Engineering-Tech Wiki

User Tools

Site Tools

You are here: start » auth » howto » linux » vpnclient
Trace:
auth:howto:linux:vpnclient

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
Next revisionBoth sides next revision
auth:howto:linux:vpnclient [2006/08/21 16:06] – kohoferauth:howto:linux:vpnclient [2016/02/08 10:15] – apano
Line 1: Line 1:
-===== VPN (Virtual Private Network) at the Free University of Bolzano/Bozen =====+====== VPN (Virtual Private Network) at the Free University of Bolzano/Bozen and EURAC ======
  
-==== Infos regarding the usage of VPN ====+===== Infos regarding the usage of VPN =====
  
-http://www.unibz.it/ict/vpn/index.html?LanguageID=EN+http://www.unibz.it/en/ict/ComputerInternet/network/vpn/default.html
  
 +==== Instructions for Windows 7 - 32bit and 64bit ====
  
-==== Instructions for Windows 98, ME, NT 4.0, 2000 and XP ==== +http://www.unibz.it/en/ict/ComputerInternet/network/vpn/InstallationWindows.html
-http://www.unibz.it/ict/vpn/win/index.html?LanguageID=EN+
  
-==== Instructions for MacOS X 10.2-10.4 ==== +==== Instructions for MacOS X ====
-http://www.unibz.it/ict/vpn/mac/index.html?LanguageID=EN+
  
-==== Instructions for Linux ====+We recommend to download and install [[https://itunes.apple.com/en/app/cisco-anyconnect/id392790924?mt=8|Cisco AnyConnect]] from Apple Store for iOS and connect via Browser to https://vpn.scientificnet.org for Mac OSX
  
-1. Download and install the kernel headers corresponding to the kernel in use. Some distributions name this package kernel-headers, others name it linux-headers:+=== Unsupported Instructions for MacOS X  and iOS - use at own risk! ===
  
-    # sudo apt-get install kernel-headers-X.X.XX-X-XXX +Download, unpack (doubleclick), then doupleclick the unpacked file to install it:
-or +
-    # sudo apt-get install linux-headers-X.X.XX-XXX+
  
-Substitute the notation X.X.XX with the actual version of your kernel. +{{:auth:howto:linux:vpn-scientificnet.org.networkconnect.zip|}}
-You can get the version of your kernel by issuing the following command:+
  
-    # uname -a+Under Network settings a new item should appear:
  
-A valid version number could be, for example, 2.6.12-9-386.+  * VPN (IPSec) 
 +  * change username to your username 
 +  * click Connect and enter your password
  
-2. Download and install the vpnclient:+=== Uninstalling if installation is corrupt in MacOSx ===
  
-Substitute the notation X Z with your university network's username and password:+Uninstallation has to be done by running this command on terminal:
  
-wget --no-check-certificate --http-user=X --http-password=Z https://pro.unibz.it/vpn/Linux/vpnclient-linux-x86_64-4.8.00.0490-k9.tar.gz+sudo /opt/cisco/vpn/bin/vpn_uninstall.sh
  
 +Should the uninstallation or reinstallation be corrupt, run this command on terminal: 
  
-3. Untar the source of vpnclient and install it. +sudo pkgutil --forget com.cisco.pkg.anyconnect.vpn
-   Depending on the Linux Distribution you might need to install ''make'' and ''gcc-3.4'' +
-   apt-get install make gcc-3.4+
  
-    # tar xfz vpnclient-linux-4.7.00.0640-k9.tar.gz 
-      
-    # cd vpnclient 
-     
-    # ./vpn_install 
  
-You will get some messages and you will be requested to answer to some questions:+=== Instructions for iOS 9 ===
  
