...
- Start the AnyConnect client, type in the address of the VPN server you want to connect to, and click Connect.
- On the next screen, choose the tunnel group from the Group dropdown that you need to connect to. Enter your username and both first and second factor authentication in the same window. The first factor is your UCInet password. The second factor is your Duo Passcode (or you can type "push" if you have a Duo software token).
- Once you enter the correct credentials, or approve the push request, you will have successfully authenticated into the VPN.
Troubleshooting login failures
- If you are using "push" and your phone turns off WiFi when it is locked, unlock your phone and let it connect to the WiFi network before you try to log in. The Duo app may get the push request from the cell network, the phone connects to the wireless network and tries to reply over the wireless network, and your login may time out.
- If you are using "push" and are in an area where there is "free" WiFi (hotel, airport, etc) where you have to click thru an agreement to use the network, either do that to get fully connected or turn off WiFi before you try to log in. Most phones prefer WiFi over the cell network for data, and if you are not completely connected to the internet because you haven't clicked thru the agreement, the Duo app won't be able to talk to the Duo infrastructure to authenticate you.
- If you are in an area with poor or no cell and WiFI coverage, use a token code instead of typing "push". Start the Duo app and click on the key to get the token code. If the service you are connecting to uses "autopush" this won't work for you, and you won't be able to log in until you can get on a cell or WiFi network. If the service uses autopush and you will need to use a token code to get to it because you don't have good cell/WiFi coverage, talk to the administrator of that service to see if it autopush can be turned off.