<?xml version="1.0"?>
<api>
  <query-continue>
    <allpages gapcontinue="Remote_Resources" />
  </query-continue>
  <query>
    <pages>
      <page pageid="383" ns="0" title="Remote Access &amp; VPN">
        <revisions>
          <rev contentformat="text/x-wiki" contentmodel="wikitext" xml:space="preserve">In the interest of security, Remote Desktop Protocol (RDP) and Secure SHell (SSH) connections made to our resources from outside of the campus network are blocked, with a couple exceptions noted below. Such connections can still be established by being on our VPN. This page is intended to provide information on how to connect to the VPN.

== Remote Access Policy ==
Inbound RDP and SSH access are restricted to all resources.

RDP/ SSH connections will not be blocked if they originate anywhere on campus. 
Besides the caveats mentioned above, remote access to all servers/workstations will require that a connection be established to our VPN first.

== VPN ==
Our VPN is available to Students, Faculty, and Staff. Some guest accounts are not initially granted VPN access. If such guest access is required, send an email to [mailto:root@cs.odu.edu root@cs.odu.edu] and CC the head of the research group you are associated with for confirmation.


'''Windows, MacOS, and Linux Users'''
 
[https://systems.cs.odu.edu/images/6/6c/CS_Forticlient_VPN.pdf Instructions for connecting to the VPN]  

==Connecting Printers (MacOS)==
Below is a guide for setting up connection to printers once connected through a VPN connection.

[https://systems.cs.odu.edu/images/4/47/Mac_Printing.pdf Instructions for connecting a printer while using MacOS and connected to VPN]

== FAQ ==
&quot;After establishing a connection to the GlobalProtect VPN on Windows, the new VPN network shows up as unidentified/unknown. Why?&quot;
*The GlobalProtect VPN doesn't assign a default gateway as it isn't needed. Windows determines networks with no default gateway set to be unidentified/unknown by default. This is expected behavior.
*https://blogs.technet.microsoft.com/networking/2009/02/20/why-is-my-network-detected-as-unknown-by-windows-vista-or-windows-server-2008/

&lt;!--

Out of date information

== Known GlobalProtect Issue on MacOS 10.13.x (High Sierra)==
There is a known issue with using GlobalProtect 4.1.x on MacOS.

=== The Issue ===
After installing the current GlobalProtect client application on MacOS High Sierra, GlobalProtect will prompt for a portal address. After entering the address, it will automatically attempt to connect to the specified address without ever prompting for credentials first, causing the connection to never complete.

The reason this happens is because GlobalProtect uses unsigned kernel extensions, and MacOS does not allow kernel extensions from untrusted sources.

=== The Fix ===
To fix this issue, please follow the steps below, or send an email to root@cs.odu.edu.

1) Uninstall GlobalProtect using the installer

2) Reboot the Mac into recovery mode by pressing &quot;Command + R&quot; when it is powering back on

3) Open a terminal from the menu at the top, under the &quot;Utilities&quot; tab, and enter this command:

  $ spctl kext-consent add PXPZ95SK77

4) Boot regularly into MacOS

5) Re-install GlobalProtect
--&gt;</rev>
        </revisions>
      </page>
      <page pageid="448" ns="0" title="Remote Access for Z Drives">
        <revisions>
          <rev contentformat="text/x-wiki" contentmodel="wikitext" xml:space="preserve">As noted [[Windows Z Drive| here]], all faculty, staff, and students have a network storage share allocated for their CS account. These drives are seamlessly integrated on Computer Science desktops and servers, but to access them at home some extra steps must be taken.

== Windows ==
# Connect to the CS VPN. Instructions on doing so can be found [[Remote Access &amp; VPN | here]].
# Open Windows File Explorer either by right clicking the “Start” button and selecting “File Explorer” or by pressing &lt;code&gt;⊞WIN + E&lt;/code&gt;
# Right click “This PC” and select “Map network drive…”
#:[[File:Windows-Z_Drive-Step_1.png | border]]
#:&lt;br&gt;
# Type the network path (folder) of your drive, select “Connect using different credentials,” and click “Finish.” If you don’t know the network path of your drive, see the table below. Be sure to replace “username” with your CS username: 
#:[[File:Windows-Z_Drive-Step_2.png | border]]
#: &lt;br&gt;
# Enter your CS account credentials with the username prepended by “cs\” and click “OK” 
#:[[File:Windows-Z_Drive-Step_3.png | border]]
#: &lt;br&gt;
# Your Z drive should now be connected. Note that it will not be available if you disconnect from the VPN.
#:[[File:Windows-Z_Drive-Step_4.png | border]]
#: &lt;br&gt;

