Connecting to the Murdoch VPN

To connect to the murdoch VPN you will have to be a member enrolled in one of the following units:

ICT302, ICT369, ICT372, ICT611 or added by a staff member.

Setting up Azure multi-factor authentication:

Before you can start using Murdoch's Cisco AnyConnect VPN service the Azure Multi-factor Authentication(MFA) component for your Murdoch AD account must be configured.

To configure your Azure MFA, go to https://aka.ms/mfasetup and login with your Murdoch staff number and password.

You will be asked to supply more information to keep your account secure - click Next to proceed.

At Step 1 you will be asked to select a default verification method and given the options of Authentication phone, Office phone or Mobile app.

Please select Mobile App and then check the Receive notifications for verification option

The Office phone method is not supported, and the Authentication phone method is not recommended

Proceed by clicking Set up - you will then be prompted to set up the Microsoft Authenticator App on your smart phone

Install the Microsoft Authenticator App:

Microsoft Authenticator is required to validate your credentials via your smart phone. To install this app search for Microsoft Authenticator in the App Store or Google Play and click install

The app will prompt you to scan a QR code to complete setup. Using another computer, log in to [[1]] as per the Azure MFA Setup step, and click Set up Authenticator app

Scan the QR code or enter the 6 digit code and Microsoft Authenticator will complete setup

Cisco AnyConnect Client Installation:

Download the client installation package, for your version of operation system.

Cisco AnyConnect Client 4.6.02074 for Windows Supported for only Windows 7, 8, 8.1, 10 for both x86(32-bit) and x64(64-bit)

Cisco AnyConnect Client 4.6.02074 for MacOS Supported for only macOS 10.11, 10.12. 10.13 and 10.14

Cisco AnyConnect Client 4.8.02045 for MacOS Supported for only macOS 10.15. Any users on earlier versions of MacOS should use the previous version 4.6.02074.

Cisco AnyConnect Client 4.6.02074 for Linux Red Hat & Ubuntu Supported for only Linux Red Hat 6, 7 & Ubuntu 14.04 (LTS), 16.04 (LTS), and 18.04 (LTS)(64 bit only)

For IOS devices please go to the App Store and search for Cisco Anyconnect.

For Android devices please go to the Google Play Store and search for Cisco Anyconnect.

Connecting to the VPN Service

Enter Credentials on your computer

click Connect

Change your Group to Murdoch_Unit_ICT

Enter your student number i.e. 31234567@student.murdoch.edu.au and your Murdoch password and press "OK"

Authorize on your second factor

You will prompted to enter a verification code, or to approve the signin. This will depending on how you have set the Azure MFA verification option:

Notify me through app: A prompt on your mobile device will ask you to approve or deny the sign in

Use verification code from app or token: Your app will display a 6 code digit that will need to be entered in to the AnyConnect client MFA Code

FAQ

Q: Will I be able to connect to VPN without access to my additional security verification option?

Without access to your secondary verification option, VPN access will not be possible.

Q: Can I change my additional security verification option?

Yes, but this requires access to your existing security verification option. If you no longer have access to this, you will need to contact the IT Service Desk for assistance

Q: I previously had access to custom VPN profiles, how do I access these?

You will need to contact the IT Service Desk for custom instructions.

Q: I have been using an alternate VPN client to connect, will I need to use AnyConnect with MFA?

Yes, other client access will stop working when the old VPN servers are retired so AnyConnect will be required.

Q: Do I need to install the Microsoft Authenticator App if I elect to receive my verification code by SMS?

No, however reliance on SMS/text code can be an issue if you are in an area with poor mobile reception.

Testing

When you are successfully connected, you should be able to ping 10.51.32.251.