Topics Map > •Network Services > -VPN
VPN: openconnect VPN for Linux using Duo Authentication
Warning:
This may not work. Can fail to work at any time. This is advanced Linux usage. No support is provided. You have been warned.
Requirements:
- Linux machine and having root privileges.
- Enrollment with Duo. If you have not yet enrolled, go to the Duo Enrollment Guide for instructions.
Procedure:
-
CentOS/Red Hat
-
yum install openconnect vpn-script
-
There may be some network-manager/KDE/Gnome tooling as well.
-
-
Debian/Ubuntu
-
apt-get install vpnc-scripts openconnect
-
There may be some network-manager/KDE/Gnome tooling as well.
-
- Runs in the background
- openconnect -b --quiet --user=netID --authgroup=RiceNet connect.rice.edu
- openconnect -b --quiet --no-dtls --user=netID --authgroup=RiceNet connect.rice.edu
- Runs in the foreground
- openconnect --no-dtls connect.rice.edu
Type… |
To… |
---|---|
pin |
Log in using a pin, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator. Examples: To use the pin “123456," type 123456 |
push |
Push a login request to your registered phone (if you have Duo Mobile installed and activated on your iOS, or Windows phone device). Just review the request and select Approve to log in. |
phone |
Authenticate via callback to your registered phone. |
sms |
Sends an SMS message with a new batch of passcodes to your registered device. Your initial login attempt will fail. Login again with one of the new passcodes. |
Note: You can add a number to any of these options if you have more than one registered device. For example, push2 will send a login request to your second registered phone. To learn more about the Duo options, please click on Duo Guide to Two-Factor Authentication
Step 5: See if it works by performing a test to a campus resource for which you needed VPN.
N.B.
There is some testing which shows you may benefit in your home network if you use something in the 192.168.X.X space as it most likely will not collide with campus networks. This document cannot help you do that.