VPN - Setup for Linux

Issue/Question

• How do I connect to the OSU VPN from a Linux device?

Relates To (Environment)

• Oregon State University
• Employee, Student
• Linux
• VPN

Explanation

The OSU VPN server requires the use of the Cisco AnyConnect client in order to connect. It also requires Duo two-step authentication.

There is currently no command-line or terminal-based way to connect to the OSU VPN.

Resolution

Install AnyConnect Client

These steps are for connecting to the new VPN server (vpn.oregonstate.edu) and were tested using Ubuntu 18.04.4 LTS. The OSU VPN server requires the AnyConnect client.

1. Navigate to https://oregonstate.box.com/v/cisco-vpn-clients
   • Note: you will need to sign in to Box with your OSU account in order to access the VPN installers.
2. Download the file for Linux
3. Extract the files to a folder on your computer
4. Change to the directory where you downloaded the installer and run the following commands:
   1. cd anyconnect-linux64-4.9.01095/vpn
   2. sudo bash
   3. ./vpn_install.sh
5. Accept the license agreement

Use AnyConnect Client to Connect to VPN

1. Open the Cisco AnyConnect client
2. Connect to the following server: vpn.oregonstate.edu

   Caution: If you see "sds.oregonstate.edu" in the server name, please change it to "vpn.oregonstate.edu".

3. After you click "Connect" a login screen will pop-up. By default, you will be connecting in full tunnel mode. To switch to split tunnel mode, click on the Cisco AnyConnect Secure Mobility Client window behind the login window and select "OSU Community (Split Tunnel)" from the Group drop-down. A new login window will then appear.
   
4. On the OSU login screen, enter your username and password
5. Login with Duo when prompted
6. Click "Accept" when prompted
7. You are now connected to the OSU VPN

Troubleshooting

"You are missing the required libraries for the authentication method you requested"

Some desktop environments do not come with the webkitgtk library the Cisco AnyConnect client uses to to generate the ONID sign in window. For debian based distributions the required library can be installed by running the following commands from terminal:

sudo apt-get update
sudo apt-get install libwebkit2gtk-4.0-37

Assistance

For assistance, contact the Service Desk.