**The IST Knowledge Base has moved to https://uwaterloo.atlassian.net/wiki/spaces/ISTKB/. Content in this space will no longer be updated.**

Skip to end of metadata
Go to start of metadata

  1. First you will need to login to the web page using the appropriate link. Most can use https://cn-vpn.uwaterloo.ca/+CSCOE+/logon.html, but depending on where you are on campus, you may need to use https://vpn-inside.private.uwaterloo.ca
  2. After logging in, download the “Cisco AnyConnect Secure Mobility Client” by clicking “Download for Linux” and download the script file “anyconnect-linux64-4.6.01103-core-vpn-webdeploy-k9.sh

    If Cisco detects the incorrect OS or provides a different installation file follow this guide.


  3. Another window will pop up and it will prompt to save the installer.

  4. Open up the command terminal (crtl+alt+t) and input these commands:

    ~$ cd Downloads/ (makes it so that the directory is downloads and allow interaction with the installer file)

    ls – l (looks through the downloads folder to look for the script file)

    chmod 0700 anyconnect-linux64-4.6.01103-core-vpn-webdeploy-k9.sh (marks the script as an executable file)

    sudo ./anyconnect-linux64.4.6.01103-core-vpn-webdeploy-k9.sh (this runs the script)

  5. Input the computer password when prompted  (it will prompt you to do this after you run the script).

  6. After you enter the password, the program should be fully installed on your computer. You can then open the client by selecting “Show applications” on the bottom right of your screen. Then click on Cisco AnyConnect.

  7. After Cisco AnyConnect opens, if you haven't connected before, you will need to specify the VPN server:
  8. Click “Connect”, then it will prompt you to enter your credentials, you will need to input your WatIAM username and password.

  9. Two-factor authentication (2FA) will be required in order to connect to the VPN starting November 3, 2020. In the 'Second Password' field, enter one of the following, then click Connect.

    Read more about the upcoming 2FA changes. 

    1. For Duo Mobile push: enter 'push'
    2. For Duo hardware token or Duo app: enter your 6-digit code
    3. For Duo Bypass code: enter your bypass code
    4. For Yubikey: enter the code generated by touching the Yubikey

  10. You should now be connected! If you want to make sure you are connected, then you can click on Cisco AnyConnect, which should show you it as “Connected”.

Alternative Method to install VPN in Ubuntu

  1.  First run command below to active the TUN module

    sudo /sbin/modprobe tun 


  2. Install OpenConnect: 

    sudo apt-get install openconnect 
  3. Connect to VPN, run: 

    sudo openconnect -v cn-vpn.uwaterloo.ca 


It prompts you to type in WatIAM username and password. Once these are authenticated, the VPN connection is established. 

Keep the terminal window open while the VPN session is active.  

Network resources such as shared folders, NAS drives, servers, and workstations should now be available.  

To close the VPN session, press Ctrl+Z in the terminal window. Abruptly killing the terminal window without properly closing out of the VPN session can lead to issues when attempting to reconnect in the future. These issues can typically be resolved by restarting the machine. 



Optional – Install VPN plug-ins for Network Manager 

  1. Install some VPN plug-ins for Network Manager: 

    sudo apt-get install network-manager-pptp network-manager-vpnc network-manager-openvpn 
  2. If prompted for your password, type it, and press Enter.
  3. If you are told that a package “is already the newest version,” ignore it and continue with the next command.
  4. If asked to “continue [Y/n],” press Y, followed by Enter.
  5. Open the connections settings dialogue, go to the VPN tab and add a new connection.
  6. Select “Cisco AnyConnect”: 

Need Help?

Contact the IST Service Desk at  helpdesk@uwaterloo.ca  or 519-888-4567 ext. 44357.