Connecting to SBU Computer Science Palo Alto Network GlobalProtect Gateway from Debian

The following documentation is based on Ubuntu 9.3.0

  • Install the vpnc package on your system:

root@debian:/home/xxx# apt-get install vpnc
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
Suggested packages:
  resolvconf dnsmasq
The following NEW packages will be installed:
  vpnc vpnc-scripts
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 95.6 kB of archives.
After this operation, 271 kB of additional disk space will be used.
Do you want to continue? [Y/n] 
Get:1 stretch/main amd64 vpnc-scripts all 0.1~git20160829-1 [12.4 kB]
Get:2 stretch/main amd64 vpnc amd64 0.5.3r550-3 [83.1 kB]
Fetched 95.6 kB in 0s (758 kB/s)
Selecting previously unselected package vpnc-scripts.
(Reading database ... 133078 files and directories currently installed.)
Preparing to unpack .../vpnc-scripts_0.1~git20160829-1_all.deb ...
Unpacking vpnc-scripts (0.1~git20160829-1) ...
Selecting previously unselected package vpnc.
Preparing to unpack .../vpnc_0.5.3r550-3_amd64.deb ...
Unpacking vpnc (0.5.3r550-3) ...
Setting up vpnc-scripts (0.1~git20160829-1) ...
Processing triggers for man-db ( ...
Setting up vpnc (0.5.3r550-3) ...

  • Connect to CS VPN. You will be prompted for 2 sets of credentials.
  • IPsec ID: cs_mobile
  • IPSec secret: mobile Use your Computer Science Active Directory user ID and password

Execute vpnc:
root@debian:/home/xxx# sudo vpnc
Enter IPSec gateway address: ;
Enter IPSec ID for cs_mobile
Enter IPSec secret for cs_mobile [at]
Enter username for cs\{your CS Active Directory user ID}
Enter password for cs\xxx [at]
VPNC started in background (pid: 26186)...

  • Verify your VPN connection. The tun0 interface information shows your
    CS VPN IP address provided by the Palo Alto Global Protect Gateway.

$ root@debian:/home/xxx# ip a
qdisc pfifo_fast state UNKNOWN group default qlen 500
    inet scope global tun0
       valid_lft forever preferred_lft forever
    inet6 fe80::3a9e:2cbd:3360:5215/64 scope link flags 800 
       valid_lft forever preferred_lft forever

  • Disconnecting VPN connection:

sudo vpnc-disconnect