Connecting to SBU Computer Science Palo Alto Network GlobalProtect Gateway from CentOS

This guide outlines how to configure and establish a VPN connection to the Stony Brook University Computer Science network on CentOS Linux using the vpnc client. This document adheres to ADA accessibility standards for publishable knowledge base articles.

Note: The following documentation is based on CentOS 7.4. Commands require root or sudo privileges.

Step 1: Install EPEL Repository and VPNC Client

The vpnc package is available through the Extra Packages for Enterprise Linux (EPEL) repository. Run the following commands in terminal with root privileges:

  1. Install EPEL Release Repository:
    sudo yum install epel-release

  2. Install VPNC Package:
    sudo yum install vpnc

Step 2: Connection Parameters Reference

When running vpnc, you will be prompted for two sets of credentials: the IPSec gateway parameters and your CS Active Directory user account.

Prompt Name

Value / Input Required

Enter IPSec gateway address

vpn.cs.stonybrook.edu

Enter IPSec ID

cs_mobile

Enter IPSec secret

mobile

Enter username

cs\{your CS Active Directory User ID}

Enter password

{your CS Active Directory Password}

Step 3: Connect and Verify

  1. Execute VPNC Command:
    sudo vpncFollow the interactive prompts using the table above. Upon successful authentication, you will see output confirming:
    VPNC started in background (pid: 26186)...

  2. Verify VPN Interface:
    To verify that your CS VPN connection is active, execute:
    ifconfig tun0The tun0 network interface should show your assigned IP address (e.g., inet 130.245.X.X) provided by the Palo Alto GlobalProtect Gateway.

Step 4: Disconnect from the VPN

To disconnect the VPN session and terminate the tunnel, run:

sudo vpnc-disconnect