popey.com

Where can I download the Cisco VPN client 4.6 from for Ubuntu?
I'd like to our company's *.pcf so I can remote in without using MS Windows XP OS....

Thanks

I had the problem to startup the vpnclient - see error:

root@localhost:/work# vpnclient connect cisco
Cisco Systems VPN Client Version 4.8.01 (0640)
Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.22-14-generic #1 SMP Tue Dec 18 08:02:57 UTC 2007 i686
Config file directory: /etc/opt/cisco-vpnclient

Initializing the VPN connection.
Secure VPN Connection terminated locally by the Client
Reason: Failed to establish a VPN connection.
There are no new notification messages at this time.

The solution was: DISABLE FIREWALL, or you can open specific ports if you know which one :-)

Good luck!

Ubuntu 7.10: I have done the install just fine. But now that I try and start the client I get the following error:

Initializing the VPN connection.
Contacting the gateway at 12.181.164.14
Secure VPN Connection terminated locally by the Client
Reason: Failed to establish a VPN connection.
There are no new notification messages at this time.

I have no idea where to look for errors on this? Where is the log file to check?

Hi, I "successfully" got everything to compile/install, but now I can't get connected. After entering my username and password, I get the below response, but then I can't connect to anything in terminal using ssh, etc nor can I connect to the company intranet via browser. The Cisco client works just fine for me with Windows and Mac OS X. By the way, I'm running Ubuntu 7.04. I've enabled/disabled both NAT passthrough and LAN Access with no results. Any ideas?

Your VPN connection is secure.

VPN tunnel information.
Client address: xxx.xxx.xxx.xxx
Server address: xxx.xxx.xxxx.xxx
Encryption: 168-bit 3-DES
Authentication: HMAC-SHA
IP Compression: None
NAT passthrough is inactive
Local LAN Access is enabled

After the problem which I had with cisco vpnclient (and patch) when upgrading from Efty to Feisty I used this solution:

http://packages.debian.org/testing/net/vpnc

It Works ok.

One fo the best...

Small problem however.

Initializing the VPN connection.
Secure VPN Connection terminated locally by the Client
Reason: The Connection Manager was unable to read the connection entry, or the connection entry has missing or incorrect information.
There are no new notification messages at this time.
root@skeeterflea:/usr/local/bin# sudo vpnclient connect Supercool-VPN-2009
Cisco Systems VPN Client Version 4.8.00 (0490)
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.15-28-686 #1 SMP PREEMPT Tue Mar 13 20:55:53 UTC 2007 i686Config file directory: /etc/opt/cisco-vpnclient

Any ideas?

Cant get past make someting missing and have no idea of where to go (libdriver.so.cmd) error missing, can some one direct me on what to do for the missing file. Cant find it in the repository.
Thank..here are the results of make.

make -C /lib/modules/2.6.15-28-386/build SUBDIRS=/home/lee/cisco/vpnclient modules
make[1]: Entering directory `/usr/src/linux-headers-2.6.15-28-386'
LD [M] /home/lee/cisco/vpnclient/cisco_ipsec.o
Building modules, stage 2.
MODPOST
Warning: could not find /home/lee/cisco/vpnclient/.libdriver.so.cmd for /home/lee/cisco/vpnclient/libdriver.so
CC /home/lee/cisco/vpnclient/cisco_ipsec.mod.o
LD [M] /home/lee/cisco/vpnclient/cisco_ipsec.ko
make[1]: Leaving directory `/usr/src/linux-headers-2.6.15-28-386'
lee@mserver:~/cisco/vpnclient$

Alan , thanks for the help .
i think this is a great documentation about setting up vpn client , i really appreciate the effort .
working perfect !

Thanks so much for this thorough howto. I managed to finally install and configure the VPN client, a long time thorn on my side.

Ubuntu rox! :D

Hi Alan,

thanks for writing an excellent tutorial. Unfortunately it seems not all cases were covered :).

