Overview
The ILR VPN provides a secure connection to the Cornell network from a Windows computer located anywhere in the world that has an internet connection. If you are looking for instructions for MacOS, click here. NOTE: connecting to the ILR VPN is not necessary when you are in an ILR office in Ithaca, Buffalo, or NYC and connected to eduroam or a hard wired ILR ethernet connection.
Once connected to the ILR VPN, you will be able to obtain any necessary computer software updates, access your ILR server shares (L: drive), access ILR departmental printers, and connect to ILR computers that are located on an ILR network and have remote desktop configured. The required Two-Step authentication verifies that the person who is attempting to make a VPN connection is who they say they are.
1) Access The Cisco VPN Software
On the bottom right hand side on the desktop, click on the up arrow (near the clock) then select Cisco AnyConnect. The icon will look like a small globe. Alternatively, if the Cisco AnyConnect icon is not available after clicking on the arrow, you can find it by clicking on the Start menu 
on the far left hand side on the desktop. After clicking on Start, scroll down the alphabetical list and find Cisco -> Cisco AnyConnect Secure Mobility Client. Download and install the Cisco VPN client if your device does not have it. Please note that you will need administrative rights to install Cisco AnyConnect on your device.
2) Connect to VPN
The Cisco AnyConnect Secure Mobility Client pop-up box will appear. To the left of Connect, verify that cuvpn.cuvpn.cornell.edu is entered. If it is, click Connect.
3) Login To Two-Step VPN
A dialog box will appear with the heading Cisco AnyConnect | cuvpn.cuvpn.cornell.edu.Use the following options to connect:
Group = Two-Step_Login is the only option
Username = yournetid@IL-VPN (this is case sensitive so use capital letters for IL-VPN).
Password = your netid/email password.
DUO Passcode(push/sms/phone):
Passcode: a six digit passcode obtained from the Duo mobile app or from SMS
push: When typing push, a DUO push notification will be sent to the DUO Mobile app on your Smartphone.
sms: When typing sms, ten unique sets of numbers will be sent via text message to your Smartphone. Any of these codes can be used for twenty-four hours. Each code can only be used once.
phone: when typing phone, the default phone number setup in your two-step device management will ring to verify your identity.
4) Successful Connection Verified
The Cisco AnyConnect connected pop-up box will appear on the bottom right on your desktop verifying you’ve successfully connected to Two-Step VPN.
To double-check you’re still connected to VPN, click on the up arrow on the bottom right near the clock and look for an image of a lock over the top of a globe.
5) Disconnect
To disconnect from VPN, click on the up arrow by the clock -> select the image of the globe with a lock. The Cisco AnyConnect Secure Mobility Client pop-up will appear. Click Disconnect.