-    Directory where binaries will be installed [/usr/local/bin] +  - Press Settings 
-     +  - Choose General 
-    Automatically start the VPN service at boot time [yes] +  - Nearly at the end, click VPN 
-     +  - Next click: Add VPN Configuration... 
-    Directory containing linux kernel source code [/lib/modules/X.X.XX-X-XXX/build]+    - **Type:** IPSec 
 +    - **Description:** VPN Scientificnet 
 +    - **Server:** vpn.scientificnet.org 
 +    - **Account:** <your-unibz-username> 
 +    - **Password:** <your-unibz-password> or leave empty to ask every time! 
 +    - **Group Name:** Unibz 
 +    - **Secret:** <file> 
 +NrW2z9sj8g3kjJrzXxJwRPbIRNInWakL 
 +</file> 
 +  - Press Done in upper right corner of window 
 +  - Status: Slide Button to the right to connect 
 +  - Enter Password if not already entered above
  
-You only have to modify the predefined answers if they do not correspond to your actual situation. +===== Instructions for Linux vpnc Client (recommended) =====
-If everything works, you will see some compilation messages and then the installation program will stop.+
  
-4. Download the unibz.pcf configuration file from the site of the university. +1. Install vpnc
-Substitute the notation XXX ZZZ with your university network's username and password:+
  
-    # wget --no-check-certificate --http-user=XXX --http-password=ZZZ https://pro.unibz.it/vpn/Configuration/unibz.zip+  sudo aptitude install vpnc
  
-5. Unzip the configuration file and copy it to the correct location:+2. For Unibz:
  
-    # unzip unibz.zip +  * Create configuration file unibz.conf. Download from here: {{:auth:howto:linux:unibz.conf|}}
-     +
-    # cp unibz.pcf /etc/opt/cisco-vpnclient/Profiles/.+
  
-6. Initialize the vpnclient:+2.a For Eurac:
  
-    # sudo /etc/init.d/vpnclient_init start+   * Create configuration file eurac.conf. Download from here: {{:auth:howto:linux:eurac.conf|}} 
 +    
 +<note important>IPSec obfuscated secret needs to be on a single line.</note> 
 +    
 +<note important>Replace <your-windows-login> with your username.</note>
  
-7. You can now start the vpnclient using sudo: 
  
-    $ sudo vpnclient connect unibz+For Unibz:
  
-You will see some messages and then you will be requested to insert your username and password:+  sudo vi /etc/vpnc/unibz.conf
  
-    Cisco Systems VPN Client Version 4.8.00 (0490) +<code> 
-    Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved. +####################################### 
-    Client Type(s): Linux +IPSec gateway vpn.unibz.it 
-    Running on: Linux 2.6.15-26-686 #1 SMP PREEMPT Thu Aug 3 03:13:28 UTC 2006 i686 +IPSec ID Unibz 
-    Config file directory: /etc/opt/cisco-vpnclient+IPSec obfuscated secret 06294C134E0BEBDA4B449B56BFD305D35D12DABF4044EDB6794926C2CA6D5AEDFE6342DF190E566EB11215DDC1591D5CB6ABEBEB593693C6D0B2077D78034B6AFEEA3221E77F4 
 +C9858DD711AA8DE58F6 
 +Xauth username <your-windows-login> 
 +####################################### 
 +</code>
  
-    Initializing the VPN connection. +apply this rights:
-    Contacting the gateway at 193.206.186.111 +
-    User Authentication for unibz...+
  
-    Enter Username and Password.+  sudo chmod 600 /etc/vpnc/unibz.conf 
 +   
 +  sudo chown root.root /etc/vpnc/unibz.conf
  
-    Username []: X +<code> 
-    Password []: Z +sudo ls -l /etc/vpnc/unibz.conf 
-    Authenticating user. +-rw------- 1 root root 250 2009-05-02 15:54 /etc/vpnc/unibz.conf 
-    Negotiating security policies. +</code>
-    Securing communication channel.+
  
-    Your VPN connection is secure.+For Eurac:
  
