Connecting to SBU Computer Science Palo Alto Network GlobalProtect Gateway from Linux Mint

The following documentation is based on Linux Mint 18.1

  • Install the vpnc package on your system:

sudo apt-get install vpnc
[sudo] password for xxx: 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  vpnc-scripts
Suggested packages:
  dnsmasq
Recommended packages:
  iproute
The following NEW packages will be installed:
  vpnc vpnc-scripts
0 upgraded, 2 newly installed, 0 to remove and 24 not upgraded.
Need to get 88.3 kB of archives.
After this operation, 270 kB of additional disk space will be used.
Do you want to continue? [Y/n] 
Get:1 http://archive.ubuntu.com/ubuntu xenial/universe amd64 vpnc-scripts all 0.1~git20150318-1 [12.3 kB]
Get:2 http://archive.ubuntu.com/ubuntu xenial/universe amd64 vpnc amd64 0.5.3r550-2build1 [76.0 kB]
Fetched 88.3 kB in 0s (129 kB/s)
Selecting previously unselected package vpnc-scripts.
(Reading database ... 581105 files and directories currently installed.)
Preparing to unpack .../vpnc-scripts_0.1~git20150318-1_all.deb ...
Unpacking vpnc-scripts (0.1~git20150318-1) ...
Selecting previously unselected package vpnc.
Preparing to unpack .../vpnc_0.5.3r550-2build1_amd64.deb ...
Unpacking vpnc (0.5.3r550-2build1) ...
Processing triggers for man-db (2.7.5-1) ...
Setting up vpnc-scripts (0.1~git20150318-1) ...
Setting up vpnc (0.5.3r550-2build1) ...

  • Connect to CS vpn. You will be prompted for 2 sets of credentials.
    IPsec ID: cs_mobile
    IPSec secret: mobile

vpn.cs.stonybrook.edu: Use your Computer Science Active Directory user ID and password

Execute vpnc:
sudo vpnc
Enter IPSec gateway address: vpn.cs.stonybrook.edu 
Enter IPSec ID for vpn.cs.stonybrook.edu: cs_mobile
Enter IPSec secret for cs_mobileatvpn.cs.stonybrook.edu
Enter username for vpn.cs.stonybrook.edu: cs\{your CS Active Directory user ID}
Enter password for cs\xxx@vpn.cs.stonybrook.edu
VPNC started in background (pid: 26186)...

  • Verify your VPN connection. The tun0 interface information shows your CS VPN IP address provided by the Palo Alto Global Protect Gateway.

ifconfig
tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:130.245.76.6  P-t-P:130.245.76.6  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1342  Metric:1
          RX packets:21 errors:0 dropped:0 overruns:0 frame:0
          TX packets:27 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500 
          RX bytes:8446 (8.4 KB)  TX bytes:1980 (1.9 KB)  

  • Disconnecting VPN connection:

sudo vpnc-disconnect