CLASSE VPN

*NOTE*: The steps for "Enrolling in Duo" and "VPN Setup" only need to be done once.

Setup and Configuration

1. Enroll in CLASSE Duo (Required)

This step must be completed before you can install the VPN client and only needs to be done once.
Please see CLASSEDuo for instructions.

2. Install Pritunl VPN Client (personal non-Linux devices only)

Expand InstructionsHide

3. VPN Setup

Log in to Pritunl WebUI

1. Browse to https://vpn.classe.cornell.edu/login
2. Log in with your CLASSE username.
3. Complete the Duo two-step authentication. You will receive a request titled "Key: CLASSE VPN". The request will expire after 60 seconds.
   • If you have multiple devices registered in Duo, Pritunl will not prompt for the device to use--it will try the first device in Duo device management. If that device is a phone, the login may timeout before it tries the second device. Connecting to Pritunl you should plan on having your first listed device nearby.
   • Device order can be rearranged in the Duo device manager.

Configure CLASSE VPN Profile

1. Copy the "Profile URI Link:" from VPN webpage
2. Start Pritunl on your computer.
3. Click on "Import Profile URI".
4. Paste the "Profile URI Link:" that you copied above.
5. Click on "Import".
   • _{If you get an error message that says "Failed to load profile uri (Not Found)", then your temporary profile has timed out.
     Start over again at https://vpn.classe.cornell.edu/login}

4. Connecting to the CLASSE VPN

1. Start the Pritunl app.
2. Click on the hamburger button (the three horizontal lines) next to your new profile and choose “Connect”
   
   Show Pritunl MenuLess ...
   
   Show Pritunl SelectionsLess ...
   
3. Enter your CLASSE password.
4. Complete the Duo two-step authentication. (You will receive a request titled "CLASSE VPN". The request will expire after 60 seconds.)

Pritunl Client Config

1. Beneath the "Connect" button for your VPN connection in Pritunl, you may notice an "Autostart Off" setting. We recommend leaving this off (the default), to avoid spurious Duo prompts.

Linux VPN Configuration

Expand InstructionsHide

nmcli connection modify $name ipv4.never-default true
nmcli connection modify $name ipv6.never-default true