Engineering-Tech Wiki

User Tools

Site Tools

You are here: start » auth » howto » linux » vpnclient
Trace:
auth:howto:linux:vpnclient

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Next revisionBoth sides next revision
auth:howto:linux:vpnclient [2010/08/30 17:12] – kohoferauth:howto:linux:vpnclient [2012/09/11 09:05] – [Possible errors] kohofer
Line 1: Line 1:
-===== VPN (Virtual Private Network) at the Free University of Bolzano/Bozen =====+====== VPN (Virtual Private Network) at the Free University of Bolzano/Bozen ======
  
-==== Infos regarding the usage of VPN ====+===== Infos regarding the usage of VPN =====
  
 http://www.unibz.it/en/ict/ComputerInternet/network/vpn/default.html http://www.unibz.it/en/ict/ComputerInternet/network/vpn/default.html
  
-==== Instructions for Windows 2000, XP and VISTA ====+==== Instructions for Windows 2000, XP, VISTA and 7 - 32bit and 64bit ==== 
 http://www.unibz.it/en/ict/ComputerInternet/network/vpn/InstallationWindows.html http://www.unibz.it/en/ict/ComputerInternet/network/vpn/InstallationWindows.html
  
Line 11: Line 12:
 http://www.unibz.it/en/ict/ComputerInternet/network/vpn/InstallationMacOSX.html http://www.unibz.it/en/ict/ComputerInternet/network/vpn/InstallationMacOSX.html
  
-==== Instructions for Linux VPNC Client (recommened) ====+==== Instructions for MacOS X 10.6 ==== 
 + 
 +There is no need to install a Client, simply download and install (doubleclick) the\\ 
 +following file: 
 + 
 +{{:auth:howto:linux:unibz.networkconnect.zip|}} 
 + 
 +===== Instructions for Linux vpnc Client (recommended) =====
  
 1. Install vpnc 1. Install vpnc
Line 17: Line 25:
   sudo aptitude install vpnc   sudo aptitude install vpnc
  
-2. Create configuration file unibz.conf. +2. Create configuration file unibz.conf. Download from here: {{:auth:howto:linux:unibz.conf|}} 
-   Please Note: IPSec obfuscated secret ... needs to be on a single line. Replace <your-windows-login> with your username.+    
 +<note important>IPSec obfuscated secret needs to be on a single line.</note> 
 +    
 +<note important>Replace <your-windows-login> with your username.</note>
  
   sudo vi /etc/vpnc/unibz.conf   sudo vi /etc/vpnc/unibz.conf
Line 45: Line 56:
 3. Start vpnc 3. Start vpnc
  
-  sudo vpnc-connect unibz+  sudo vpnc-connect --domain unibz unibz
  
 This will first ask for your sudo password and then This will first ask for your sudo password and then
-you <windows-password>+your <unibz-password>
  
 4. Stop vpnc 4. Stop vpnc
Line 54: Line 65:
   sudo vpnc-disconnect   sudo vpnc-disconnect
  
 +==== Possible errors ====
  
-==== Instructions for Linux Cisco VPN Client ====+If you get the following error:  **vpnc-connect: no response from target**\\ 
 +try adding the line below to your configuration file (unibz.conf)
  
-1. Download and install the kernel headers corresponding to the kernel in use. Some distributions name this package kernel-headers, others name it linux-headers:+**NAT Traversal Mode cisco-udp**
  
-    # sudo apt-get install kernel-headers-`uname -r` +----
-or +
-    # sudo apt-get install linux-headers-`uname -r`+
  
-You can get the version of your kernel by issuing the following command:+When one attempts to connect to their VPN after installing and configuring vpnc on Ubuntu Oneiric,\\ 
 +the following error occurs:
  
-    # uname -a+<code> 
 +root@ubuntu:~# vpnc-connect 
 +Error: either "to" is duplicate, or "ipid" is a garbage. 
 +</code>
  
