/
Out of campus access

Out of campus access

We expect some people will want to access the Research Compute Hub (RCH) from the comfort of their homes or while they are visiting colleagues in other institutions or under other circumstances when off campus. Out of campus access to the RCH is similar to out off campus access of internal UC resources and requires two factors authentication.

VPN access to the campus network

Requesting access

The easiest way is to request basic VPN to the campus network. 

  1. login in ServiceNow the UC request system with your usual username and password by following this link. This will bring you directly to the correct form once logged in.

  2. In the form, in the menu called "Which area does this query relate to?" select "access"

  3. fill the field called  "What is your query?" with (you can cut and paste and replace abc123 with your usercode )

    I want to be able to connect to Research Compute Hub (RCH) from outside the university. Please setup a Remote Access account for my username - "abc123" with VPNBasic I would like my One-Time-Password method set to use a Authenticator app.

  4. Hit submit and someone should take care of you.

Note that while the request is for google authenticator, you can actually use another authenticator (Microsoft for example). The basic functionality (code) is application agnostic, setting to "click" instead of using code is not.

A note on authenticator app. The University of Canterbury is moving to the Microsoft Authenticator App as part of the MFA enhancement project. It would be best to set up this app and use it as this will be the only option going forward.

Using the VPN

Once your VPN access has been set up you can start a VPN session by pointing your browser to go.canterbury.ac.nz and following the instructions. Once logged in select "VPNBasic". Note that the below says Server VPN but it would be VPNBasic for higher degree researchers. For Staff, this will be “Full VPN.”

Now you can directly ssh in the RCH or open the ondemand.canterbury.ac.nz portal. 

Helper application

You will be prompted to install a helper application the first time. After clicking on the VPN option you will get a prompt to open the F5 application, when it is not found, some menu with options deemed appropriate to your OS will be presented to you (see image below in the case of Linux). After completing the install you will be able to connect to the VPN. You may have to login again as your initial connection may have timed out.

UC issued laptop

You need to have administrative rights to install and configure the VPN application. If you have a UC issued laptop for which you don't have administrative right, seek help of someone who does to set it up. You won't be able to have off campus access otherwise.

SSH access

ssh.canterbury.ac.nz

We now have a Digital Services backed ssh gateway at ssh.canterbury.ac.nz request for access is currently by email to eresearch@canterbury.ac.nz. Access is with your usual UC usercode, password and second factor. The typical ssh command is as follow

ssh command
ssh myusercode@ssh.canterbury.ac.nz

Can I use a ssh key to login on the gateway?

No. And I really mean no, not "well, we can make it work that way by ...". The setup actually prevents the use of ssh key for login on ssh.canterbury.ac.nz. The technical reason is that your home directory - which holds your key - is not accessible until you are identified.

Random ssh advice

ssh key in putty format (.ppk on windows)

Follow those handy instructions on converting your key into the right format from putty https://www.simplified.guide/putty/convert-ppk-to-ssh-key