Slackware current 64-bit

I'm trying to create a VPN connection using a Global VPN policy on a remote SonicWall device

Anybody have any experience is setting this up?
The only information I've been able to locate is 9 - 10 years out of date :-\

Thanks

Ken

I forgot to mention, ideally I'd like to use NetworkManager though it's not looking too promising

1 members found this post helpful.

I use Openconnect to create VPN connections to our corporate VPN-server (Pulse Secure, formerly Juniper). I invoke openconnect from a script (it's a cli tool), but there seems to be a plugin for Networkmanager.

1 members found this post helpful.

I'll have to try that again..

Thanks

Unfortunately Openconnect doesn't appear to be an option.

The VPN I'm trying to connect to is a IPsec VPN using shared secret and XAUTH (username/password)

I could install Sonicwalls GVC on my Windows virtual desktop, but I'd rather connect under Linux if possible

I use VPN with Networkmanager and it works great.
First you need to install NetworkManager-openvpn that adds openvpn support to networkmanager.
I also added openresolv (built with openvpn support) to protect from DNS-leak from my opnenvpn configuration.
I don't remember if it was needed with networkmanager but i had it in my older .ovpn that i imported with networkmanager.
You can also chose to automaticly connect to VPN for a connection in networkmanager.

You should check your setup to be shore you doesn't leak.
https://dnsleaktest.com
https://ipleak.net
http://ipleak.com/full-report
https://www.doileak.com

I do think about setting up my vpn as wireguard instead (wireguard is supported in networkmanager 1.16 but you still need kernel support).

Is there anything special with Sonicwall Global VPN?
What vpn solutions do they support?

Did some quick google-fu and it seems to support ipsec and L2TP.
̶I̶ ̶d̶o̶ ̶t̶h̶i̶n̶k̶ ̶y̶o̶u̶ ̶n̶e̶e̶d̶ ̶N̶e̶t̶w̶o̶r̶k̶M̶a̶n̶a̶g̶e̶r̶-̶l̶2̶t̶p̶ ̶w̶i̶t̶h̶ ̶l̶i̶b̶r̶e̶s̶w̶a̶n̶ ̶o̶r̶ ̶s̶t̶r̶o̶n̶g̶s̶w̶a̶n̶ ̶f̶o̶r̶ ̶i̶p̶s̶e̶c̶.̶
̶T̶h̶e̶r̶e̶ ̶i̶s̶ ̶a̶l̶s̶o̶ ̶s̶t̶r̶o̶n̶g̶s̶w̶a̶n̶ ̶a̶n̶d̶ ̶N̶e̶t̶w̶o̶r̶k̶M̶a̶n̶a̶g̶e̶r̶-̶s̶t̶r̶o̶n̶g̶s̶w̶a̶n̶ ̶f̶o̶r̶ ̶i̶p̶s̶e̶c̶ ̶b̶u̶t̶ ̶i̶'̶m̶ ̶n̶o̶t̶ ̶s̶u̶r̶e̶ ̶i̶t̶ ̶s̶u̶p̶p̶o̶r̶t̶s̶ ̶5̶.̶4̶ ̶k̶e̶r̶n̶e̶l̶,̶ ̶t̶h̶e̶ ̶h̶o̶m̶e̶p̶a̶g̶e̶ ̶o̶n̶l̶y̶ ̶c̶l̶a̶i̶m̶s̶ ̶L̶i̶n̶u̶x̶ ̶2̶.̶6̶,̶ ̶3̶.̶x̶ ̶a̶n̶d̶ ̶4̶.̶x̶ ̶k̶e̶r̶n̶e̶l̶s̶
̶

If it supports L2TP then i can't see why there would be any problems to use networkmanager.
https://www.sonicwall.com/support/kn...0504819998260/

Hello Nille

The Sonicwall is setup for IPsec with XAUTH
(I'd need to pass a preshared secret, user/password, VPN group etc)

I was looking at L2TP as an option, but after talking to a engineer at Sonicwall I've decided not to take that route.
(It appears that it's an legacy protocol that isn't recommended and may be removed)

