Action

To connect to UAlbany's VPN service using a Debian or Ubuntu Linux device, follow the steps below.

Instructions

Verify compatibility

At this time, only official flavors of Ubuntu (listed via https://ubuntu.com/download/flavours) are officially supported out of the box.  To verify, please make sure of the following:

• You have a file /etc/lsb-release available on your system

Within that file, there is a line DISTRIB_DESCRIPTION that contains "Ubuntu" in it.  For example:  DISTRIB_DESCRIPTION="Ubuntu 19.04"

Install GlobalProtect on Linux (Debian/Ubuntu)

1. The official Linux client is distributed differently than the Windows/Mac clients. 
   You can access the latest client by following this link (authentication required): GlobalProtect Linux
   
2. Download the latest .tgz file to a location on your Ubuntu machine (as of this writing, PanGPLinux-5.3.0-c32.tgz)
   
   
3. Launch a Terminal application and navigate to the directory in which you saved the .tgz file.
   
   

4. Run the following command to extract the file:

   tar -xvf PanGPLinux-5.3.0-c32.tgz

5. Run the following command to install the client, entering your workstation's user password if prompted:

   sudo dpkg -i GlobalProtect_deb-5.3.0.0-32.deb

Connect to GlobalProtect on Linux (Debian/Ubuntu)

1. Run the following command to connect to GlobalProtect:

   globalprotect connect --portal uavpn.albany.edu

2. Enter your UAlbany NetID and password when prompted.
   
   
3. After entering your UAlbany NetID and password, you will receive an automatic push or phone callback (depending on your default Duo settings).  Refer to your device and authorize the Duo prompt.
   
   

4. Optionally, you may add a comma (",") to the end of your password and append a Duo 2-step method option:

   2-Step Method	Instructions
   push	Perform a Duo push authentication to your Duo Mobile app on your mobile device
   phone	Perform phone callback authentication
   sms	Send an SMS passcode.  The initial authentication will fail (see next row)
   A numeric passcode	Log in using an SMS passcode previously sent by Duo (see above row), generated by the Duo Mobile app, or generated via a hardware token.  Examples: "123456" or "2345678"

   
   

   For example, if you wanted to use an SMS passcode to authenticate (instead of Duo Push or a phone call, you would enter:

   username: yournetid password: yourpassword,sms

   
   (this authentication step would fail, but you would receive an SMS message from Duo.  You'd then repeat the operation, entering the passcode (example with 123456 sent by duo)
   
   

   username: yournetid password: yourpassword,123456

Disconnect from GlobalProtect on Linux (Debian/Ubuntu)

1. Run the following command to connect to GlobalProtect:

   globalprotect disconnect

Example Screenshots

1. Installation
   
   
   
2. Connection