NTU VPN Guide¶

NTU VPN service allows you to access internal resources and services when you are off campus. This guide will help you set up and use the VPN service. If you have any questions, please contact NTU IT Support: NTU IT Service Portal.

1. Prerequisites¶

• NTU network account
• GlobalProtect VPN client

2. Download GlobalProtect¶

You can download the official NTU VPN client from:

• Download Portal

3. VPN Access Requirements¶

Some NTU internal systems require VPN access, while others don't. Please refer to the table below:

4. Setup Steps¶

1. Download and install GlobalProtect VPN client.
2. Launch GlobalProtect.
3. Click the GlobalProtect icon and select "Settings".
4. Enter in the Portal field: vpngate-student.ntu.edu.sg.
5. Click "Connect".
6. Enter your credentials:
   • Username: Your NTU network account username
   • Password: Your NTU network account password
7. Complete Two-Factor Authentication (2FA):
   • You will be prompted for a 2FA code during login.
   • The code will be sent to your registered mobile device.
   • Confirm the 2FA request on your phone to complete the VPN login.

5. Common Issues¶

5.1 Connection Failed¶

If you cannot connect to VPN, try these steps:

1. Check your internet connection.
2. Verify your network account credentials.
3. Ensure the portal address is correct (vpngate-student.ntu.edu.sg).
4. Try restarting the GlobalProtect client.
5. If still unable to connect, contact NTU IT Support.

5.2 Slow Connection¶

If your VPN connection is slow, you can try:

1. Connect to a different Wi-Fi or network.
2. Close applications that consume large amounts of network bandwidth.
3. Ensure your network environment is stable.

6. VPN Process Management¶

GlobalProtect processes do not provide a manual exit button. To prevent them from running in the background, you can use the following scripts to manage the VPN processes.

#!/bin/bash
# MacOS VPN Management Script
start_gp() {
    echo "Starting GlobalProtect..."
    launchctl load -w /Library/LaunchAgents/com.paloaltonetworks.gp.pangp*
    echo "GlobalProtect started successfully."
}

stop_gp() {
    echo "Stopping GlobalProtect..."
    launchctl unload -w /Library/LaunchAgents/com.paloaltonetworks.gp.pangp*
    pkill -f "/Applications/GlobalProtect.app/Contents/MacOS/GlobalProtect"
    echo "GlobalProtect stopped successfully."
}

if [ "$1" == "start" ]; then
    start_gp
elif [ "$1" == "stop" ]; then
    stop_gp
else
    echo "Usage: $0 {start|stop}"
    exit 1
fi

@echo off
REM Windows VPN Management Script
if "%1"=="start" (
    echo Starting GlobalProtect...
    sc config PanGPS start=demand
    net start PanGPS
    echo GlobalProtect started successfully.
) else if "%1"=="stop" (
    echo Stopping GlobalProtect...
    sc config PanGPS start=disabled
    net stop PanGPS
    taskkill /IM PanGPS.exe /F
    taskkill /IM GlobalProtect.exe /F
    echo GlobalProtect stopped successfully.
) else (
    echo Usage: %0 {start|stop}
)

7. Starting and Stopping VPN¶

You can use the scripts to start and stop the VPN connection. After starting the background process with the script, click the GlobalProtect icon to run the VPN.

./global-protect-macos.sh start

./global-protect-macos.sh stop

global-protect-windows.bat start

global-protect-windows.bat stop