobile device, you will probably need to disable the power-saving features of the laptop or mobile device. You may also need to disable power-saving features on the network card itself.
This problem has several possible causes.
In the Control Panel, go to Add/Remove Programs, then select Cisco AnyConnect Secure Mobility Client from the list of installed programs.
Click the Uninstall button and follow the computer's prompts to remove the VPN configuration settings.
If any other Cisco AnyConnect items remain after uninstalling the client (such as the Cisco AnyConnect Network Access Manager), follow the same process to uninstall them as well.
Operating systems that are so old that they are no longer updated by their manufacturer are not supported by either Cisco or the Technology Services Help Desk. In addition, Technology Services Privacy and Information Security strongly recommends that these older operating systems not be active on the campus network. Apple Supports the three most recent versions of Mac OS. As an example, if the current Mac OS version is 10.13, Cisco will guarantee support for 10.13, 10.12, and 10.11 but not earlier.
NOTE: Failure to use a supported operating system may lead to your computer or device being blocked from the campus network.
Unfortunately no. There are hooks in Windows for programs that allow the login screen to send the login information to linked programs that the Cisco AnyConnect software can work with to use the login name and password to open a VPN session. If such a thing exists in Mac OS, the AnyConnect client does not currently support using it.
You're using the current Cisco VPN (AnyConnect) if your icon looks like this:
NOTE: If you are using any other VPN besides Cisco AnyConnect, you will need to upgrade your VPN client in order to connect to the VPN server.
You're using the old Cisco version if your software uses icons that look like this:
The CITES Nortel VPN
You're using the old Nortel VPN if your software uses icons that look like this:
If your VPN software and icons don't look like either of those, you may be using the "SonicWall" or "Aventail" SSL VPN. It offers both a web-based interface and a client with an icon that looks like this:
It's easy! You usually don't need to uninstall the old VPN first. Just don't use it anymore.
(Note: If you get an AnyConnect error, you may need to uninstall previous VPN clients.)
If it helps you remember, you can delete the old VPN icon.
To configure your computer to access the new VPN server, visit the Download and Installation page to find the correct installer for your operating system.
No. In 2014, the three legacy VPN (Virtual Private Network) clients were retired.