VPN using the OpenConnect Client

Note: You need to setup two factor authentication before using SCINet VPN. Follow the instructions here.

Note 2: The SCINet VPN address recently changed to: ocvpn.scinet.usda.gov

These instructions are for the open source OpenConnect clients from: http://www.infradead.org/openconnect/

These instructions are for the GUI versions of the installers. There are command line versions available as well, but those are not covered here.

Installation for Windows

Download the OpenConnect Windows Client from here: https://github.com/openconnect/openconnect-gui/releases

Installation for Unix

Download and installation instructions for assorted UNIX variants are here: http://www.infradead.org/openconnect/packages.html

Installation for OSX

The OpenConnect GUI client for OSX is available via MacPorts. Please follow the links on that site to install MacPorts (This involves installing and configuring Xcode for command line support from the apps store as well) . After you have MacPorts working on your system you need to run:

This will take a few minutes.

Configuring and running on Windows

Open the client and click the “Edit connection details” button as shown below.

for Gateway enter:

and click [Save & Connect]

Enter your SCINet Username

Enter your password with your GA 6-digit code appended to the end. For example if your password is “qwerty” and your GA app is showing “456321” you would enter:

The “Green Lock” indicates that you should now be connected.

You can also see the connection status in the system tray

Configuring and running on OSX

After installation openconnect-gui will appear on your Applications menu under “MacPorts”.

However this will not work as the the VPN need to run with elevated privileges.

To run open a terminal and use:

After opening the client enter ocvpn.scinet.science and click [Connect]

Enter your SCINet username.

Enter your password with your GA 6-digit code appended to the end. For example if your password is “qwerty” and your GA app is showing “456321” you would enter:

If you have a “Green Light” You should now be connected.