A VPN (virtual private network) connection allows a user to connect to UCAR and CGD resources in a secure and transparent manner. Using the VPN, you can connect to UCAR and CGD resources from basically anywhere.
Using the VPN is very simple. All you need is an Internet connection, and DUO enabled CIT account. Once you are on the Internet, be it wireless, or wired, you launch the client on your system, it contacts UCAR, and requests that you authenticate with DUO. After you are authenticated, you can use resources on the CGD or UCAR network as if you were sitting at your desk at the Mesa.
Requirements
- DUO
- A system compatible with GlobalProtect:
Download
Note
If you are using a system provided by IT, you may already have this application downloaded and installed.
For Mac systems provided by IT, you can download the VPN by opening the Self Service application and searching for GlobalProtect.
For Windows systems provided by IT, you can download the VPN by opening the Software Center application under Start > Microsoft Endpoint Manager and searching for GlobalProtect.
You can download GlobalProtect clients for Windows or Mac by going to https://gp.ucar.edu and signing in with your CIT credentials. You'll need to authenticate with yubikey/DUO.
If you need an installer for Linux, submit a ticket.
For other compatible devices running Android, iOS, iPadOS, or Chrome OS: a GlobalProtect app can be downloaded from the app store.
Installation
- Run the downloaded installer and follow the prompts
- When you first attempt to connect, you will be asked for a portal address, enter "gp.ucar.edu"
- Verify you are connected to a wired or wireless network with internet access.
- Click the GlobalProtect icon in your menubar. If you don't see it as shown below, you may need to open the GlobalProtect application first.
- Click connect from the GlobalProtect menubar dropdown
- Enter your CIT Credentials then click connect
- Approve the DUO notification from your phone
- You are connected
- Verify you are connected to a wired or wireless network with internet access.
- Click the GlobalProtect icon in your taskbar. If you don't see it as shown below, you may need to open the GlobalProtect application from the Start Menu first.
- Click connect from the GlobalProtect application pop-up menu.
- Enter your CIT Credentials then click connect
- Approve the DUO notification from your phone
- You are connected
- A notification window will automatically open once you're connected. Please read through the policy and click the X in the upper right-hand corner to acknowledge the notice.
Problems
In some instances, the VPN may not connect. If you can get to the Internet, but you can't get the VPN client to connect, you can still SSH to a CGD perimeter system and access resources through that host. For more information, check CGD Perimeter Hosts.