VPN using the OpenConnect Client

Note: You need to setup two factor authentication before using VPN. Follow the instructions here.
Note 2: The VPN address recently changed to:  ocvpn.scinet.science

These instructions are for the open source OpenConnect clients from: http://www.infradead.org/openconnect/

These instructions are for the GUI versions of the installers.  There are command line versions available as well, but those are not covered here.

Installation for Windows

Download the OpenConnect Windows Client from here:
https://github.com/openconnect/openconnect-gui/releases

Installation for Unix

Download and installation instructions for assorted UNIX variants are here:
http://www.infradead.org/openconnect/packages.html

Installation for OSX

The OpenConnect GUI client for OSX is available via MacPorts.  Please follow the links on that site to install MacPorts (This involves installing and configuring Xcode for command line support from the apps store as well) . After you have MacPorts working on your system you need to run:

sudo port install openconnect-gui

This will take a few minutes.

Configuring and running on Windows

Open the client and click the "Edit connection details" button as shown below.
Screen Shot 2018-05-11 at 4.23.34 PM.png 21.2 KB View full-size Download

for Gateway enter:
https://ocvpn.scinet.science
and click [Save & Connect]
win oc client step1.png 20 KB View full-size Download


Enter your Ceres Username
Screen Shot 2018-05-11 at 4.24.30 PM.png 27.1 KB View full-size Download


Enter your password with your GA pin appended to the end.  For example if your password is "qwerty" and your GA app is showing  "456321"  you would enter:
qwerty456321 

Screen Shot 2018-05-11 at 4.25.08 PM.png 28.7 KB View full-size Download


The "Green Lock" indicates that you should now be connected.
win oc final.png 24.1 KB View full-size Download


You can also see the connection status in the system tray

Screen Shot 2018-05-11 at 4.25.34 PM.png 10.2 KB View full-size Download





Configuring and running on OSX

After installation openconnect-gui will appear on your Applications menu under "MacPorts". 
Screen Shot 2018-05-11 at 3.38.51 PM.png 129 KB View full-size Download

However this will not work as the the VPN need to run with elevated privileges.
To run open a terminal and use:

sudo /Applications/MacPorts/openconnect-gui.app/Contents/MacOS/openconnect-gui
After opening the client enter ocvpn.scinet.science and click [Connect]

mac oc step 1.png 26.3 KB View full-size Download

Enter your Ceres username.

Screen Shot 2018-05-11 at 3.56.38 PM.png 38.4 KB View full-size Download

Enter your password with your GA pin appended to the end.  For example if your password is "qwerty" and your GA app is showing  "456321"  you would enter:
qwerty456321 
Screen Shot 2018-05-11 at 3.57.14 PM.png 37.7 KB View full-size Download


If you have a "Green Light" You should now be connected. 
mac oc final.png 33.4 KB View full-size Download