-A valid version number could be, for example, 2.6.12-9-386.+It appears that the Ubuntu package vpnc comes with an old version of vpnc-script.\\ 
 +This script is what sets up all the addresses and routes for you. The OpenConnect project\\ 
 +provides an updated / revised release of this script. Download the latest copy from [[http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script|here]].\\ 
 +Replace the vpnc-script script that comes with the Ubuntu vpnc package: /etc/vpnc/vpnc-script
  
-2. Download and install the vpnclient: 
  
-If kernel > 2.6.24-xx then download:+===== Instructions for Linux Cisco AnyConnect Client =====
  
-https://pro.unibz.it/vpn/client/common/linux/vpnclient-linux-x86_64-4.8.01.0640-k9_2.6.24-xx.tar.gz+=== Installation ===
  
-otherwise download:+1. Open with your browser (tested with firefox 11.0) the following URL:
  
-https://pro.unibz.it/vpn/client/common/linux/vpnclient-linux-x86_64-4.8.01.0640-k9.tar.gz+https://vpn.scientificnet.org
  
-3. Untar the source of vpnclient and install it. +2. Enter your Username and password, then press **Login**
-   Depending on the Linux Distribution you might need to install ''make'' and ''gcc-3.4'' +
-    +
-   sudo apt-get install make gcc-3.4+
  
-If kernel > 2.6.24-xx then+3. A "Warning - Security" Windows opens: This will install the Cisco AnyConnect Client \\ 
 +in /opt/cisco of your Platform.
  
-   # tar xfz vpnclient-linux-x86_64-4.8.01.0640-k9_2.6.24-xx.tar.gz+4. Press **Run** on the "Warning - Security" Window
  
-otherwise+{{:auth:howto:linux:cisco-anyconnect_1.png?direct&200}}
  
-   # tar xfz vpnclient-linux-x86_64-4.8.01.0640-k9.tar.gz+5. In order to install Cisco AnyConnect, Admin (sudo) rights are required; a Window opens,\\ 
 +enter your local password.
  
-Next install/compile software:+{{:auth:howto:linux:cisco-anyconenct_2.png?direct&200|}}
  
-   # cd vpnclient +6. The Cisco AnyConnect is installed and running, you can close the URL.
-     +
-   # sudo ./vpn_install+
  
-You will get some messages and you will be requested to answer to some questions:+{{:auth:howto:linux:cisco-anyconnect_3.png?direct&200|}}
  
-    Directory where binaries will be installed [/usr/local/bin] <ENTER> +=== Launching Cisco AnyConnect GUI ===
-     +
-    Automatically start the VPN service at boot time [yes] no +
-     +
-    Directory containing linux kernel source code [/lib/modules/X.X.XX-X-XXX/build] <ENTER>+
  
-     +This allows you to connect and disconnect the VPN service.
-You only have to modify the predefined answers if they do not correspond to your actual situation. +
-If everything works, you will see some compilation messages and then the installation program will stop.+
  
-4. Download the unibz.pcf configuration file from the site of the university via web:+  /opt/cisco/anyconnect/bin/vpnui
  
-https://pro.unibz.it/vpn/profiles/unibz/Free%20University%20of%20Bozen-Bolzano.zip+Please note the vpnagentd must be running for this
  
-5. Unzip the configuration file and copy it to the correct location:+  * ps auxww | grep vpn 
 +<code> 
 +root      1759  0.0  0.3  17984  7644 ?        S    12:58   0:00 /opt/cisco/anyconnect/bin/vpnagentd 
 +</code>
  
-    # unzip "Free University of Bozen-Bolzano.zip" +=== Launching Cisco AnyConnect NON-GUI ===
-     +
-    # sudo cp "Free University of Bozen-Bolzano.pcf" /etc/opt/cisco-vpnclient/Profiles/unibz.pcf+
  
-6. Initialize the vpnclient:+This allows you to connect and disconnect the VPN service.
  
-    # sudo /etc/init.d/vpnclient_init start+  * /opt/cisco/anyconnect/bin/vpn
  
-7. You can now start the vpnclient using sudo:+<code> 
 +Cisco AnyConnect Secure Mobility Client (version 3.0.5080) .
  
