UM IST Help

VPN - Instructions for installing Linux VPN

Updated on

Audience: Faculty, staff, students

Introduction

Learn how to set up the virtual private network (VPN) with Ivanti Secure Access Client for Linux.

Supported platforms

This topic provides the supported platforms that were tested with the current release of the Pulse Secure Desktop Clients for Linux.

  • Ubuntu 18.04 LTS, 20.04 LTS
  • Fedora 31, 32
  • Debian 10, 11

Installing Pulse Secure Client for Linux

The Pulse Secure client for Linux supports CLI-based installation.

The nss3-tools and net-tools are dependency packages required to successfully install the Pulse Client. Use the following commands to install these dependency tools manually.

Fedora: yum install <dependency tool name>

Ubuntu and Debian: apt-get install < dependency tool name >

The installation command

Debian – based installation

dpkg -i <package name>

RPM – based installation

rpm -ivh <package name>

The uninstallation command

Debian – based installation

dpkg -r <package name>

RPM – based installation

rpm -e <package name>

The upgrade from old Pulse client (< 9.1Rx) to new Pulse client is not supported.

Alternate VPN client support using openconnect

Using openconnect with MFA:

Using CLI command, connecting to the staff realm:

openconnect --protocol=nc --printcookie vpn.cc.umanitoba.ca/staff --user=enterYourUsername

Using CLI command, connecting to the student realm:

openconnect --protocol=nc --printcookie vpn.cc.umanitoba.ca/student --user=enterYourUsername

Using CLI command, connecting to the vendor realm:

openconnect --protocol=nc --printcookie vpn.cc.umanitoba.ca/vendor --user=enterYourUsername

Prompt example:

Do you want to proceed?

POST https://vpn.cc.umanitoba.ca/dana-na/auth/url_2/welcome.cgi

Got HTTP response: HTTP/1.1 302 Moved

GET https://vpn.cc.umanitoba.ca/dana-na/auth/url_2/welcome.cgi?

frmLogin

password:

password#2: type: push, phone or sms

POST https://vpn.cc.umanitoba.ca/dana-na/auth/url_2/login.cgi

Got HTTP response: HTTP/1.1 302 Moved

GET https://vpn.cc.umanitoba.ca/dana/home/starter0.cgi?check=yes

DSID=1833ac742d7b3ccb0140a637446d873e; DSFirst=1628180392; DSLast=1628180395

Set up UDP failed; using SSL instead

Connected as 10.176.4.103, using SSL, with ESP disabled

To disconnect, you can type CTRL + C.

The first password is your account password, the second password is your action type of: push, phone or sms. You already have to be enrolled into MFA before you start using the actions below. You can enroll your device by going through the webportal first. Just go to: vpn.cc.umanitoba.ca/staff

Action type Action description
push Perform Duo Push authentication.
You can use Duo Push if you've installed and activated Duo Mobile on your device.
phone Perform phone callback authentication.
sms Send a batch of SMS passcodes. Your authentication attempt will be denied. You can then authenticate with one of the newly-delivered passcodes.
A numeric passcode Log in using a passcode, either generated with Duo Mobile, send via SMS, generated by your hardware token, or provided by an administrator. Examples: "123456" or "2345678".

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Previous Article VPN - Installation and configuration steps for Android
Next Article How to log in to the virtual private network (VPN) and bookmark your drives
Still Need Help? Contact us