Biomedical Computing Group
Department of Biostatistics and Medical Informatics

vpn

Notice: As of August 15th, 2018 the UW VPN system will have transitioned to the new PaloAlto GlobalConnect platform. This will require all VPN connections to use a new VPN client on your laptop or home desktop. See below for additional information, or navigate to https://uwmadison.vpn.wisc.edu to get started.

 

If you are not connected by cable to the BMI network, you may need a VPN connection to get access to resources and services within Biostatistics. Global Protect Client Downloads from https://uwmadison.vpn.wisc.edu/global-protect/getsoftwarepage.esp

Types of VPN connections: Dynamic vs. Static

A Dynamic VPN connections use a dynamic IP address that is selected from a range of available numbers each time a connection is made. The range of numbers is known and recognized as being from campus, so you get the same access as you would get if you were sitting at a machine plugged into the network somewhere on campus (but not on the BMI network).

A Static VPN connection gives you the same IP address each time you use the VPN connection. This allows us to fine-tune your access to resources which allows for greater accessibility and security. You are able to request a Static IP address on your own, however the BCG must request the special access before it can be used.

Typical types of access and the type of connection required

Activity Static VPN Dynamic VPN Comment
Printing Y Y Only to shared printers
SSH connection Y N Y to adhara, mi1, and mi2, then from there ssh -Y to other servers
Connect to your desktop machine Y N Log onto adhara, mi1, or mi2, then from there ssh -Y to your desktop linux machine

The system adhara.biostat.wisc.edu is a BMI open login server available with any type of VPN connection (including dynamic) via ssh, and acts as the primary ssh gateway to the internal BMI network.

Getting Started with the VPN

Gaining Access to a VPN Connection

Request a Static VPN connection here

Any user in the University of Wisconsin system can use their NetID credentials to access a DynamicVPN connection

Setting up and Connecting with Your VPN Client

Global Protect Client (new change Aug 15 2018…)

MacOS

Global Protect Client – The existing client may request to be updated Global Protect Client –

 

New Login Screen –

More information about connecting Macs to BMI resources.

Global Protect client download: https://uwmadison.vpn.wisc.edu/global-protect/msi/GlobalProtect.pkg

Client configuration for dynamic IP address:
Server Address: uwmadison.vpn.wisc.edu
Account Name: NetID username

Client configuration for static IP address:
Server Address: uwmadison.vpn.wisc.edu
NetID username_1


native client – Dynamic VPN only, no static addresses are available in the native client

Server Address uwmadison.vpn.wisc.edu
Account Name netid
Authentication Settings…
Group Name vpnw1sc2002
Shared Secret vpnw1sc2002

 

Windows

Windows requires the PaloAlto GlobalConnect software to establish a VPN connection. Information on how to install, configure, and connect the AnyConnect software, see DoIT’s instructions here:

Once you have successfully connected to your StaticVPN, continue here to find more information. Windows system

If it’s not installed, download the client at
for 64-bit Windows (all the laptops we set up have 64-bit Windows)
or
for 32-bit Windows (which your home computer might have)

Right-click on the downloaded file and choose “Run as administrator” and let it install. In this case it will always load on bootup.

Check the running progams in the system tray on right-side of the taskbar by clicking on the up arrow to bring up the notification area. GlobalProtect looks like a little globe (not that you can really see any details) with a red X on it. That means it’s disconnected.

To log on, right-click the globe and choose Connect. If it asks if you want to update to the newest version, the answer is YES. After updating, it will bring you back to the Connect window. It should list uwmadison.vpn.wisc.edu as the Portal.

Just enter your netid_1 (or netid_2 for some of you) and your netID password. It will log you on with your static VPN IP.

If you want to check, right-click on the GlobalProtect icon in the system tray and choose Show Panel. In the Details tab, you will see what number it gave you. It should be a 146.151.xxx.xxx number.

To disconnect, right-click on the GlobalProtect icon in the system tray and choose Disconnect.

 

Linux

Linux requires – Palo Alto has released the production version of the VPN GlobalProtect client for linux. Please install and use this for VPN connectivity. The linux client is unsupported by DoIT.

 

Phones and Tablets

Requires the Global Protect client