I've heard that StrongSwan may work, but so far have had no luck getting Networkmanager-strongswan to compile

Made i quick test and Networkmanager-strongswan doesn't seem to like NetworkManager >1.20.0
You could try downgrading to NetworkManager 1.18.2

I've tried building several plugins with no success

It appears that modules (libnm-glib, libnm-glib-vpn and libnm-util) have been removed from the new version of NM so I may be SOL

Downgrading is an option though I'm not that desperate

I can do what I need to in a Win Virtual Desktop... It just sucks that I've got to resort to doing so

If you can switch to plain IKEv2 instead of outdated IKEv1/L2TP, then you can use StrongSwan.

I use it to connect to my office via IPsec (pure IKEv2 with eap-mschap2, no L2TP), but afaik XAUTH is only for IKEv1(similar thing is called EAP in IKEv2).
I have NetworkManager but my VPN is not controlled by it: I just call ``ipsec start``. This command is kinda outdated (StrongSwan recommends ``swanctl``) but I am too lazy to update my configs

Not sure which device is installed on the other side, probably Windows box (this is why I use mschap2)


I use this slackbuild because I am on 14.2
https://slackbuilds.org/repository/1...rk/strongswan/
but you can build it from scratch: pay attention on options, there are a lot of plugins you may need depending on your authentication method etc.

It also has documentation
https://wiki.strongswan.org/projects/strongswan

Here are some examples
https://wiki.strongswan.org/projects...rationExamples

IPSec is complex protocol (actually, it is a group of protocols and ciphers), so you may need some tutorial like
https://networklessons.com/cisco/cci...tocol-security

1 members found this post helpful.

I ended up here, cause work suddenly changed vpn from a working vpnc to ipsec/l2tp which seemed a doodle (there is a NetworkManager-l2tp plugin) but then it needs xl2tp and also swan (it looks as if the ubuntu-world is catered for this, as openswan comes from the same company that's behind the xl2tp lib):https://github.com/xelerance/Openswa...-and-SonicWall

fwif, if you check Robbie Workman's Slackbuilds for say the NetworkManager-Openvpn plugin he uses a configure-option " --without-libnm-glib ". Adding that to the list enabled compiling at my end. But still it won't do a thing. Possible some configuration issue as you see what comes with strongswan....

Now have to plow through Ilyak's list to see what's going on, but I am afraid my old NetworkManager disgust will get revived. See, after an hour installing it, the NetworkManager strongswan-plugin I compiled turns up in its interface.... ok let's see what happens ;-#

EDIT.. not much ;-(

btw linux kernel-5 (as on current) seems not a problem; people have been working with it:https://wiki.strongswan.org/issues/3183

It looks that ikev1 with xauth in the newer version of strongswan is still supported, see:
https://www.strongswan.org/testing/t...ev1/index.html (note that they use linux kernel 5)


I am still in the dark about getting my comp to connect with my new work-vpn (I think it's to do with all kinds of settings or -for linux- badly chosen ikev/authorisation protocols), but the stuff is talking to each other on my system. Being on current (with NetworkManager 1.22), this has:

To upgrade just use the SBo slackbuilds, but change the version. Also, if you want to use the strongswan.org provided Networkmanager-strongswan plugin, you need to add to the strongswan.SlackBuild:

There is no SBo Slackbuild for this plugin, but with the one attached (you need to restore filenames before use), with added configure options (one of which is introduced as a variable), it got installed at my end.
Being a networking-noob no guarantuee anything will work but at least one can try...

hth

Attached Files

	NetworkManager-strongswan_SlackBuild.txt (3.0 KB, 20 views)
	README.txt (66 Bytes, 21 views)
	slack-desc.txt (906 Bytes, 33 views)
	NetworkManager-strongswan_info.txt (372 Bytes, 20 views)

1 members found this post helpful.

Openconnect is a great tool. All my work VPNs can use it (mostly Cisco)
Best of luck to you.

Thanks for the tip (the NM plugin also needed --without-libnm-glib to compile).

Well, this is what I get with the OpenConnect version:

Where you able to find any way to connect to Sonicwall Global VPN on linux?

1 members found this post helpful.