Network/VPN/macOS: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
|||
Line 14: | Line 14: | ||
#:[[Image:JunosOSXSettings.png|thumb|left|510px|[macOS] Enter the name of the vpn server]]<br style="clear:both"/> | #:[[Image:JunosOSXSettings.png|thumb|left|510px|[macOS] Enter the name of the vpn server]]<br style="clear:both"/> | ||
#'''Enter your UMIACS credentials and hit connect.''' | #'''Enter your UMIACS credentials and hit connect.''' | ||
#:[[Image:JunosOSXLogin.png|thumb|left|510px|[macOS] Enter UMIACS Credentials]] | #:[[Image:JunosOSXLogin.png|thumb|left|510px|[macOS] Enter UMIACS Credentials]]<br style="clear:both"/> | ||
#'''Complete the [[Network/VPN/MFA | MFA]] Verification Step | |||
#:[[Image:mac_mfa_step.png|thumb|left|510px|[macOS] Enter a secondary password.]]<br style="clear:both"/> | |||
::The Pulse VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the [[Network/VPN/MFA | MFA]] requirement. As a result, you will be prompted for credentials twice. | |||
::{|class="wikitable" | |||
!Second Credential Password Value: | |||
! Result | |||
|- | |||
| push | |||
| Send a push verification to your Duo connected device | |||
|- | |||
| phone | |||
| Send a call verification to your Duo connected device. | |||
|- | |||
| <press YubiKey> | |||
| If you have a physical token then you would press the YubiKey for the one time password. | |||
|} | |||
::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose. | |||
{{Note|<b>Pro-tip:</b> Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}} | |||
<br style="clear:both"/> | <br style="clear:both"/> |
Revision as of 17:53, 19 June 2019
Please note that this tutorial assumes you already have a network connection established. If you have a UMIACS account, you already have access.
The UMIACS VPN is accessible through the Pulse Secure Client. Alternatively, you can establish a connection through a web browser.
Connecting through the Pulse Secure client
- Download the client:
- macOS Pulse Secure Client
- Upon starting the client for the first time it will ask to upgrade the client. This will pull an up-to-date version of the client with the most recent configuration.
- macOS Pulse Secure Client
- Open the client and click 'Add' (+) under the connection section.
- In the 'Name' field, enter a descriptive name for this vpn Connection.
- In the 'Server URL' enter 'vpn.umiacs.umd.edu'
- Enter your UMIACS credentials and hit connect.
- Complete the MFA Verification Step
- The Pulse VPN multi-factor authentication implementation relies on a secondary authentication source to fulfill the MFA requirement. As a result, you will be prompted for credentials twice.
Second Credential Password Value: Result push Send a push verification to your Duo connected device phone Send a call verification to your Duo connected device. <press YubiKey> If you have a physical token then you would press the YubiKey for the one time password.
- Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please contact us if you would like to register a YubiKey for this purpose.
Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method. |
You should now be connected to the UMIACS VPN. If you encounter an error, please refer to the "Setup Security Requirement" section bellow.
Checking VPN Status
- In the top right hand corner, on your status bar, you should see an S icon in a black circle. If there's a green arrow, that means you are connected! If there is nothing, that means you are not.
- You can click this icon, as well, and it will show you the status of your connection.
- If the icon is not in the status bar, you can find Pulse Secure in your Applications folder. There you will see a list of connections.
Setup Security Requirement (Follow these steps if you encounter an error while connecting through the Pulse Secure client)
- Click the Apple logo at the top left of your desktop
- Click "System Preferences"
- Click "Security & Privacy"
- Click the "lock" icon at the bottom left and Enter your credentials to enable changes.
- In the "General" tab, under "Allow Apps Downloaded From", select "Mac Apps Store and Identified developers"
- Click "Next" to the message "System Software From Developers "Pulse Secure LLC" was blocked from loading" if prompted.
- Click "Allow" to enable the extension.
- Close the "Security & Privacy" window.