I am running an (up-to-date) Ubuntu 6.10 and the error I get is during the patch application. Of course all things ran as su


patch -p0 < vpnclient-linux-4.7.patch.txt
patching file linuxcniapi.c
Hunk #2 FAILED at 291.
Hunk #3 succeeded at 403 (offset 9 lines).
Hunk #4 FAILED at 445.
2 out of 4 hunks FAILED -- saving rejects to file linuxcniapi.c.rej


The content of the .rej file is:

//START OF FILE

***************
*** 289,295 ****
goto exit_gracefully;
}
/* move the data into the packet */
- do_gettimeofday(&skb->stamp);

//END OF FILE

My 'uname -r' is

2.6.17-11-generic

I used:

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_user_guide_chapter09186a0080234617.html

and my campus guidelines for windows to create a connection

I am still able to do all the next steps and try to log in to the campus network
but in the end get a:


Initiating TCP to X.X.X.X port YYYY IPSec over TCP
Contacting the gateway at X.X.X.X
Secure VPN Connection terminated locally by the Client
Reason: Remote peer is no longer responding.
There are no new notification messages at this time.


Do you think it's my profile that's incorrect or really something about this patching that makes a difference?

With kind regards,
Marek Barwinski

Thank you for these detailed steps AND answering the problems that people have had. I got it to work and can now work from home. Wooo Hooo. You are a gem for writing such easy to follow steps.

Hi Alan,

I see the following error when starting up the vpn system:

$ sudo /etc/init.d/vpnclient_init start
Starting /opt/cisco-vpnclient/bin/vpnclient: insmod: error inserting '/lib/modules/2.6.15-27-386/CiscoVPN/cisco_ipsec.ko': -1 Invalid module format
Failed (insmod)

I am running Dapper and have the 4.6 version of the Cisco client. I also have gcc and appropriate linux-headers and linux-source installed. The display of your vpn_install process looks nearly identical to what I saw.

Any thoughts?

You rock! I finally made it work after reading ur blog!!! Thanks a million!

I get it installed (no patch needed) but when I disconnect the client I loose all ability to connect to the internet until I restart my computer.

tried in ubuntu 6.10 and Cisco VPN client 4.8 and worked fine :)

thanks so much

Hello,

first of all ... it's a great wiki !! ;-)
but when i try to connect ... then I recieve this error:

jonay@thunderdragon:~$ sudo vpnclient connect Base_support
Cisco Systems VPN Client Version 4.6.02 (0030)
Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.15-27-686 #1 SMP PREEMPT Sat Sep 16 02:13:27 UTC 2006 i686
Config file directory: /etc/opt/cisco-vpnclient

Initializing the VPN connection.
Initiating TCP to 195.95.20.200, port 13013
Contacting the gateway at 195.95.20.200
User Authentication for Base_support...

Enter Username and Password.

Username [jhsoft]:
Password []:
Authenticating user.
Negotiating security policies.
Securing communication channel.
Initiating TCP to 217.72.231.23, port 13013
Secure VPN Connection terminated locally by the Client
Reason: Failed to establish a TCP connection.
There are no new notification messages at this time.
jonay@thunderdragon:~$

what can I do against this ?

thanks in advance !

jonay

when I try to run the patch p0 < ......

I get the following errors?

missing header for unified diff at line 3 of patch
patch: **** Can't find file p0 : No such file or directory

Erm.....help anyone???

Thank you very much for this highly descriptive info on install the Cisco's vpn client. I finally got it working and now I will never have to reboot my laptop in Windows to connect to my work's computer.

Keep up the good work!
Grétar

I followed this and successfully installed version 4.8 without the patches you describe above.

I can successfully negotiate a connection to the network. My rather silly question, is how do I open a terminal or viewer to the network? I have tried unsucessfully to use nautilius and set up a network server, I have tried to open a terminal server client, etc.

Any help would be greatly appreciated!

Thanks for this how-to. I doubt I would have been able to get this done without it.

