auth:howto:linux:vpnclient
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
| auth:howto:linux:vpnclient [2008/05/04 23:36] – kohofer | auth:howto:linux:vpnclient [2012/04/05 14:48] – kohofer | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ===== VPN (Virtual Private Network) at the Free University of Bolzano/ | + | ====== VPN (Virtual Private Network) at the Free University of Bolzano/ |
| - | ==== Infos regarding the usage of VPN ==== | + | ===== Infos regarding the usage of VPN ===== |
| - | http:// | + | http:// |
| + | ==== Instructions for Windows 2000, XP, VISTA and 7 - 32bit and 64bit ==== | ||
| - | ==== Instructions for Windows 98, ME, NT 4.0, 2000 and XP ==== | + | http:// |
| - | http:// | + | |
| - | ==== Instructions for MacOS X 10.2-10.4 ==== | + | ==== Instructions for MacOS X 10.4 ==== |
| - | http:// | + | http:// |
| + | ==== Instructions for MacOS X 10.6 ==== | ||
| + | There is no need to install a Client, simply download and install (doubleclick) the\\ | ||
| + | following file: | ||
| + | {{: | ||
| + | ===== Instructions for Linux Cisco AnyConnect Client (recommened) ===== | ||
| + | === Installation === | ||
| - | ==== Instructions for Linux ==== | + | 1. Open with your browser (tested with firefox 11.0) the following URL: |
| - | 1. Download and install the kernel headers corresponding to the kernel in use. Some distributions name this package kernel-headers, | + | https://vpn.scientificnet.org |
| - | # sudo apt-get install kernel-headers-`uname -r` | + | 2. Enter your Username and password, then press **Login** |
| - | or | + | |
| - | # sudo apt-get install linux-headers-`uname -r` | + | |
| - | You can get the version | + | 3. A " |
| + | in / | ||
| - | # uname -a | + | 4. Press **Run** on the " |
| - | A valid version number could be, for example, 2.6.12-9-386. | + | {{: |
| - | 2. Download and install | + | 5. In order to install |
| + | enter your local password. | ||
| - | https:// | + | {{: |
| - | 2.1 Download | + | 6. The Cisco AnyConnect is installed |
| - | Substitute the notation X Z with your university network' | + | {{:auth: |
| - | wget --no-check-certificate --http-user=X --http-password=Z https:// | + | === Launching Cisco AnyConnect GUI === |
| - | 3. Untar the source of vpnclient and install it. | + | This allows |
| - | | + | |
| - | + | ||
| - | sudo apt-get install make gcc-3.4 | + | |
| - | # tar xfz vpnclient-linux-x86_64-4.8.01.0640-k9.tar.gz | + | / |
| - | < | + | Please note the vpnagentd must be running for this |
| - | For Hardy Heron 8.04 Kernel (2.6.24-xx) follow this instructions: [[http://www.blog.arun-prabha.com/2008/05/01/ | + | * ps auxww | grep vpn |
| + | < | ||
| + | root 1759 0.0 0.3 17984 7644 ? S 12:58 0:00 /opt/cisco/anyconnect/bin/vpnagentd | ||
| + | </code> | ||
| - | # cd vpnclient | + | === Launching Cisco AnyConnect NON-GUI === |
| - | + | ||
| - | # sudo ./ | + | |
| - | You will get some messages and you will be requested | + | This allows |
| - | Directory where binaries will be installed [/usr/local/bin] | + | * /opt/cisco/ |
| - | + | ||
| - | Automatically start the VPN service at boot time [yes] | + | |
| - | + | ||
| - | Directory containing linux kernel source code [/ | + | |
| - | You only have to modify the predefined answers if they do not correspond to your actual situation. | + | < |
| - | If everything works, you will see some compilation messages and then the installation program will stop. | + | Cisco AnyConnect Secure Mobility Client (version 3.0.5080) |
| - | 4. Download the unibz.pcf configuration file from the site of the university via web: | + | Copyright (c) 2004 - 2011 Cisco Systems, Inc. |
| + | All Rights Reserved. | ||
| - | https:// | ||
| - | 4.1 Download the unibz.pcf configuration file from the site of the university via wget: | + | >> state: Disconnected |
| + | >> state: Disconnected | ||
| + | >> notice: Ready to connect. | ||
| + | >> registered with local VPN subsystem. | ||
| + | VPN> connect vpn.unibz.it | ||
| + | connect vpn.unibz.it | ||
| + | >> contacting host (vpn.unibz.it) for login information... | ||
| + | >> notice: Contacting vpn.unibz.it. | ||
| + | VPN> | ||
| + | >> Please enter your username and password. | ||
| + | 0) clientless | ||
| + | 1) scientificnetwork | ||
| + | Group: [clientless] | ||
| - | Substitute the notation XXX ZZZ with your university network' | + | Username: <your-username> |
