Difference between revisions of "Network/VPN/Ubuntu"

From UMIACS
Jump to navigation Jump to search
(Created page with "'''Please note that this tutorial assumes you already have a network connection established.''' '''Authentication is handled via the Windows domain. If you have an account in...")
 
 
(23 intermediate revisions by 5 users not shown)
Line 1: Line 1:
 
'''Please note that this tutorial assumes you already have a network connection established.'''
 
'''Please note that this tutorial assumes you already have a network connection established.'''
'''Authentication is handled via the Windows domain.  If you have an account in the PC Active Directory, you already have access.'''
+
'''If you have a UMIACS account, you already have access.'''
  
The UMIACS VPN is accessible through the Pulse Secure Client.  Alternatively, you can establish a connection through a web browser.
+
The UMIACS VPN is accessible through the Pulse Secure Client.
  
 
== Connecting through the Pulse Secure client ==
 
== Connecting through the Pulse Secure client ==
 
#'''Download the client:'''
 
#'''Download the client:'''
#:[[Media:PulseSecure.deb|Ubuntu 64 bit Pulse Secure Client]]<br style="clear:both"/>
+
#:[[Media:Pulsesecure_9.1.R14_amd64.deb|Ubuntu 64 bit Pulse Secure Client]]<br style="clear:both"/>
 +
#:[[Media:PulseSecure9.1R8.2i386.deb|Ubuntu 32 bit Pulse Secure Client]]<br style="clear:both"/>
 
#'''Navigate to the download location in terminal. e.g.: ''' <tt>cd ~/Downloads</tt>
 
#'''Navigate to the download location in terminal. e.g.: ''' <tt>cd ~/Downloads</tt>
 
#'''Install the package with dependencies, providing your password for sudo when requested.'''
 
#'''Install the package with dependencies, providing your password for sudo when requested.'''
#:<tt>sudo dpkg -i PulseSecure.deb && /usr/local/pulse/PulseClient_x86_64.sh install_dependency_packages</tt>
+
#:<code>sudo dpkg -i <insert_filename_here>.deb && /usr/local/pulse/PulseClient_x86_64.sh install_dependency_packages</code>
 
#:[[Image:UbuntuPulseInstall.png|thumb|center|500px|]]
 
#:[[Image:UbuntuPulseInstall.png|thumb|center|500px|]]
 +
#Note: If not all dependency packages are installed automatically and an error is thrown. You can manually install the packages as shown here: <code>sudo apt-get install libcurl4</code> and <code>sudo apt-get install libnss3-tools</code> and then proceed with the Install.
 
#'''Start the client.'''
 
#'''Start the client.'''
 
#:[[Image:UbuntuPulseDesktop.png|thumb|center|500px|]]
 
#:[[Image:UbuntuPulseDesktop.png|thumb|center|500px|]]
Line 17: Line 19:
 
#'''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu''''  
 
#'''Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu''''  
 
#:[[Image:UbuntuPulseInterface1.png|thumb|center|500px|Enter the name of the VPN server.]]
 
#:[[Image:UbuntuPulseInterface1.png|thumb|center|500px|Enter the name of the VPN server.]]
#'''Enter your UMIACS Windows side credentials and hit connect.'''  
+
#'''Enter your UMIACS credentials and hit connect.'''  
#:[[Image:UbuntuPulseInterface2.png|thumb|center|500px|Enter UMIACS Windows credentials.]]
+
#:[[Image:UbuntuPulseInterface2.png|thumb|center|500px|Enter UMIACS credentials.]]
 +
#'''When prompted for a secondary password, enter one of three options below (push, phone, or <press YubiKey>).  For example, if you wish to push a notification to your device, type the word "push" into the secondary password box. '''
 +
::{|class="wikitable"
 +
!Second Credential Password Value:
 +
! Result
 +
|-
 +
| push
 +
| Send a push verification to your Duo connected device
 +
|-
 +
| phone
 +
| Send a call verification to your Duo connected device.
 +
|-
 +
| <press YubiKey>
 +
| If you have a physical token then you would press the YubiKey for the one time password.
 +
|}
 +
::Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please [[HelpDesk | contact us]] if you would like to register a YubiKey for this purpose.
 +
{{Note|<b>Pro-tip:</b> Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.}}
  
 
You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.
 
You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.
Line 27: Line 45:
 
# Select the down arrow to show connection status.
 
# Select the down arrow to show connection status.
 
#:[[Image:UbuntuPulseInterface4.png|thumb|center|280px|]]
 
#:[[Image:UbuntuPulseInterface4.png|thumb|center|280px|]]
 
 
<br style="clear:both"/>
 

Latest revision as of 14:58, 16 April 2022

Please note that this tutorial assumes you already have a network connection established. If you have a UMIACS account, you already have access.

The UMIACS VPN is accessible through the Pulse Secure Client.

Connecting through the Pulse Secure client

  1. Download the client:
    Ubuntu 64 bit Pulse Secure Client
    Ubuntu 32 bit Pulse Secure Client
  2. Navigate to the download location in terminal. e.g.: cd ~/Downloads
  3. Install the package with dependencies, providing your password for sudo when requested.
    sudo dpkg -i <insert_filename_here>.deb && /usr/local/pulse/PulseClient_x86_64.sh install_dependency_packages
    UbuntuPulseInstall.png
  4. Note: If not all dependency packages are installed automatically and an error is thrown. You can manually install the packages as shown here: sudo apt-get install libcurl4 and sudo apt-get install libnss3-tools and then proceed with the Install.
  5. Start the client.
    UbuntuPulseDesktop.png
  6. and click 'Add' (+) under the connection section.
    Click the 'Add' (+) button to create a new connection.
  7. Enter a name for your VPN connection and the server URL 'vpn.umiacs.umd.edu'
    Enter the name of the VPN server.
  8. Enter your UMIACS credentials and hit connect.
    Enter UMIACS credentials.
  9. When prompted for a secondary password, enter one of three options below (push, phone, or <press YubiKey>). For example, if you wish to push a notification to your device, type the word "push" into the secondary password box.
Second Credential Password Value: Result
push Send a push verification to your Duo connected device
phone Send a call verification to your Duo connected device.
<press YubiKey> If you have a physical token then you would press the YubiKey for the one time password.
Please note that registering a YubiKey for use with the VPN requires interaction with UMIACS Tech Staff. Please contact us if you would like to register a YubiKey for this purpose.
Exclamation-point.png Pro-tip: Select ‘Save Settings’ on the secondary authentication prompt to have Duo automatically use your preferred method.

You should now be connected to the UMIACS VPN. You can close the window and the VPN will remain connected.

Checking VPN Status

  1. Launch the Pulse Client GUI
    UbuntuPulseDesktop.png
  2. Select the down arrow to show connection status.
    UbuntuPulseInterface4.png