Skip to main content

How to Configure Secure Client VPN for Apple iOS

Cardinal Key VPN for iOS is currently deprecated. To connect to the Stanford VPN (su-vpn) using an iOS device, please follow the steps below and authenticate with your SUNetID and password. 

For clients accessing restricted library resources remotely, please use the "Stanford-Full" profile from your workstation when connecting to the Stanford VPN.

You can connect to the Stanford VPN (su-vpn) using your Apple iPhone or iPad. The Cisco Secure Client app is required.

Connect to Stanford VPN

  1. Locate "Cisco Secure Client" on the App Store and download it.
    Shows Cisco application
     
  2. Open the Cisco Secure Client app and select Connections.
    In Cisco Secure Client app, VPN connection is off.
     
  3. Tap Add VPN Connection. Enter the following details:
    1. Description: Stanford VPN
    2. Server address: su-vpn.stanford.edu
    3. Certificate: Automatic (Select "Automatic" if it isn't already displayed)
    4. When finished, tap Save in upper right corner.
      show interface for adding VPN details
       
  4. Tap Allow to permit the Cisco AnyConnect app to add the VPN configuration.
    AnyConnect Would Like to Add VPN Configuration notification. User has the option to select Don't Allow or Allow.
  5. Authenticate using your device passcode.
    User is prompted to enter iPhone passcode.
     
  6. After authentication, you should see a screen displaying the connection description and its status as "Enabled."
    Stanford VPN is indicated as "Enabled."

     
  7. Tap Back in the upper left corner. Stanford VPN should now be listed as the default connection.
    show CardinalKey VPN as default connection
     
  8. To connect, toggle the button on the right side of AnyConnect VPN. You will be diverted to the SAML authentication page. Enter your SUNet ID and password, then tap Login to authenticate.
    SUNet ID and password authentication screen.
  9. You will receive a DUO push on your phone. 
    shows DUO push notification
     
  10. Approve it and the Cisco Secure Client will connect automatically. Please note that if this is your first time installing the client and connecting to the Stanford VPN, then there may be a 15-30 second delay before the connection is established. Subsequent connections will be immediate.
    Toggle shows AnyConnect is connected.

  11. To disconnect, tap the toggle to the right of AnyConnect VPN.
    shows how to toggle to disconnect
     


     

To switch between a split-tunnel and a full-tunnel profile:

  1. Launch the Secure Client App
  2. Toggle the AnyConnect VPN slider to ON
  3. When the Stanford login page appears, select "Back" in the upper left corner of the screen
  4. You should then see the "Group" option where you can select one of the split or full tunnel profiles

   By default, the "CardinalKey" profile is used, which is a split-tunnel profile. The above steps will allow you to select a different profile.

Last modified