Difference between revisions of "VPN Instructions for Linux"

(→‎Using the IKEv2 VPN Option on Linux)
Line 2: Line 2:
  
 
==Using the IKEv2 VPN Option on Linux==
 
==Using the IKEv2 VPN Option on Linux==
−
It is suggested that Linux users use the StrongSwan package installed from the appropriate package repository.  It is also possible to download the source code from strongswan.org and compile from source. More information is available at strongswan.org.  
+
The easiest way to use StrongSwan on Linux is using the StrongSwan Network Manager Plugin.  Command-line options also exist if you so desire, and instructions are available at https://wiki.strongswan.org.
  
−
To learn how to configure the StrongSwan client, consult the wiki at https://wiki.strongswan.org.
+
===Installation on Debian-based distributions===
 +
For recent Debian-based distributions, you will need to install StrongSwan and it's eap-identity and eap-mschapv2 plugins.  You may adapt these instructions for other distributions, just be aware the packages may be named different, and package the plugins in different packages as well.
 +
 
 +
#Installing the following packages using your package manager of choice (e.g. Synaptic, apt, apt-get, aptitude, etc):
 +
#*network-manager-strongswan
 +
#*libstrongswan-extra-plugins
 +
#*libcharon-extra-plugins
 +
 
 +
It is also possible to download the source code from strongswan.org and compile from source.  If you choose this option, remember to also compile and install the eap-identity and eap-mschapv2 plugins.  More information is available at https://wiki.strongswan.org.
 +
 
 +
===Configuration on Debian-based distributions===
 +
#Open your desktop's Network Manager application and edit it's connections. 
 +
#'''Add''' a new VPN connection using '''IPsec-based VPN (strongswan)'''
 +
##Set the '''Connection Name''' to <code>CAEDM IKEv2 VPN</code>
 +
##Set '''Gateway:''' to <code>vpn.et.byu.edu</code>
 +
##Set '''Authentication''' to <code>EAP</code>
 +
##Enter your '''Username'''
 +
##Enter your '''Password''' (or leave blank to be prompted when you connect)
 +
##Under '''Options''' select only '''Request an inner IP address''' and '''Enforce UDP encapsulation'''
 +
#Click OK
 +
 
 +
For additional help in installing or configuring StrongSwan Network, consult the wiki at https://wiki.strongswan.org.
  
 
==Using the Clientless SSL VPN Option on Linux==
 
==Using the Clientless SSL VPN Option on Linux==
 
#Go to https://vpn.et.byu.edu/ using your browser of choice.
 
#Go to https://vpn.et.byu.edu/ using your browser of choice.
 
#Enter your CAEDM username and password, and then click "Login"
 
#Enter your CAEDM username and password, and then click "Login"

Revision as of 19:29, 17 December 2018

The IKEv2 and Clientless SSL VPN options are supported on Linux. The following instructions will help you create and use the VPN option of your choice. For more information on the VPN types, see VPN.

Using the IKEv2 VPN Option on Linux

The easiest way to use StrongSwan on Linux is using the StrongSwan Network Manager Plugin. Command-line options also exist if you so desire, and instructions are available at https://wiki.strongswan.org.

Installation on Debian-based distributions

For recent Debian-based distributions, you will need to install StrongSwan and it's eap-identity and eap-mschapv2 plugins. You may adapt these instructions for other distributions, just be aware the packages may be named different, and package the plugins in different packages as well.

  1. Installing the following packages using your package manager of choice (e.g. Synaptic, apt, apt-get, aptitude, etc):
    • network-manager-strongswan
    • libstrongswan-extra-plugins
    • libcharon-extra-plugins

It is also possible to download the source code from strongswan.org and compile from source. If you choose this option, remember to also compile and install the eap-identity and eap-mschapv2 plugins. More information is available at https://wiki.strongswan.org.

Configuration on Debian-based distributions

  1. Open your desktop's Network Manager application and edit it's connections.
  2. Add a new VPN connection using IPsec-based VPN (strongswan)
    1. Set the Connection Name to CAEDM IKEv2 VPN
    2. Set Gateway: to vpn.et.byu.edu
    3. Set Authentication to EAP
    4. Enter your Username
    5. Enter your Password (or leave blank to be prompted when you connect)
    6. Under Options select only Request an inner IP address and Enforce UDP encapsulation
  3. Click OK

For additional help in installing or configuring StrongSwan Network, consult the wiki at https://wiki.strongswan.org.

Using the Clientless SSL VPN Option on Linux

  1. Go to https://vpn.et.byu.edu/ using your browser of choice.
  2. Enter your CAEDM username and password, and then click "Login"
Retrieved from "https://caedm.et.byu.edu/wiki/index.php?title=VPN_Instructions_for_Linux&oldid=8411"