Differences

This shows you the differences between two versions of the page.

--- auth:howto:linux:vpnclient [2012/04/05 12:03] – kohofer
+++ auth:howto:linux:vpnclient [2012/04/05 18:24] – [Instructions for Linux vpnc Client (recommended)] kohofer
@@ Line 14: / Line 14: @@
 ==== Instructions for MacOS X 10.6 ====
-There is no need to install a Client, simply install (doubleclick) the\\
+There is no need to install a Client, simply download and install (doubleclick) the\\
 following file:
 {{:auth:howto:linux:unibz.networkconnect.zip|}}
-===== Instructions for Linux Cisco AnyConnect Client (recommened) =====
+===== Instructions for Linux vpnc Client (recommended) =====
-=== Installation ===
-. Open with your browser (tested with firefox 11.0) the following URL:
-https://vpn.scientificnet.org
-. Enter your Username and password, then press **Login**
-. A "Warning - Security" Windows opens: This will install the Cisco AnyConnect\\
-   in /opt/cisco of your System
-. Press **Run**
-. In order to install Cisco AnyConnect, Admin (sudo) rights are required; a Window opens,\\
-   enter your local password.
-. The Cisco AnyConnect is installed and running, you can close the URL.
-=== Launching Cisco AnyConnect GUI ===
-This allows you to connect and disconnect the VPN service.
-  /opt/cisco/anyconnect/bin/vpnui
-More infos to come like using OpenConnect...
-===== Instructions for Linux vpnc Client (fails to work since update to Cisco ASA) =====
 . Install vpnc
@@ Line 56: / Line 26: @@
 . Create configuration file unibz.conf.
-   Please Note: IPSec obfuscated secret ... needs to be on a single line. Replace <your-windows-login> with your username.
+<note important>IPSec obfuscated secret needs to be on a single line.</note>
+<note important>Replace <your-windows-login> with your username.</note>
   sudo vi /etc/vpnc/unibz.conf
@@ Line 83: / Line 56: @@
 . Start vpnc
-  sudo vpnc-connect unibz
+  sudo vpnc-connect --domain unibz unibz
 This will first ask for your sudo password and then
-you <windows-password>
+your <unibz-password>
 . Stop vpnc
   sudo vpnc-disconnect
+==== Possible errors ====
+When one attempts to connect to their VPN after installing and configuring vpnc on Ubuntu Oneiric,\\
+the following error occurs:
+<code>
+root@ubuntu:~# vpnc-connect
+Error: either "to" is duplicate, or "ipid" is a garbage.
+</code>
+It appears that the Ubuntu package vpnc comes with an old version of vpnc-script.\\
+This script is what sets up all the addresses and routes for you. The OpenConnect project\\
+provides an updated / revised release of this script. Download the latest copy from [[http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script|here]].\\
+Replace the vpnc-script script that comes with the Ubuntu vpnc package: /etc/vpnc/vpnc-script
+===== Instructions for Linux Cisco AnyConnect Client =====
+=== Installation ===
+. Open with your browser (tested with firefox 11.0) the following URL:
+https://vpn.scientificnet.org
+. Enter your Username and password, then press **Login**
+. A "Warning - Security" Windows opens: This will install the Cisco AnyConnect Client \\
+in /opt/cisco of your Platform.
+. Press **Run** on the "Warning - Security" Window
+{{:auth:howto:linux:cisco-anyconnect_1.png?direct&200}}
+. In order to install Cisco AnyConnect, Admin (sudo) rights are required; a Window opens,\\
+enter your local password.
+{{:auth:howto:linux:cisco-anyconenct_2.png?direct&200|}}
+. The Cisco AnyConnect is installed and running, you can close the URL.
+{{:auth:howto:linux:cisco-anyconnect_3.png?direct&200|}}
+=== Launching Cisco AnyConnect GUI ===
+This allows you to connect and disconnect the VPN service.
+  /opt/cisco/anyconnect/bin/vpnui
+Please note the vpnagentd must be running for this
+  * ps auxww | grep vpn
+<code>
+root      1759  0.0  0.3  17984  7644 ?        S    12:58   0:00 /opt/cisco/anyconnect/bin/vpnagentd
+</code>
+=== Launching Cisco AnyConnect NON-GUI ===
+This allows you to connect and disconnect the VPN service.
+  * /opt/cisco/anyconnect/bin/vpn
+<code>
+Cisco AnyConnect Secure Mobility Client (version 3.0.5080) .
+Copyright (c) 2004 - 2011 Cisco Systems, Inc.
+All Rights Reserved.
+  >> state: Disconnected
+  >> state: Disconnected
+  >> notice: Ready to connect.
+  >> registered with local VPN subsystem.
+VPN> connect vpn.unibz.it
+connect vpn.unibz.it
+  >> contacting host (vpn.unibz.it) for login information...
+  >> notice: Contacting vpn.unibz.it.
+VPN>
+  >> Please enter your username and password.
+) clientless
+) scientificnetwork
+Group: [clientless]
+Username: <your-username>
+Password:
+  >> state: Connecting
+  >> notice: Establishing VPN session...
+  >> notice: Checking for profile updates...
+  >> notice: Checking for product updates...
+  >> notice: Checking for customization updates...
+  >> notice: Performing any required updates...
+  >> state: Connecting
+  >> notice: Establishing VPN session...
+  >> notice: Establishing VPN - Initiating connection...
+  >> notice: Establishing VPN - Examining system...
+  >> notice: Establishing VPN - Activating VPN adapter...
+  >> notice: Establishing VPN - Configuring system...
+  >> notice: Establishing VPN...
+  >> state: Connected
+  >> notice: Connected to vpn.unibz.it.
+VPN>exit
+</code>
+=== Uninstalling the AnyConnect Client ===
+The client comes with an uninstallation script
+  * sudo /opt/cisco/vpn/bin/vpn_uninstall.sh
+However it doesn't actually uninstall everything properly, it removes files but leaves behind directories.\\
+You can clean up what it leaves behind by deleting the directory /opt/cisco/ and /opt/.cisco/
+  * sudo rm -r /opt/cisco /opt/.cisco
+Per-user configuration is stored in your home directory in a file called .anyconnect
 ===== Shrew Soft VPN Client Instructions for 32 or 64 bit version of Windows 2000, XP, Vista and 7 (recommened) =====