Using OpenConnect viathe GNOME desktop-manager

GNOME NetworkManager Configuration

Open the GNOME System Settings Window and scroll down to the "Network" icon.

On the Network Screen, click the + icon to add the TRIUMF VPN Connection

If you've installed the required OpenConnect packages, you'll be provided with the option to use OpenConnect for your VPN connection. In this example the OpenConnect option is labelled the Multi-protocol VPN Client. The label may be slightly different on your system, but there should be some mention of openconnect.

Configure OpenConnect to connect to TRIUMF VPN. On this window you should select:

• Make available to other users: Checked
• VPN Protocol: Juniper Network Connect
• Gateway: vpn.triumf.ca
• Token Mode: TOTP

Activating a VPN Connection

Use your TRIUMF email-address as the username. After providing your password, you should be prompted for your multi-factor authentication one-time password.

Continue by clicking Login again.

Notes

On some setups, you may need to repeat a click on the Login button after supplying credentials and your one-time password. It's unclear why this is needed, but the login seems to continue successfully after the extra clicks are added. If you need to repeat the login click, your login dialog will unblur the login button and the credentials field should be blank and simply say "loginForm" or "hiddenForm".

Example

nm-applet (Network Manager Applet)

This option usually appears in your task menu and will look similar to: or

If nm-applet is available to you, you can configure your TRIUMF VPN connection by clicking on it, selecting "VPN Connections" -> "Add a VPN connection":

Once you've selected to add a VPN connection, the steps are similar to the GNOME Network Manager steps above. First, select the Juniper Open Connect option:

On the next page fill out the relevant values for gateway and your desired MFA OTP option:

Once you've created your VPN connection, you should find the VPN option under the "VPN Connections" section in nm-applet. Click on it and you should be able to proceed through the login process as is described in the Activating a VPN Connection.