Entrambe le parti precedenti la revisioneRevisione precedenteProssima revisione | Revisione precedenteUltima revisioneEntrambe le parti successive la revisione |
pub:conf-vpn-en [2016/02/12 10:45] – [Instructions for the new VPN UNITN service] m.fiorazzo@unitn.it | pub:conf-vpn-en [2019/11/05 09:34] – m.fiorazzo@unitn.it |
---|
|Linux|Pulse Secure|[[pub:conf-vpn-en#linux_pulse_secure_client|Pulse Secure Linux]]| | |Linux|Pulse Secure|[[pub:conf-vpn-en#linux_pulse_secure_client|Pulse Secure Linux]]| |
|Mobile devices (Smartphone & Tablet)|Pulse Secure|[[pub:conf-vpn-en#dispositivi_mobili|Pulse Secure Mobile]]| | |Mobile devices (Smartphone & Tablet)|Pulse Secure|[[pub:conf-vpn-en#dispositivi_mobili|Pulse Secure Mobile]]| |
| |
| **NEWS:** |
| The new version for linux (5.3r4.1) is 64bit native and provide a stable connection. |
| |
===== MACOSX, Windows (Pulse Secure) ===== | ===== MACOSX, Windows (Pulse Secure) ===== |
| |
^Junos Pulse Download^ | ^Pulse Secure Download^ |
|{{:pub:vpn:ps-pulse-mac-5.2r1.0-b227-installer.dmg|MACOSX (>= 10.6) Pulse Secure 5.2r1.0-b227}}| | |{{:pub:vpn:ps-pulse-win-5.3R7.0-b1933-64bitinstaller.msi|Windows 7/8/10 (64bit) Pulse Secure 5.3R7 (Jan 2019)}}| |
|{{:pub:vpn:ps-pulse-win-5.2r1.0-b227-32bitinstaller.msi|Windows XP, Vista and Windows 7/8/10 (32bit) Pulse Secure 5.2r1.0-b227}}| | |{{:pub:vpn:ps-pulse-win-5.3R7.0-b1933-32bitinstaller.msi|Windows 7/8/10 (32bit) Pulse Secure 5.3R7 (Jan 2019)}}| |
|{{:pub:vpn:ps-pulse-win-5.2r1.0-b227-64bitinstaller.msi|Windows XP, Vista and Windows 7/8/10 (64bit) Pulse Secure 5.2r1.0-b227}}|}} | |{{:pub:ps-pulse-win-5.0r15.1-b61501-32bitinstaller.msi|Windows Vista 32bit Pulse Secure 5.0R15}}| |
| |{{:pub:ps-pulse-win-5.0r15.1-b61501-64bitinstaller.msi|Windows Vista 64bit Pulse Secure 5.0R15}}| |
| |{{:pub:vpn:ps-pulse-mac-5.3R7.0-b1933-installer.dmg|MACOSX (> 10.10) Pulse Secure 5.3R7 (Jan 2019)}} (*)| |
| |{{:pub:vpn:ps-pulse-mac-5.3r3.0-b1021-installer.dmg|MACOSX (> 10.6) Pulse Secure 5.3R3}} (*)| |
| |{{:pub:vpn:ps-pulse-mac-9.1r3.0-b1313-installer.dmg|MACOSX Catalina Pulse Secure 9.1r3}} (*)| |
| |
For Mac and Safari: Warning !!! Be sure that your browser is saving the file with .dmg extension (and not .exe) as "pulse.dmg". \\ | For Mac and Safari: Warning !!! Be sure that your browser is saving the file with .dmg extension (and not .exe) as "pulse.dmg". \\ |
===== Linux Pulse Secure Client ===== | ===== Linux Pulse Secure Client ===== |
| |
**WARNING:** We are experiencing connection problems with the new Pulse Secure client for Linux, we are waiting for the support to resolve the issues, in the meanwhile we suggest you to use the Network Connect\\ [[pub:conf-vpn-en-old#using_the_network_connect_client_from_the_command_line_linux|Network Connect for Linux]] | **NEWS:** |
| The new version for linux (5.3r3) is 64bit native and provide a stable connection. |
| |
^Pulse Secure for Linux Download^ | ^Pulse Secure for Linux Download^ |
|{{:pub:vpn:ps-pulse-linux-8.1r7.0-b41041-centos-rhel-installer.rpm|Linux CentOS Pulse Secure 8.1r7.0-b41041}}| | |{{:pub:vpn:ps-pulse-linux-5.3r7.0-b919-centos-rhel-32-bit-installer.rpm|Linux CentOS 32bit Pulse Secure 5.3R7 (Jan 2019)}}| |
|{{:pub:vpn:ps-pulse-linux-8.1r7.0-b41041-ubuntu-debian-installer.deb|Linux Ubuntu (> 14.04) Pulse Secure 8.1r7.0-b41041}}| | |{{:pub:vpn:ps-pulse-linux-5.3r7.0-b919-ubuntu-debian-32-bit-installer.deb|Linux Ubuntu (> 14.04) 32bit Pulse Secure 5.3R7 (Jan 2019)}}| |
| |{{:pub:vpn:ps-pulse-linux-5.3r7.0-b919-centos-rhel-64-bit-installer.rpm|Linux CentOS 64bit Pulse Secure 5.3R7 (Jan 2019)}}| |
| |{{:pub:vpn:ps-pulse-linux-5.3r7.0-b919-ubuntu-debian-64-bit-installer.deb|Linux Ubuntu (<= 16.04) 64bit Pulse Secure 5.3R7 (Jan 2019)}}| |
| |{{:pub:vpn:ps-pulse-linux-9.0r3.0-b923-ubuntu-debian-64-bit-installer.deb|Linux Ubuntu (18.04) 64bit Pulse Secure 9.0R3 (Feb 2019)}}| |
| |{{:pub:vpn:ps-pulse-5.3r3-linux-quickstart-guide.pdf|Documentazione ufficiale client linux 5.3r3}}| |
| |
Download the package installer to the Linux client then run the installer using the following command: | Download the package installer to the Linux client then run the installer using the following command: |
