Accessing Resources on Ubuntu
1. Authenticating to the Network
In order to access network resources on either WIDMIR or over ethernet you first need to provide your Discovery credentials for authentication.
- For wifi authentication: Open Setting and navigate to the Wi-Fi section. Click the WIDMIR wifi option.
For ethernet authentication: Open Setting and navigate to the Networking section. Click the gear icon next to Wired, and navigate to the Security section.
- Enter the following settings.
Turn on 802.1x security
Authentication: Protected EAP (PEAP)
Anonymous identity: leave blank
CA certificate: check no CA certificate is required
PEAP version: automatic
Inner authentication: MSCHAPv2
Username: Discovery Username
Password: Discovery Password
- Click apply
2. Accessing Shared Drives
- Determine the path of the shared drive the user needs to connect to. (This can be obtained from your PI/Manager)
- Open Files and choose the Other Locations tab.
- Next to connect to server enter the path of the shared drive.
- If it asks you for authentication enter the following information.
Connect as: Registered User
Username: Discovery Username
Domain: morgridge.net
Password: Discovery Password
Remember password forever
3. Connecting to the VPN
Connecting to Morgridge VPN
In order to connect to the Morgridge VPN on Ubuntu you'll need to use the openconnect software.
- Run the following command to download the openconnect software.
sudo apt install openconnect
- Run the following command to connect to the Morgridge VPN:
sudo openconnect vpn.morgridge.org
- You will then be asked to provide the following informaion:
Group: Morgridge
User: username
Password: password
- To disconnect from the Morgridge VPN enter CTRL+C in the terminal running openconnect
Connecting to WID VPN
- Download the Linux client from this link. The file follows the format
PanGPLinux*.tgz
. -
- Note: The link will not work unless you already have the VPN. You must use the link on a separate machine (that has the VPN) to download the installer, send the installer to your desired machine (with an email, shared drive, etc.), then install it on Linux.
-
Extract the package.
tar -xvf ~/pkgs/PanGPLinux-4.1.5-c8.tgz
-
Install the extracted
.deb
file (Note: this step is for Ubuntu and Debian distros): .sudo dpkg -i GlobalProtect_deb-4.1.5.0-8.deb
or
sudo apt-get install GlobalProtect_deb-4.1.0.0-23.deb
For Fedora / RedHat install the .rpm file: rpm -i --nodigest --nofiledigest GlobalProtect_rpm-5.0.5.0-11.rpm
-
The client installs to
/opt/paloaltonetworks/globalprotect
. Settings and profile information are saved in$HOME/.globalprotect
.
How to connect to the Palo Alto GlobalProtect client on Linux.
-
Use the
globalprotect
executable to connect to VPN. When you executeglobalprotect
, you will enter prompt mode. Typehelp
for instructions on how to use the CLI tool.Usage: only the following commands are supported: collect-log -- collect log information connect -- connect to server disconnect -- disconnect disable -- disable connection import-certificate -- import client certificate file quit -- quit from prompt mode rediscover-network -- network rediscovery remove-user -- clear credential resubmit-hip -- resubmit hip information set-log -- set debug level show -- show information
-
Run the connect subcommand with the portal option to connect to VPN. WID’s portal is
wid.vpn.wisc.edu
.globalprotect connect --portal wid.vpn.wisc.edu
-
Type your username and password:
Retrieving configuration... Disconnected portal:local:Enter login credentials username: # Type username here user1 Password: # Type password here Retrieving configuration... Discovering network... Connecting... Connected
- Run the following command to disconnect from the WID VPN.
globalprotect disconnect
See also
WiscVPN - How to Install, Connect, Uninstall, and Disconnect WiscVPN Palo Alto GlobalProtec