-    VPN tunnel information. +  sudo vi /etc/vpnc/eurac.conf 
-    Client address: 172.21.204.1 + 
-    Server address: 193.206.186.111 +<code> 
-    Encryption: 128-bit AES +####################################### 
-    Authentication: HMAC-SHA +IPSec gateway vpn.scientificnet.org  
-    IP Compression: None +IPSec ID Eurac 
-    NAT passthrough is active on port UDP 4500 +IPSec obfuscated secret 56A1CD68CC3AD33B48DB0F727ADDBC0A354DE3287D15C8526ED4CEDE4BC2ACDD1BB2460BC2354671A405F6150EA7C294C4DBC4CF9FFE45873BECAD3A2A738C5053BE34F709D592B50AD5BC472CDFF350 
-    Local LAN Access is disabled+Xauth username <your-windows-login> 
 +####################################### 
 +</code> 
 + 
 +apply this rights: 
 + 
 +  sudo chmod 600 /etc/vpnc/eurac.conf 
 +   
 +  sudo chown root.root /etc/vpnc/eurac.conf 
 + 
 +<code> 
 +sudo ls -l /etc/vpnc/eurac.conf 
 +-rw------- 1 root root 250 2009-05-02 15:54 /etc/vpnc/eurac.conf 
 +</code> 
 + 
 +3. Start vpnc 
 + 
 +For Unibz: 
 + 
 +  sudo vpnc-connect --domain unibz unibz 
 + 
 +This will first ask for your sudo password and then 
 +your <unibz-password> 
 + 
 +For Eurac: 
 + 
 +  sudo vpnc-connect --domain eurac eurac 
 + 
 +This will first ask for your sudo password and then 
 +your <eurac-password> 
 + 
 + 
 +4. Stop vpnc 
 + 
 +  sudo vpnc-disconnect 
 + 
 + 
 +==== Possible errors ==== 
 + 
 +If you get the following error:  **vpnc-connect: no response from target**\\ 
 +try adding the line below to your configuration file (unibz.conf) 
 + 
 +**NAT Traversal Mode cisco-udp** 
 + 
 +---- 
 + 
 +When one attempts to connect to their VPN after installing and configuring vpnc on Ubuntu Oneiric,\\ 
 +the following error occurs: 
 + 
 +<code> 
 +root@ubuntu:~# vpnc-connect 
 +Error: either "to" is duplicate, or "ipid" is a garbage. 
 +</code> 
 + 
 +It appears that the Ubuntu package vpnc comes with an old version of vpnc-script.\\ 
 +This script is what sets up all the addresses and routes for you. The OpenConnect project\\ 
 +provides an updated / revised release of this script. Download the latest copy from [[http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script|here]].\\ 
 +Replace the vpnc-script script that comes with the Ubuntu vpnc package: /etc/vpnc/vpnc-script 
 + 
 +==== Decode Group Password ==== 
 + 
 +[[https://www.unix-ag.uni-kl.de/~massar/bin/cisco-decode|cisco vpnclient password decoder]] 
 + 
 + 
 +===== Instructions for Linux Cisco AnyConnect Client ===== 
 + 
 +=== Installation === 
 + 
 +1. Open with your browser (tested with firefox 11.0) the following URL: 
 + 
 +https://vpn.scientificnet.org 
 + 
 +2. Enter your Username and password, then press **Login** 
 + 
 +3. A "Warning - Security" Windows opens: This will install the Cisco AnyConnect Client \\ 
 +in /opt/cisco of your Platform. 
 + 
 +4. Press **Run** on the "Warning - Security" Window 
 + 
 +{{:auth:howto:linux:cisco-anyconnect_1.png?direct&200}} 
 + 
 +5. In order to install Cisco AnyConnect, Admin (sudo) rights are required; a Window opens,\\ 
 +enter your local password. 
 + 
 +{{:auth:howto:linux:cisco-anyconenct_2.png?direct&200|}} 
 + 
 +6. The Cisco AnyConnect is installed and running, you can close the URL. 
 + 
