CUHK VPN (Virtual Private Network)

Set up and Connect CUHK VPN with

• Android ( Eng | 繁 )
• iOS ( Eng | 繁 )
• Windows ( Eng | 繁 )
• Mac ( Eng | 繁 )
• DUO Two Factor Authentication (2FA) for Staff (Eng)

Details of CUHK VPN

• Hostname: vpn.cuhk.edu.hk
• Max connection session: 8 hours with 1 hour idle time out except Windows 8 / 8.1, Mac OS X 10.9 or above and iOS 7 or above.

Importance

• Protects your sensitive information transferred online
• Avoids lengthy idle time and moderate IP addresses usage
• Prevent network resource abuse by prohibiting multiple logins to CUHK VPN / ClassNet
• Unify access restriction methods on CUHK online resources. System developers therefore can restrict their resources by asking users to connect to CUHK VPN with Computing ID + OnePass
• (CWEM) password.

Services Require VPN Connection

• The following central IT resources or services require a campus network connection when you’re outside CUHK.
  • CUHK Restricted Webapge at http://www.cuhk.edu.hk
  • CUPIS – CU Personnel Information System
  • CUSAP Financial System
  • IOPAS – Integrated Outside Practice Administration System
  • SPUS – Staff Profile Update System
  • SSAS – Staff Superannuation Administration System
  • ITSC managed Research Computing Platforms (Newcluster, AVES, GAIA)
  • Kaspersky anti-virus download center
  • Exchange Email Access via Outlook for Mac
    (No VPN is needed for Exchange Email Access via Outlook for Windows or mobile access to Exchange)
  • RDP (Remote Desktop Protocol) – policy
  • SMB (Server Messgae Block) – policy
  • Wake-on-LAN
  • Changing Email Alias or Email Address http://cai.itsc.cuhk.edu.hk/alias
• Access ClassNet, a wired network in CUHK classrooms
• For department IT services, please consult related departmental IT support.

• When using CUHK VPN service, users are subject to the following policies:
  • Wired Network Use Policy for General Users
  • Wireless LAN (Wi – Fi) Acceptable Use Policy and Guidelines
  • Computer Network – Policies and Guidelines on Access and Usage
• No concurrent access to VPN is allowed regardless of the connection methods – through ClassNet, ResNet ornon-CUHK connection. This mechanism insures the fair share of network resources.
• The maximum connection duration of CUHK VPN is 8 hour. Idling for 1 hour will trigger timeout.
• There will be suspension of access to CUHK VPN / campus network if ITSC observes abnormal network traffic from your device / account.

1. You may experience an unstable VPN connection from mainland China with the gradual upgrade of China’s Great Firewall. Most of the University systems do not require a VPN connection. You can do your email, access eLearning system, browse CUHK websites, etc through any Internet connection. Please check out services that require a VPN connection.
2. There’s a known issue with Windows 10 home edition (with version 1903) users fails to make a VPN connection. “Connecting to VPN” message keeps prompting on screen without making a connection. It could be a windows bug and some users fail to establish the connection at Windows system tray. Please follow the steps below to establish the VPN connection.
   Solution 1:
   1. In the Windows search box, type VPN Settings command.
   2. Click “VPN Connection”, “Connect”.
      
   3. When prompted, enter your Computing ID as User name, and OnePass password for password. And then click OK to establish the connection.
      

   Solution 2:

   1. In the Windows search box, type rasphone command.
   2. On the prompted windows, click Connect.
      
   3. When prompted, enter your Computing ID as User name, and OnePass password for password. And then click Connect to establish the connection.