Engineering Network Services - CSU

Engineering Network Services
 

VPN Information for Linux

Pulse Secure

Prerequistes:Set up two-factor authentication.

  1. Open a terminal window and install openconnect
    • For Fedora: sudo yum install openconnect
    • For Ubuntu/Debian: sudo apt install openconnect
  2. Start the vpn
    • sudo openconnect --juniper https://secure.colostate.edu/2fa
    • "username" is your CSU eID/ename
    • "password" is your main CSU password
    • "2nd Password" can be either "push","phone", or the code from your phone app/Duo hardware key
  3. Disconnect either by closing the terminal, or pressing "Control" plus "c" at the same time.

Open VPN

!! ENS will no longer provide our OpenVPN Service starting October 2018. Please use Pulse Secure or the SSL vpn. !!

  1. Install OpenVPN and the OpenVPN NetworkManger addon by entering the approprate command in a terminal window:
    • For Ubuntu: sudo apt-get install openvpn network-manager-openvpn
    • For Fedora: sudo yum install openvpn NetworkManager-openvpn
  2. Download and extract the configuration files to somewhere permanent (e.g. $HOME/Documents/engr-vpn)
  3. Restart the Network manager or restart the machine.
    sudo service network-manager restart
  4. Configure your VPN connection from the NetworkManager icon in the system tray, VPN Connections -> Configure VPN
  5. Use the following settings
    1. Import the ENGR.ovpn from the downloaded files.
    2. The username is your Engineeering username.
    3. Click on Advanced.
    4. Check "Use custom renegotiation interval" and set to 0.
    5. Click OK to close.
    6. If you wish ALL traffic to be routed through the VPN you can skip this step, otherwise click on the Ipv4 Settings tab, then Routes. Make sure "Use this connection only for resources on its network" is selected. Click on Ok.
  6. Click Apply to finish.
  7. To connect just select the VPN connection that you created from the NetworkManager tray icon.

To use OpenVPN without the NetworkManager:

  1. Install OpenVPN by entering the approprate command in a terminal window:
    • For Ubuntu: sudo apt-get install openvpn
    • For Fedora: sudo yum install openvpn
  2. Download and extract the configuration files and move them to the /etc/openvpn folder.
  3. To connect, open a terminal window and run this command:
    sudo service openvpn start
    You will login with your Engrineering username and password.
  4. To disconnect, run this command:
    sudo service openvpn stop

The command below can also be used to connect:
sudo /usr/sbin/openvpn --config /etc/openvpn/ENGR.conf
To disconnect, use Ctrl + C

Now what? You may wish to mount network drives or connect to a server.

SSL VPN

These instructions are provided as a courtesy. The SSL VPN is supported by ACNS, not ENS. Please contact ACNS if you have any issues with this tool.

The Engineering SSL VPN does not work with the CSU wired network, but will work from the CSU wireless network, and from off-campus connections (wired or wireless).

  1. Make sure you have the latest Java Runtime Environment installed.
  2. Go to https://secure.colostate.edu/engr and login with your CSU eName and ePassword.
  3. Type in your local machine account password for elevated privileges when prompted to install the java applet for the first time.

Once the applet installs, the web page will remain up. You can minimize the window or even close it and work as desired. There is a padlock icon in the System Tray Double-clicking this will display the connection properties, including the IP address you've been assigned. Closing this window will disconnect the secure session.

Now what? You may wish to mount network drives or connect to a server.

 
layout image
layout image

This document last modified Thursday July 26, 2018


Engineering Network Services home page link College of Engineering home page link