Any ideas on this make error:

p@p-desktop:~/vpnclient$ make
make -C /lib/modules/2.6.15-23-386/build SUBDIRS=/home/p/vpnclient modules
make[1]: Entering directory `/usr/src/linux-headers-2.6.15-23-386'
CC [M] /home/p/vpnclient/interceptor.o
/home/p/vpnclient/interceptor.c: In function ‘add_netdev’:
/home/p/vpnclient/interceptor.c:59: sorry, unimplemented: inlining failed in call to ‘supported_device’: function body not available
/home/p/vpnclient/interceptor.c:245: sorry, unimplemented: called from here
/home/p/vpnclient/interceptor.c: In function ‘handle_vpnup’:
/home/p/vpnclient/interceptor.c:338: warning: assignment from incompatible pointer type
/home/p/vpnclient/interceptor.c:362: warning: assignment from incompatible pointer type
/home/p/vpnclient/interceptor.c:363: warning: assignment from incompatible pointer type
/home/p/vpnclient/interceptor.c: In function ‘do_cleanup’:
/home/p/vpnclient/interceptor.c:406: warning: assignment from incompatible pointer type
/home/p/vpnclient/interceptor.c: In function ‘recv_ip_packet_handler’:
/home/p/vpnclient/interceptor.c:607: warning: passing argument 1 of ‘skb_checksum_help’ from incompatible pointer type
/home/p/vpnclient/interceptor.c: In function ‘do_cni_send’:
/home/p/vpnclient/interceptor.c:732: warning: passing argument 1 of ‘skb_checksum_help’ from incompatible pointer type
make[2]: *** [/home/p/vpnclient/interceptor.o] Error 1
make[1]: *** [_module_/home/p/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/linux-headers-2.6.15-23-386'
make: *** [default] Error 2
p@p-desktop:~/vpnclient$

I checked my gcc & kernel versions and they match:
p@p-desktop:~$ gcc -v
Using built-in specs.
Target: i486-linux-gnu
Configured with: ...
gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5)

p@p-desktop:~$ cat /proc/version
Linux version 2.6.15-23-386 (buildd@rothera) (gcc version 4.0.3 (Ubuntu 4.0.3-1u buntu5)) #1 PREEMPT Tue May 23 13:49:40 UTC 2006

Was struggling to compile the client to connect to my company's network. Used your workaround and it worked like a charm..

Bhaskar

Alan, thanks for those instructions. Although our corporate site has the client itself for download there are no instructions for linux.

I have run into one problem though.. Upon launch of the client I am getting this error:

Could not attach to driver. Is kernel module loaded?

Any thoughts as to what to do?

THanks, Aaron

Found the option. Its in the .pcf file :

EnableLocalLAN=0

However, toggeling the 0 and 1 doesn't have any effect.

Hi,
I see that "Local LAN Access is disabled". Is there any of using the local LAN while the client is running? It works on WXP, so I wondered if there was an option somewhere?

Rdgs, z

Cisco Systems VPN Client Version 4.8.00 (0490)
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.17-1.2157_FC5smp #1 SMP Tue Jul 11 23:24:16 EDT 2006 i686
Config file directory: /etc/opt/cisco-vpnclient

Initializing the VPN connection.
Contacting the gateway at n.n.n.n
Negotiating security policies.
Securing communication channel.

Your VPN connection is secure.

VPN tunnel information.
Client address: n.n.n.n
Server address: n.n.n.n
Encryption: xxxxxx
Authentication: xxxxxx
IP Compression: None
NAT passthrough is active on port UDP 4500
Local LAN Access is disabled

great job!
As you said, i just let my cisco vpn client version "vpnclient-linux-4.8.00.0490-k9.tar.gz" work well in Ubuntu6. But for Version 4.8, there is no need to use patch txt file.
Only a littel question, how can i use "vpnclient connect profilename" without sudo? When without sudo, i get the messege:

privsep: unable to drop privileges: group set failed.
The application was unable to communicate with the VPN sub-system.

How can i let a normal user use the vpn too.