Connecting to VPN (Linux)

Tags vpn linux

Getting the VPN client

Deb-based distributions (Ubuntu, Debian, etc.)

To download and install the .deb-based client, enter the commands:

wget https://vpn.mtu.edu/public/share/BigIP_Edge_Clients/linux_f5cli.x86_64_7250.deb
sudo apt-get update -y sudo apt install ./linux_f5cli.x86_64_7250.deb

RPM-based distributions (RedHat, CentOS, Fedora, etc.)

To download and install the .rpm-based client, enter the commands:

wget https://vpn.mtu.edu/public/share/BigIP_Edge_Clients/linux_f5cli.x86_64_7250.rpm
sudo dnf localinstall ./linux_f5cli.x86_64_7250.rpm

ARM distributions (Ubuntu, Debian, ARCH, etc.)

To download and install the .deb-based client, enter the commands:

wget https://vpn.mtu.edu/public/share/BigIP_Edge_Clients/linux_f5cli.armhf_7250.deb
sudo apt-get update -y ​​​​​​​sudo apt install ./linux_f5cli.armhf_7250.deb

Additional way to get the VPN

Go to https://vpn.mtu.edu and log in with your MTU account name and password. Select the version you wish to download.

Using the VPN client (graphical)

Steps to Connect

  1. Launch your preferred web browser (Firefox, Chrome, etc.)
  2. Navigate to the MTU VPN Portal.
  3. In the address bar, go to: https://vpn.mtu.edu
  4. In the Secure Log on window, enter your MTU credentials (ISO account name and password) to access the VPN page.
  5. After logging in, select Access MTU Network 111 from the Network Access dropdown menu. A new window will open with the details on connecting to the VPN. Note: If your browser blocks pop-ups, you may need to click the Open Link button at the top of the browser.
  6. Once connected, you can verify the connection by checking the VPN window. It should display a successful connection message.

Disconnecting from the VPN

You can disconnect from the VPN by either:

  • Select the Disconnect button in the VPN window, or
  • Log out of the machine, which will automatically disconnect your session.

Using the VPN client (CLI)

Note: The VPN client does not automatically disconnect upon logging out. If more than one person uses your machine, it is highly recommended that you disconnect when you are done using the VPN. Others who log in after you can use your VPN connection if you do not disconnect from the VPN.

Starting Connection

Enter the command:

f5fpc --start --host https://vpn.mtu.edu --user <MTU_SSO>

If you get a “Server certificate verification failed” error, you should add the -x flag before the --user flag.
f5fpc --start --host https://vpn.mtu.edu -x --user <MTU_SSO>

Checking VPN status

Enter the command: f5fpc --info

Disconnecting

Enter the command: f5fpc --stop

Troubleshooting and common considerations

VPN stands for Virtual Private Network, allowing you to create a secure connection to another network over the Internet. MTU requires the BigIP VPN Client from F5. To print to a campus printer when off-campus, BigIP VPN is required. With all things Linux, the client depends on your OS.

DNS Manual Setup

In some cases, connecting to the VPN from a non-Michigan Tech or personal machine will cause issues accessing resources in Multidrive or other places on campus. For example, you may have problems listing out files in your Multidrive.

To fix these issues you will need administrator (sudo) access on your machine. If your machine uses systemd-resolved you can use the following commands to add the DNS servers when you are connected to the campus VPN:

sudo resolvectl domain tun0 mtu.edu
sudo resolvectl dns tun0 141.219.70.130

If your machine does not use systemd-resolved to configure its DNS servers, you may need to manually add the campus’ DNS servers based on your Linux distribution. You should review the documentation for your distribution.

DNS Conflicts

The VPN adjusts your routes and DNS configurations while connected, which can sometimes cause DNS issues. This is likely related to how the VPN makes those adjustments on your local device. To resolve this, ensure all connections are closed, change your DNS configuration to any DNS server that is not 1.1.1.1, and attempt to reconnect.

File Interactions

Some files may be interacted with when the VPN client begins its initialization process. This list is subject to change by the upstream provider:

  • /etc/nsswitch.conf
  • /etc/host.conf
  • /etc/resolve.conf
  • /etc/hosts
  • /tmp/f5Standalone.lock
  • $HOME/.F5Networks/f5networks.conf
  • $HOME/.F5Networks/standalone.log
Print Article

Related Articles (4)

This article explains how to connect to your Multidrive from a computer running Linux.
Instructions for connecting to M: multidrive on a fully managed Linux machine (command line)
Instructions for installing and running the VPN client on a Windows computer
Using X Forwarding to run graphical programs on a remote Linux machine through an SSH connection.