Note that the VPN app for Windows and Mac desktops is named Pulse Secure and the app for Android and iOS is named Ivanti.
Introduction
Secure Sockets Layer (SSL) virtual private network (VPN) provides secure remote access from one machine to restricted/private resources across a public network. Virginia Tech's SSL VPN service referred to as Remote Access VPN is a subscription based service that allows you to access Virginia Tech resources remotely across the globe. This service does not provide any end-to-end encryption to other services that are being accessed over VPN but does encrypt the traffic between your machine and the VPN device.
Top of page
Contents
Top of page
Top of page
Eligibility Requirements
- All current Virginia Tech faculty, staff, and students are eligible to access Remote Access VPN.
- Remote Access VPN is a subscription based service and is provided as a bundled service with the Virginia Tech wireless network service or the Virginia Tech wired Ethernet service. You can verify your subscription by following the instructions at Registering Online for Wireless LAN Service.
- You may use either Virginia Tech provided devices or personally owned devices to connect to Remote Access VPN provided they meet the minimum system and password requirements.
- You must have access to an administrator account on the computer. If you have a device owned by Virginia Tech and do not have that access, contact your Network Liaison or contact 4Help at http://4help.vt.edu by clicking Get Help.
Top of page
See pages 9-12 of Pulse Secure Desktop Client Supported Platforms Guide.
4Help does not support Linux installations. Due to the wide variety of Linux distributions, 4Help cannot provide any support beyond these basic instructions. We do not guarantee that they will work with your particular device or client.
For security reasons, we ask users to upgrade their machines to the latest version and update them periodically to receive any patches for vulnerabilities. Network Infrastructure and Services (NI&S) is unable to support operating systems that are no longer supported by the operating system manufacturer.
Top of page
Network Password and 2-Factor Authentication
Your Network Password is different from your regular VT Username Passphrase. For instructions to get or reset it, see the View, Change, or Reset Network Password section of Changing or Resetting My Password.
The Virginia Tech Remote Access VPN service requires using 2-factor authentication. For more information, see Using 2-Factor Authentication.
Top of page
Connection Options
Generally, b) - VT Traffic over SSL VPN is the recommended connection profile, since it provides access to all Virginia Tech resources and doesn't slow down internet traffic to services outside of Virginia Tech. For more information, see the What is the difference between two Pulse Secure VPN Connection profiles? section of Remote Access VPN Frequently Asked Questions.
Top of page
Instructions
Download, Install, and Connect to VPN in Linux
Disclaimer: 4Help does not support Linux installations. Due to the wide variety of Linux distributions, 4Help cannot provide any support beyond these basic instructions. We do not guarantee that they will work with your particular device or client.
These instructions were created using Ubuntu. Instructions may differ for other distributions.
- Click one of the following links to download the Pulse installer appropriate for your version of Linux:
- Please follow the instructions found at Pulse Secure Client for Linux. Once the installation is complete, please proceed to next step.
- Use the graphical Pulse Secure interface to create a connection.
- On the Dock, use the graphical search menu to search for: pulse
- To start Pulse, double-click PulseSecure.
- Create the first connection.
- In the Pulse Secure window, click the plus sign (+).
- In the Name: text box, type: a) - All Traffic over SSL VPN
- In the URL: text box, type: https://vpn.nis.vt.edu/alltraffic
- Click Save.
- Create the second connection. (Recommended connection profile)
- In the Pulse Secure window, click the plus sign (+).
- In the Name: text box, type: b) - VT Traffic over SSL VPN
- In the URL: text box, type: https://vpn.nis.vt.edu/vttraffic
- Click Save.
- Use the graphical Pulse interface to connect.
- Click Connect.
- Type your credentials.
- In the PID text box, type your VT Username, which is the first part of your @vt.edu email address.
- In the Network password: text box, type your network password.
- Click Sign In.
- When prompted, complete 2-factor authentication with your second factor. For instructions, see Authenticating with Your Second Factor.
- When the connection is complete, Connect will change to Disconnect.
- When you are finished using the remote access VPN, disconnect from it by clicking Disconnect.
Top of page
Alternate Client for Linux: OpenConnect
Disclaimer: 4Help does not support Linux installations. Due to the wide variety of Linux distributions, 4Help cannot provide any support beyond these basic instructions. We do not guarantee that they will work with your particular device or client.
- From your terminal install openconnect (latest version).
- From your terminal connect to VPN by running the following command as root: sudo openconnect --protocol=pulse 'https://vpn.nis.vt.edu/vttraffic'
- When prompted, for username, enter your VT Username, which is the first part of your @vt.edu email address.
- When prompted, for password, enter your network password.
- When prompted for password#2, enter the method of 2-factor authentication you want to use:
- push
(This will send a push notification to the first push-capable device that is enrolled in your Duo account. To send the push notification to a different device, add a number to the end. For example, "push2" or "push3".)
- phone
(This will call the first voice-capable device that is enrolled in your Duo account. To have a different device called, add a number to the end. For example, "phone2" or "phone3".)
- sms1
(This will send an SMS to the first SMS-capable device that is enrolled in your Duo account. To send the SMS to a different device, add a number to the end. For example, "sms2" or "sms3".)
- You may use a passcode by entering the 6-digit passcode at the password#2 prompt.
Top of page