-    $ sudo vpnclient connect unibz+Copyright (c) 2004 - 2011 Cisco Systems, Inc. 
 +All Rights Reserved.
  
-You will see some messages and then you will be requested to insert your username and password: 
  
-    Cisco Systems VPN Client Version 4.8.01 (0640) +  >> state: Disconnected 
-    Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved. +  >> state: Disconnected 
-    Client Type(s): Linux +  >> notice: Ready to connect. 
-    Running on: Linux 2.6.22-14-generic #1 SMP Tue Dec 18 08:02:57 UTC 2007 i686 +  >> registered with local VPN subsystem. 
-    Config file directory: /etc/opt/cisco-vpnclient+VPN> connect vpn.unibz.it 
 +connect vpn.unibz.it 
 +  >> contacting host (vpn.unibz.it) for login information... 
 +  >> notice: Contacting vpn.unibz.it. 
 +VPN>  
 +  >> Please enter your username and password. 
 +    0) clientless 
 +    1) scientificnetwork 
 +Group: [clientless] 
  
-    Initializing the VPN connection. +Username: <your-username> 
-    Contacting the gateway at 193.206.186.111 +Password:  
-    User Authentication for unibz...+  >> state: Connecting 
 +  >> notice: Establishing VPN session... 
 +  >> notice: Checking for profile updates... 
 +  >> notice: Checking for product updates... 
 +  >> notice: Checking for customization updates... 
 +  >> notice: Performing any required updates... 
 +  >> state: Connecting 
 +  >> notice: Establishing VPN session... 
 +  >> notice: Establishing VPN - Initiating connection... 
 +  >> notice: Establishing VPN - Examining system... 
 +  >> notice: Establishing VPN - Activating VPN adapter... 
 +  >> notice: Establishing VPN - Configuring system... 
 +  >> notice: Establishing VPN... 
 +  >> state: Connected 
 +  >> notice: Connected to vpn.unibz.it. 
 +VPN>exit
  
-    Enter Username and Password. 
  
-    Username []: X +</code> 
-    Password []: Z + 
-    Authenticating user. +=== Uninstalling the AnyConnect Client === 
-    Negotiating security policies. + 
-    Securing communication channel.+The client comes with an uninstallation script 
 + 
 +  * sudo /opt/cisco/vpn/bin/vpn_uninstall.sh 
 + 
 +However it doesn't actually uninstall everything properly, it removes files but leaves behind directories.\\ 
 +You can clean up what it leaves behind by deleting the directory /opt/cisco/ and /opt/.cisco/ 
 + 
 +  * sudo rm -r /opt/cisco /opt/.cisco 
 + 
 +Per-user configuration is stored in your home directory in a file called .anyconnect 
 + 
 +===== Shrew Soft VPN Client Instructions for 32 or 64 bit version of Windows 2000, XP, Vista and 7 (recommened) ===== 
 + 
 +1. Go to http://www.shrew.net/home and download latest stable release of Shrew Soft VPN Client for Windows: http://www.shrew.net/download/vpn 
 + 
 +2. Download unibz profile (need to login with unibz login&password) 
 +https://pro.unibz.it/vpn/profiles/unibz/Free%20University%20of%20Bozen-Bolzano.zip
  
-    Your VPN connection is secure.+3. Install Shrew Soft VPN Client for Windows
  
-    VPN tunnel information. +4. Start Shrew Soft VPN Client, unzip unibz profile and Import in VPN client
-    Client address: 172.21.204.1 +
-    Server address: 193.206.186.111 +
-    Encryption: 128-bit AES +
-    Authentication: HMAC-SHA +
-    IP Compression: None +
-    NAT passthrough is active on port UDP 4500 +
-    Local LAN Access is disabled+
  
-Please notice that you will have to leave the console open in order to have the VPN running. 
  
/data/www/wiki.inf.unibz.it/data/pages/auth/howto/linux/vpnclient.txt · Last modified: 2022/06/20 11:40 by kohofer