 +{{:auth:howto:linux:cisco-anyconnect_3.png?direct&200|}} 
 + 
 +=== Launching Cisco AnyConnect GUI === 
 + 
 +This allows you to connect and disconnect the VPN service. 
 + 
 +  /opt/cisco/anyconnect/bin/vpnui 
 + 
 +Please note the vpnagentd must be running for this 
 + 
 +  * ps auxww | grep vpn 
 +<code> 
 +root      1759  0.0  0.3  17984  7644 ?        S    12:58   0:00 /opt/cisco/anyconnect/bin/vpnagentd 
 +</code> 
 + 
 +=== Launching Cisco AnyConnect NON-GUI === 
 + 
 +This allows you to connect and disconnect the VPN service. 
 + 
 +  * /opt/cisco/anyconnect/bin/vpn 
 + 
 +<code> 
 +Cisco AnyConnect Secure Mobility Client (version 3.0.5080) . 
 + 
 +Copyright (c) 2004 - 2011 Cisco Systems, Inc. 
 +All Rights Reserved. 
 + 
 + 
 +  >> state: Disconnected 
 +  >> state: Disconnected 
 +  >> notice: Ready to connect. 
 +  >> registered with local VPN subsystem. 
 +VPN> connect vpn.unibz.it 
 +connect vpn.unibz.it 
 +  >> contacting host (vpn.unibz.it) for login information... 
 +  >> notice: Contacting vpn.unibz.it. 
 +VPN>  
 +  >> Please enter your username and password. 
 +    0) clientless 
 +    1) scientificnetwork 
 +Group: [clientless]  
 + 
 +Username: <your-username> 
 +Password:  
 +  >> state: Connecting 
 +  >> notice: Establishing VPN session... 
 +  >> notice: Checking for profile updates... 
 +  >> notice: Checking for product updates... 
 +  >> notice: Checking for customization updates... 
 +  >> notice: Performing any required updates... 
 +  >> state: Connecting 
 +  >> notice: Establishing VPN session... 
 +  >> notice: Establishing VPN - Initiating connection... 
 +  >> notice: Establishing VPN - Examining system... 
 +  >> notice: Establishing VPN - Activating VPN adapter... 
 +  >> notice: Establishing VPN - Configuring system... 
 +  >> notice: Establishing VPN... 
 +  >> state: Connected 
 +  >> notice: Connected to vpn.unibz.it. 
 +VPN>exit 
 + 
 + 
 +</code> 
 + 
 +=== Uninstalling the AnyConnect Client === 
 + 
 +The client comes with an uninstallation script 
 + 
 +  * sudo /opt/cisco/vpn/bin/vpn_uninstall.sh 
 + 
 +However it doesn't actually uninstall everything properly, it removes files but leaves behind directories.\\ 
 +You can clean up what it leaves behind by deleting the directory /opt/cisco/ and /opt/.cisco/ 
 + 
 +  * sudo rm -r /opt/cisco /opt/.cisco 
 + 
 +Per-user configuration is stored in your home directory in a file called .anyconnect 
 + 
 +===== Shrew Soft VPN Client Instructions for 32 or 64 bit version of Windows 2000, XP, Vista and 7 (recommened) ===== 
 + 
 +1. Go to http://www.shrew.net/home and download latest stable release of Shrew Soft VPN Client for Windows: http://www.shrew.net/download/vpn 
 + 
 +2. Download unibz profile (need to login with unibz login&password) 
 +https://pro.unibz.it/vpn/profiles/unibz/Free%20University%20of%20Bozen-Bolzano.zip 
 + 
 +3. Install Shrew Soft VPN Client for Windows 
 + 
 +4. Start Shrew Soft VPN Client, unzip unibz profile and Import in VPN client
  
-Please notice that you will have to leave the console open in order to have the VPN running. 
  
/data/www/wiki.inf.unibz.it/data/pages/auth/howto/linux/vpnclient.txt · Last modified: 2022/06/20 11:40 by kohofer