| + | Password: | ||
| + | >> state: Connecting | ||
| + | >> notice: Establishing VPN session... | ||
| + | >> notice: Checking for profile updates... | ||
| + | >> notice: Checking for product updates... | ||
| + | >> notice: Checking for customization updates... | ||
| + | >> notice: Performing any required updates... | ||
| + | >> state: Connecting | ||
| + | >> notice: Establishing VPN session... | ||
| + | >> notice: Establishing VPN - Initiating connection... | ||
| + | >> notice: Establishing VPN - Examining system... | ||
| + | >> notice: Establishing VPN - Activating VPN adapter... | ||
| + | >> notice: Establishing VPN - Configuring system... | ||
| + | >> notice: Establishing VPN... | ||
| + | >> state: Connected | ||
| + | >> notice: Connected to vpn.unibz.it. | ||
| + | VPN>exit | ||
| - | wget --no-check-certificate --http-user=XXX --http-password=ZZZ https:// | ||
| - | 5. Unzip the configuration | + | </file> |
| - | # unzip "Free University of Bozen-Bolzano.zip" | + | === Uninstalling the AnyConnect Client === |
| - | + | ||
| - | # sudo cp "Free University of Bozen-Bolzano.pcf" | + | |
| - | 6. Initialize the vpnclient: | + | The client comes with an uninstallation script |
| - | # sudo /etc/init.d/vpnclient_init start | + | * sudo /opt/cisco/vpn/ |
| - | 7. You can now start the vpnclient using sudo: | + | However it doesn' |
| + | You can clean up what it leaves behind by deleting | ||
| - | $ sudo vpnclient connect unibz | + | * sudo rm -r /opt/cisco /opt/.cisco |
| - | You will see some messages and then you will be requested to insert | + | Per-user configuration is stored in your home directory in a file called .anyconnect |
| - | Cisco Systems VPN Client Version 4.8.01 (0640) | ||
| - | Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved. | ||
| - | Client Type(s): Linux | ||
| - | Running on: Linux 2.6.22-14-generic #1 SMP Tue Dec 18 08:02:57 UTC 2007 i686 | ||
| - | Config file directory: / | ||
| - | Initializing the VPN connection. | + | More infos to follow... |
| - | Contacting the gateway at 193.206.186.111 | + | |
| - | User Authentication for unibz... | + | |
| - | Enter Username and Password. | ||
| - | Username []: X | + | ===== Instructions for Linux vpnc Client (fails to work since update to Cisco ASA) ===== |
| - | | + | |
| - | | + | 1. Install vpnc |
| - | | + | |
| - | | + | sudo aptitude install vpnc |
| + | |||
| + | 2. Create configuration file unibz.conf. | ||
| + | | ||
| + | |||
| + | sudo vi / | ||
| + | |||
| + | < | ||
| + | ####################################### | ||
| + | IPSec gateway vpn.unibz.it | ||
| + | IPSec ID Unibz | ||
| + | IPSec obfuscated secret 06294C134E0BEBDA4B449B56BFD305D35D12DABF4044EDB6794926C2CA6D5AEDFE6342DF190E566EB11215DDC1591D5CB6ABEBEB593693C6D0B2077D78034B6AFEEA3221E77F4 | ||
| + | C9858DD711AA8DE58F6 | ||
| + | Xauth username < | ||
| + | ####################################### | ||
| + | </ | ||
| + | |||
| + | apply this rights: | ||
| + | |||
| + | sudo chmod 600 / | ||
| + | |||
| + | sudo chown root.root / | ||
| + | |||
| + | < | ||
| + | sudo ls -l / | ||
| + | -rw------- 1 root root 250 2009-05-02 15:54 / | ||
| + | </ | ||
| + | |||
| + | 3. Start vpnc | ||
| + | |||
| + | sudo vpnc-connect unibz | ||
| + | |||
| + | This will first ask for your sudo password and then | ||
| + | you < | ||
| + | |||
| + | 4. Stop vpnc | ||
| + | |||
| + | sudo vpnc-disconnect | ||
| + | |||
| + | ===== Shrew Soft VPN Client Instructions for 32 or 64 bit version of Windows 2000, XP, Vista and 7 (recommened) ===== | ||
| + | |||
| + | 1. Go to http:// | ||
| + | |||
| + | 2. Download unibz profile (need to login with unibz login& | ||
| + | https:// | ||
| - | Your VPN connection is secure. | + | 3. Install Shrew Soft VPN Client for Windows |
| - | | + | 4. Start Shrew Soft VPN Client, unzip unibz profile and Import in VPN client |
| - | | + | |
| - | Server address: 193.206.186.111 | + | |
| - | Encryption: 128-bit AES | + | |
| - | Authentication: | + | |
| - | IP Compression: | + | |
| - | NAT passthrough is active on port UDP 4500 | + | |
| - | Local LAN Access is disabled | + | |
| - | Please notice that you will have to leave the console open in order to have the VPN running. | ||
/data/www/wiki.inf.unibz.it/data/pages/auth/howto/linux/vpnclient.txt · Last modified: 2022/06/20 11:40 by kohofer