| |
<code> | <code> |
sudo dpkg -i /$HOME/Downloads/ps-pulse-linux-8.1r7.0-b41041-ubuntu-debian-installer.deb | sudo dpkg -i /$HOME/Downloads/ps-pulse-linux-8.2r4.0-b47329-ubuntu-debian-installer.deb |
</code> | </code> |
| |
The script will prompt the user to install any missing dependent packages if they are not already installed (in this case libc6-i386 and lib32z1): | Install the dependencies: |
| |
<code> | <code> |
user@host:~$ sudo dpkg -i /$HOME/Downloads/ps-pulse-linux-8.1r7.0-b41041-ubuntu-debian-installer.deb | user@host:~$ sudo /usr/local/pulse/PulseClient.sh install_dependency_packages |
(Reading database ... 154703 files and directories currently installed.) | |
Preparing to replace pulse 8.1 (using | |
.../ps-pulse-linux-8.1r7.0-b41041-ubuntu-debian-installer.deb) ... | |
Unpacking replacement pulse ... | |
Setting up pulse (8.1) ... | |
Please execute below commands to install missing dependent packages | |
apt-get install libc6-i386 | |
apt-get install lib32z1 | |
Please refer /usr/local/pulse/README for instructions to launch the Pulse Client | |
</code> | </code> |
| |
You have to download the device certificate from the Secure Access server in DER format:\\ | if you want to launch the UI from a command line (/usr/local/pulse/pulseUi) you have to export this library path: |
**NB: this is has to be done only one time** | |
| |
<code> | <code> |
user@host:~$ openssl s_client -connect vpn-ssl.unitn.it:443 -showcerts < /dev/null 2> /dev/null | openssl x509 -outform der > /$HOME/Downloads/vpn-ssl.crt | export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/pulse |
</code> | </code> |
| |
You can also download the certificate from here {{:pub:vpn-ssl.zip|}} and unzip it with: | Or you can launch Pulse from your Applications by clicking on the Pulse icon. |
| |
<code> | - Main screen |
user@host:~$ unzip /%HOME/Downloads/vpn-ssl.zip | |
</code> | |
| |
Use the following command to launch the VPN client (you will be asked for the UniTN password): | {{:pub:vpn:pulseui-linux-1.png?200|}} |
| |
| - Create the connection: |
| |
| {{:pub:vpn:pulseui-linux-2.png?200|}} |
| |
| - Login: |
| |
| {{:pub:vpn:pulseui-linux-3.png?200|}} |
| |
| - Connection state: |
| |
| {{:pub:vpn:pulseui-linux-4.png?200|}} |
| |
| If you don't want to use the UI, use the following command to launch the VPN client (you will be asked for the UniTN password): |
<code> | <code> |
/usr/local/pulse/PulseClient.sh -h vpn-ssl.unitn.it -u nome.cognome@unitn.it -f /$HOME/Downloads/vpn-ssl.crt -U https://vpn-ssl.unitn.it -r AR-unitn-ldap-ad | /usr/local/pulse/PulseClient.sh -h vpn-ssl.unitn.it -u nome.cognome@unitn.it -U https://vpn-ssl.unitn.it -r AR-unitn-ldap-ad |
</code> | </code> |
| |
| |
<code> | <code> |
user@host:~$ /usr/local/pulse/PulseClient.sh -h vpn-ssl.unitn.it -u username@unitn.it -f /$HOME/Downloads/vpn-ssl.crt -U https://vpn-ssl.unitn.it -r AR-unitn-ldap-ad | user@host:~$ /usr/local/pulse/PulseClient.sh -h vpn-ssl.unitn.it -u username@unitn.it -U https://vpn-ssl.unitn.it -r AR-unitn-ldap-ad |
Reading package lists... Done | Reading package lists... Done |
Building dependency tree | Building dependency tree |
libc6-i386 is already the newest version. | libc6-i386 is already the newest version. |
0 upgraded, 0 newly installed, 0 to remove and 557 not upgraded. | 0 upgraded, 0 newly installed, 0 to remove and 557 not upgraded. |
executing command : /usr/local/pulse/pulsesvc -h vpn-ssl.unitn.it -u username@unitn.it -f /$HOME/Downloads/vpn-ssl.crt -U https://vpn-ssl.unitn.it -r AR-unitn-ldap-ad | executing command : /usr/local/pulse/pulsesvc -h vpn-ssl.unitn.it -u username@unitn.it -U https://vpn-ssl.unitn.it -r AR-unitn-ldap-ad |
VPN Password: | VPN Password: |
</code> | </code> |
user@host:~$ /usr/local/pulse/PulseClient.sh -K | user@host:~$ /usr/local/pulse/PulseClient.sh -K |
</code> | </code> |
| |
References - official documentation:\\ https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40126/?q=linux&l=en_US&fs=Search&pn=1&atype= | |
| |
===== Mobile Devices ===== | ===== Mobile Devices ===== |