How to connect with OpenConnect on Linux (Ubuntu)?

####################################################################

NOTE: These instructions are for Ubuntu. If you need to connect on another distribution like Fedora, you can stil use the OpenConnect platform to connect via the terminal. You will just need to install the openconnect package via your distro's package repository, then follow the "Connecting with the Terminal" Steps. The NetworkManager option is written specifically for Ubuntu but may work on other distros that use "gnome".

LINUX Support: Linux support is provided as a "best effort" support, and is not officially supported. Due to the nature of various different distros, we may not have support information for that distro. However, feel free to reach out to us at the helpdesk email: helpdesk@energy.wisc.edu and we will do our best to assist you.

####################################################################

Summary

One option for connecting to our VPN is OpenConnect, an open source alternative to the normal GlobalProtect client. The benefit of using OpenConnect is it can be easily installed using the terminal with a few commands, and then you can connect using the native "NetworkManager" UI or the terminal. Here's the steps to do so in Ubuntu:

####################################################################

Terminal Connection

Once you have OpenConnect installed, you can connect using the terminal to our VPN. This works great because you can enter a single, quick line of text to connect at any time and disconnect by simply typing "Ctrl+C" in the terminal window or closing the terminal window. It also requires less packages to install.

Installing

1. First, update your package repository and system to be up to date.
1. Run 'sudo apt-get update && sudo apt-get upgrade' in a terminal.
2. Next, install the openconnect package from apt.
1. Type 'sudo apt-get openconnect' in the same terminal.
2. If prompted to confirm the install, type 'y' in the terminal and hit enter.

Connecting

1. Open a terminal window, and then connect to the VPN.
1. Enter the following command: 'sudo openconnect --protocol=gp weiglbrc.vpn.wisc.edu'
2. You may be prompted for your sudo password. If so, enter the password of your linux user.
3. Next, you should be prompted for your login credentials to the VPN. This will be your normal WEI/GLBRC username and password.
4. If prompted for a "gateway" to be chosen, enter "WEI-gateway" as your gateway.
5. It should connect up! It may look like the command is "frozen", or like it never finishes. That's normal- the VPN connection will remain open until the command is stopped (Which can be done via "Ctrl+C")
6. Try connecting to Scarcity or another WEI resource to verify it's connected.

NetworkManager (GUI) Route

If you prefer to use the normal user interface to handle things, this is the best route for connecting to the VPN. It will add a new entry in your upper right hand corner that allows you to one-click connect to the VPN. This does require more packages to install, however. (Since packages are needed to connect the VPN to NetworkManager).

Installing

1. First, update your package repository and system to be up to date.
1. Run 'sudo apt-get update && sudo apt-get upgrade' in a terminal.
2. Next, install the three required openconnect packages from apt.
1. Type 'sudo apt-get openconnect openconnect-network-manager openconnect-network-manager-gnome' in the same terminal.
2. If prompted to confirm the install, type 'y' in the terminal and hit enter.
3. The "openconnect-network-manager-gnome" package is needed in order for the NetworkManager GUI to work properly with OpenConnect on Ubuntu.

Adding the WEI VPN Connection

Once you've installed the OpenVPN packages necessary, you will need to add a connection to the VPN so NetworkManager knows how to get to your VPN.

1. Click on the network icon in the upper right hand corner. A dropdown window will appear.
1. Select the name of your connection (wired or wireless) and the window should expand.
2. Select that connection's "Settings" menu to open up the NetworkManager settings window.
2. In the NetworkManager settings window, look for the "VPN" section and click the + next to it.
1. Select "Multi-protocol VPN client (openconnect)"
1. A new window will open up. If you see an error stating "VPN configuration failed to load", double check that means the "openconnect-network-manager-gnome" package may not be installed.
2. For "Name", Pick a name you will remember for the VPN, like "WEI". Note that the word "VPN" will be appended to the end of it's name when seeing it in the connections window.
3. For "VPN Protocol", select "Palo Alto Networks GlobalProtect".
4. For "Gateway", enter weiglbrc.vpn.wisc.edu
5. Leave the rest of the settings as is, and click "Add"!

Connecting via the Control Panel in the Upper Right

1. Click on the network icon in the upper right, then select where it says "VPN Off".
2. Click "Connect".
1. A window will pop up. Click "Connect".
2. Enter your GLBRC/WEI Login credentials, then click "Login"
3. When prompted for a gateway, pick the only option: WEI-gateway. Click "Login" again.
4. You're connected! To disconnect, click where it now says "WEI" (under that dropdown menu), and select "Turn Off".

If you have any questions or issues, feel free to contact the WEI/GLBRC helpdesk at helpdesk@energy.wisc.edu and we will be happy to assist!