How to Configure a Built-in VPN Client for Linux (2024)

Overview

Stanford's VPN allows you to connect to Stanford's network as if you were on campus, making access to restricted services possible.

Two types of VPN are available:

• Default Stanford (split-tunnel). When using Stanford's VPN from home, we generally recommend using the Default Stanford split-tunnel VPN. This routes and encrypts all traffic going to Stanford sites and systems through the Stanford network as if you were on campus. All non-Stanford traffic proceeds to its destination directly.
  
• Full Traffic (non-split-tunnel). This encrypts all internet traffic from your computer but may inadvertently block you from using resources on your local network, such as a networked printer at home. If you are traveling or using Wi-Fi in an untrusted location like a coffee shop or hotel, you may wish to encrypt all of your internet traffic through the Full Traffic non-split-tunnel VPN to provide an additional layer of security.

You can select thy type of VPN you want to use each time you connect to the Stanford VPN.

Install the OpenConnect client

• On Debian-compatible distributions (including Ubuntu), install the network-manager-openconnect-gnome package.
• On RedHat-compatible distributions (including Fedora and CentOS), install NetworkManager-openconnect-gnome.

Set up a new VPN interface

1. In System Settings, open the Network panel and click the + button to create a new interface.
2. 
3. On Ubuntu, select VPN from the list of interface types and click Create.
   
4. Select the Cisco AnyConnect Compatible VPN connection type (and, on Ubuntu, click Create).
   
5. Choose a name for the connection (e.g., Stanford) and set the Gateway tosu-vpn.stanford.edu. Then, click Add (or Save).
   ​

Connect to the Stanford VPN

1. In the Network panel, turn thenew interface on.
   • On Ubuntu, in the System menu you may also click the Network iconselect the new interface from the list of VPN Connections.
   • On Fedora, in the System menu you may choose VPN Off and click Connect.
2. In the Connect to VPN dialog box, enter the following information and then click Login.
   • GROUP: select Default Stanford split- tunnelorFull Traffic non-split-tunnel
   • Username: your SUNet ID
   • Password: your SUNet ID password

   

3. Complete the two-step authentication.