Connect Your Linux Computer to the UTC VPN

Special Notes

• The UTC VPN requires two-factor authentication with Duo.  If you have never set up Duo before, please visit Setting up Two-Factor Authentication (Duo) to get started.
• The UTC VPN along with two-factor authentication is the only approved method of remote access to the University local network and connected resources. Other methods may be blocked.
• All UTC faculty, staff, and students have access to the VPN.  By default only UTC's publicly available services and the Internet are accessible.  If you require access to privileged services, you must request an account elevation.

• The GlobalProtect client for Linux currently only supports CentOS, Redhat, and Ubuntu.  Derivatives are not officially supported and you may receive error messages - your experience may vary.  If you use a different distribution, please contact the help desk to talk with our network group about it.
• There are two different versions of the linux client; CLI or GUI.  You must use the GUI version as it is the only one that supports two-factor authentication.

Directions (First time)

1. Open your preferred web browser to: https://netaccess.utc.edu/vpn/
    
2. Download the appropriate software version (Linux)
    
3. Once the download has completed, untar the archive (hint: move the tgz file into a subfolder first)
    
4. Use your package manager (i.e. yum, dpkg, etc) to install the appropriate package for your distribution.  Make sure to install the one with "UI" in the file name.
    
5. After installation, the GlobalProtect client will appear in the system tray
    
6. Open the GlobalProtect client by clicking on the system tray icon
    
7. In the field that asks for the portal address, enter vpn.utc.edu
    
8. Click 'Connect'
    
9. A new window will open up with a login form.  Enter your UTC ID and password here.
    
10. After successful login, you will be presented the two-factor options from Duo to either receive a push notification or enter a passcode.
     
11. After completing the two-factor authentication, you will be connected to the VPN.

Directions (Subsequent connections)

1. Open the GlobalProtect client by clicking on the system tray icon
    
2. Click 'Connect'
    
3. A new window will open up with a login form.  Enter your UTC ID and password here.
    
4. After successful login, you will be presented the two-factor options from Duo to either recieve a push notification or enter a passcode.
    
5. After completing the two-factor authentication, you will be connected to the VPN.

Directions (Disconnect)

1. Open the GlobalProtect client by clicking on the system tray icon
    
2. Click 'Disconnect'

Troubleshooting

• When clicking the system tray icon, if the GlobalProtect client window doesn't display, do the following:

  1. Open a terminal.
      
  2. Run the command: globalprotect launch-ui
      
  3. If the previous command doesn't work, run the command: globalprotect launch-ui --recover

• When trying to connect, if the GlobalProtect app gives an error stating "There is a problem with the security certificate, so the identity of vpn.utc.edu cannot be verified." then most likely the operating system in use is not officially supported. The following steps can sometimes resolve the issue.
  
  This is known to work with the following operating systems:

  • Linux Mint 18, 19

  
  In a terminal window, enter the following commands:
  
  SEARCH=Ubuntu
REPLACE=`lsb_release -ds | head -c${#SEARCH}`
TARGET=/opt/paloaltonetworks/globalprotect/PanGPS
sudo sed -i "s/$SEARCH/$REPLACE/g" $TARGET
sudo systemctl restart gpd.service