How to connect to UQ servers with VPN from Linux (Ubuntu)

Connecting to UQ servers

Once everything is setup (see below), these steps lead to ssh-ing to a UQ server:

• $ /opt/cisco/anyconnect/bin/vpnui
  • connect to vpn.uq.edu.au
  • authenticate with UQ login in the browser
  • verify 2FA with Duo
• ssh cmuq

Prerequisities

• A UQ login (with a multi-factor authentication).
• Palo Alto Networks GlobalProtect Client (or GlobalProtect openconnect),
• Cisco AnyConnect Secure Mobility Client,
• A server with your SSH key enabled.

There is some useful info on the UQ VPN help page.

For MFA I am using Duo App.

~/.ssh/config

Host cmuq
    HostName <your-server-hostname>
    IdentityFile ~/.ssh/<your-ssh-key>
    User <your-username>

AnyConnect

You need to install the client which is available for download using the UQ login.
The client is not freely available.

Info about the installation under Linux.

1. Login here,
2. download it from here (your OS is detected and the link is probably generated).
3. Install the .sh script with sudo.

$ sudo bash anyconnect-linux64-4.10.05111-core-vpn-webdeploy-k9.sh
[sudo] password for █████:
Installing Cisco AnyConnect Secure Mobility Client...
Extracting installation files to /tmp/vpn.2ERvUI/vpninst421920656.tgz...
Unarchiving installation files to /tmp/vpn.2ERvUI...
Starting Cisco AnyConnect Secure Mobility Client Agent...
Done!
Exiting now.

4. Run it /opt/cisco/anyconnect/bin/vpnui
5. Use vpn.uq.edu.au address.
6. Continue in the browser.
7. Now you are in a VPN.