Connecting to SBU Computer Science Palo Alto Network GlobalProtect Gateway from Debian

The following documentation is based on Ubuntu 9.3.0

Install the vpnc package on your system:

root@debian:/home/xxx# apt-get install vpnc
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
vpnc-scripts
Suggested packages:
resolvconf dnsmasq
The following NEW packages will be installed:
vpnc vpnc-scripts
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 95.6 kB of archives.
After this operation, 271 kB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://ftp.us.debian.org/debian stretch/main amd64 vpnc-scripts all 0.1~git20160829-1 [12.4 kB]
Get:2 http://ftp.us.debian.org/debian stretch/main amd64 vpnc amd64 0.5.3r550-3 [83.1 kB]
Fetched 95.6 kB in 0s (758 kB/s)
Selecting previously unselected package vpnc-scripts.
(Reading database ... 133078 files and directories currently installed.)
Preparing to unpack .../vpnc-scripts_0.1~git20160829-1_all.deb ...
Unpacking vpnc-scripts (0.1~git20160829-1) ...
Selecting previously unselected package vpnc.
Preparing to unpack .../vpnc_0.5.3r550-3_amd64.deb ...
Unpacking vpnc (0.5.3r550-3) ...
Setting up vpnc-scripts (0.1~git20160829-1) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up vpnc (0.5.3r550-3) ...

Connect to CS VPN. You will be prompted for 2 sets of credentials.
IPsec ID: cs_mobile
IPSec secret: mobile

vpn.cs.stonybrook.edu: Use your Computer Science Active Directory user ID and password

Execute vpnc:
root@debian:/home/xxx# sudo vpnc
Enter IPSec gateway address: vpn.cs.stonybrook.edu ;
Enter IPSec ID for vpn.cs.stonybrook.edu: cs_mobile
Enter IPSec secret for cs_mobile [at] vpn.cs.stonybrook.edu:
Enter username for vpn.cs.stonybrook.edu: cs\{your CS Active Directory user ID}
Enter password for cs\xxx [at] vpn.cs.stonybrook.edu:
VPNC started in background (pid: 26186)...

Verify your VPN connection. The tun0 interface information shows your
CS VPN IP address provided by the Palo Alto Global Protect Gateway.

$ root@debian:/home/xxx# ip a
3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1412
qdisc pfifo_fast state UNKNOWN group default qlen 500
    link/none
    inet 130.245.76.9/32 scope global tun0
       valid_lft forever preferred_lft forever
    inet6 fe80::3a9e:2cbd:3360:5215/64 scope link flags 800
       valid_lft forever preferred_lft forever

Disconnecting VPN connection:

$ sudo vpnc-disconnect