== Linux ==
==== SSHFS ====
Using SSHFS does not require the VPN if you are using our public Linux servers as the host.
# Install &lt;code&gt;sshfs&lt;/code&gt; from your distribution's package manager
# Create a directory to mount the share over:
#: &lt;pre&gt;$ mkdir ~/zdrive&lt;/pre&gt;
# Mount the share; rather than a network path, SSHFS uses the format &lt;code&gt;username@host:/path/to/folder&lt;/code&gt;. For example:
#: &lt;pre&gt;$ sshfs $YOUR_USERNAME@linux.cs.odu.edu:/home/$YOUR_USERNAME ~/zdrive&lt;/pre&gt;
#: Be sure to replace &lt;code&gt;$YOUR_USERNAME&lt;/code&gt;.
#: &lt;br&gt;
# To unmount the share:
#: &lt;pre&gt;$ fusermount -u ~/zdrive&lt;/pre&gt;

==== CIFS ====
Note that this method will require super user privileges. If you are not a privileged user, see SSHFS above.
# Connect to the CS VPN. Instructions on doing so can be found [[Remote Access &amp; VPN | here]].
# Install the &lt;code&gt;cifs-utils&lt;/code&gt; package from your distribution's package manager
# Create a directory to mount the share over:
#: &lt;pre&gt;$ sudo mkdir /media/zdrive&lt;/pre&gt;
# Mount the share using your network path from the table below. For example:
#: &lt;pre&gt;$ sudo mount -t cifs -o username=$YOUR_USERNAME,uid=$YOUR_UID //cifs-dgs.cs.odu.edu/Undergrad/username /media/zdrive&lt;/pre&gt;
#: Be sure to replace &lt;code&gt;$YOUR_USERNAME&lt;/code&gt; and &lt;code&gt;$YOUR_UID&lt;/code&gt;.
#: &lt;br&gt;
# To unmount the share:
#: &lt;pre&gt;$ sudo umount /media/zdrive&lt;/pre&gt;

== MacOS ==
# Connect to the CS VPN. Instructions on doing so can be found [[Remote Access &amp; VPN | here]].
# From the Go menu/ Mac OS X Finder, select &quot;Connect to Server&quot;
# Type in your unix network path from the table below prepended by &lt;code&gt;smb:&lt;/code&gt;. For example:
#: &lt;pre&gt;$ smb://cifs-dgs.cs.odu.edu/Undergrad/$YOUR_USERNAME&lt;/pre&gt;
#: Be sure to replace &lt;code&gt;$YOUR_USERNAME&lt;/code&gt;.

== Network paths ==
Be sure to replace &quot;username&quot; with your computer science username.
{| class=&quot;wikitable&quot; style=&quot;width:800px; border:0px;&quot;
|-
! Account type !! Windows network path !! Unix network path
|- 
| Undergraduate || \\cifs-dgs.cs.odu.edu\Undergrad\&lt;code&gt;username&lt;/code&gt; || //cifs-dgs.cs.odu.edu/Undergrad/&lt;code&gt;username&lt;/code&gt;
|-
| Graduate || \\cifs-ecs.cs.odu.edu\Grad\&lt;code&gt;username&lt;/code&gt;|| //cifs-ecs.cs.odu.edu/Grad/&lt;code&gt;username&lt;/code&gt;
|-
| Staff || \\cifs-dgs.cs.odu.edu\Staff\&lt;code&gt;username&lt;/code&gt;|| //cifs-dgs.cs.odu.edu/Staff/&lt;code&gt;username&lt;/code&gt;
|-
| Faculty || \\cifs-ecs.cs.odu.edu\Faculty\&lt;code&gt;username&lt;/code&gt;|| //cifs-ecs.cs.odu.edu/Faculty/&lt;code&gt;username&lt;/code&gt;
|}</rev>
        </revisions>
      </page>
    </pages>
  </query>
</api>