Como faço para conectar esse cliente Cisco VPN?

Question

Eu tenho o Ubuntu 10.10 de 64 bits e instalei o network-manager-vpnc e configurei a conexão, mas continuo recebendo isto:

NetworkManager[1217]: <info> Starting VPN service 'org.freedesktop.NetworkManager.vpnc'...                                                   
NetworkManager[1217]: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' started (org.freedesktop.NetworkManager.vpnc), PID 4420       
NetworkManager[1217]: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' appeared, activating connections                              
NetworkManager[1217]: <info> VPN plugin state changed: 1                                                                                     
NetworkManager[1217]: <info> VPN plugin state changed: 3                                                                                     
NetworkManager[1217]: <info> VPN connection 'CSI' (Connect) reply received.                                                                  
modem-manager: (net/tun0): could not get port's parent device                                                                                
NetworkManager[1217]:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/tun0, iface: tun0)                                 
NetworkManager[1217]:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/tun0, iface: tun0): no ifupdown configuration found.
kernel: [ 2281.723506] tun0: Disabled Privacy Extensions                                                                                     
avahi-daemon[1109]: Withdrawing workstation service for tun0.                                                                                
NetworkManager[1217]:    SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/tun0, iface: tun0)                               
NetworkManager[1217]: <warn> VPN plugin failed: 1                                                                                            
NetworkManager[1217]: <info> VPN plugin state changed: 6                                                                                     
NetworkManager[1217]: <info> VPN plugin state change reason: 0                                                                               
NetworkManager[1217]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.                    
NetworkManager[1217]: <info> Policy set 'Auto eth0' (eth0) as default for IPv4 routing and DNS.                                              
NetworkManager[1217]: <info> Starting VPN service 'org.freedesktop.NetworkManager.vpnc'...                                                   
NetworkManager[1217]: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' started (org.freedesktop.NetworkManager.vpnc), PID 4547       
NetworkManager[1217]: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' appeared, activating connections                              
NetworkManager[1217]: <info> VPN plugin state changed: 1                                                                                     
NetworkManager[1217]: <info> VPN plugin state changed: 3  

Eu vi alguns bugs no Launchpad que poderiam ser a mesma coisa ou eu fiz algo errado?

    

Answer 1

1. Instale o vpnc pacote:

   sudo apt-get install vpnc
   

2. Crie o script de conexão, copie o conteúdo abaixo em um arquivo chamado vpn-connect e coloque-o no caminho em algum lugar:

   #!/bin/sh
   
   sudo vpnc --local-port 0 --enable-1des /etc/vpnc/vpn.conf
   

3. Copie o arquivo .pcf usado pelo cliente Cisco VPN do Windows e use-o como base para a etapa 4.

4. Agora você precisa criar o arquivo vpn.conf no diretório / etc / vpnc. O conteúdo deste arquivo é o seguinte:

   IPSec ID <your ipsec id>
   IPSec gateway <your gateway address>
   IPSec secret <your ipsec secret>
   
   Xauth username <your username>
   Xauth password <your password>
   IKE Authmode psk
   

   <your username> e <your password> devem ser óbvios.

Agora você tem tudo o que é necessário para se conectar, então execute o script:

vpn-connect

Após alguns segundos, deve voltar com a mensagem:

VPNC started in background

E forneça um ID do processo.

Agora você deve estar conectado à VPN.

    

Answer 2

Eu descobri que no meu caso o plugin estava falhando porque a vpnc não estava feliz com o método de criptografia

peer selected (single) DES as "encryption" method.
This algorithm is considered too weak today
If your vpn concentrator admin still insists on using DES
use the "--enable-1des" option.

Esta mensagem pode ser descoberta apenas por stracing o processo vpnc.

Para adicionar a opção --enable-1des à linha de comando do vpnc, executei o seguinte:

sudo -s
mv /usr/sbin/vpnc /usr/sbin/vpnc.real
cat <<EOF > /usr/sbin/vpnc
#!/bin/sh
exec /usr/sbin/vpnc.real --enable-1des $*
EOF
chmod +x /usr/sbin/vpnc

Basicamente, substituí o binário vpnc por um script wrapper que forneceu o parâmetro necessário.

Agora o plug-in do NetworkManager VPNC pode se conectar corretamente.