LinuxQuestions.org - Installing vpnclient

- Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)

- - Installing vpnclient (https://www.linuxquestions.org/questions/linux-software-2/installing-vpnclient-616167/)

Installing vpnclient

My school requires a vpn client in order to use wireless and they supply both a linux and a windows version for download. I had no problems with the windows version when I used it but I cannot get the linux version to install. The instructions from school can be found here. When I call sudo ./vpn_install I run into problems:

Code:

* Binaries will be installed in "/usr/local/bin".



* Modules will be installed in "/lib/modules/2.6.22-14-generic/CiscoVPN".



* The VPN service will be started AUTOMATICALLY at boot time.



* Kernel source from "/lib/modules/2.6.22-14-generic/build" will be used to build the module.







Is the above correct [y]







Making module



make -C /lib/modules/2.6.22-14-generic/build SUBDIRS=/home/tamona/Desktop/vpnclient modules



make[1]: Entering directory `/usr/src/linux-headers-2.6.22-14-generic'



  CC [M]  /home/tamona/Desktop/vpnclient/linuxcniapi.o



/home/tamona/Desktop/vpnclient/linuxcniapi.c:12:26: error: linux/config.h: No such file or directory



/home/tamona/Desktop/vpnclient/linuxcniapi.c: In function ‘CniInjectReceive’:



/home/tamona/Desktop/vpnclient/linuxcniapi.c:297: warning: implicit declaration of function ‘skb_set_timestamp’



/home/tamona/Desktop/vpnclient/linuxcniapi.c:331: error: ‘struct sk_buff’ has no member named ‘nh’



/home/tamona/Desktop/vpnclient/linuxcniapi.c:332: error: ‘struct sk_buff’ has no member named ‘mac’



/home/tamona/Desktop/vpnclient/linuxcniapi.c: In function ‘CniInjectSend’:



/home/tamona/Desktop/vpnclient/linuxcniapi.c:454: error: ‘struct sk_buff’ has no member named ‘mac’



/home/tamona/Desktop/vpnclient/linuxcniapi.c:455: error: ‘struct sk_buff’ has no member named ‘nh’



/home/tamona/Desktop/vpnclient/linuxcniapi.c:458: error: ‘struct sk_buff’ has no member named ‘h’



/home/tamona/Desktop/vpnclient/linuxcniapi.c:458: error: ‘struct sk_buff’ has no member named ‘nh’



make[2]: *** [/home/tamona/Desktop/vpnclient/linuxcniapi.o] Error 1



make[1]: *** [_module_/home/tamona/Desktop/vpnclient] Error 2



make[1]: Leaving directory `/usr/src/linux-headers-2.6.22-14-generic'



make: *** [default] Error 2



Failed to make module "cisco_ipsec.ko".

Any idea why this is failing.

You appear to be missing the header files.
"You MUST have kernel sources installed prior to installation."

I think it is very strange that it requires such an old version of redhat and glib. But maybe it's just a minimum. If possible, maybe You should look for a pre-compiled package (rpm) for Your Linux instead of battling with building Your own. Unless that vpn*tar.gz has stuff that is required to funtion with Your schools connection. Have a look at vpnc, read up on it at http://www.unix-ag.uni-kl.de/~massar/vpnc/, a Cisco-compliant vpn-client. And maybe You just need to copy some config files from the original package.

Or install the kernel source and try again.

/Lakris

I looked at vpnc as well and got it installed but the tar has some configuration files in it that set up the connection. I looked at their contents and the data in them didnt seem to match up with the information that vpnc asked me for so I couldn't configure it.

Quote:

Originally Posted by tamoneya (Post 3034597)

Well, i managed to configure it in Linux given info from a windows-pcf file, the names and format were just a little different. The IPsec secret was encrypted but there are simple decryption tools available on the net.
My /etc/vpnc.conf looks something like (readable only by root)

IPSec gateway 1.2.3.4
IPSec ID companyVPN
IPSec secret asecretword
Xauth username lakris
Xauth password mysecretpassword
Target networks 172.22.0.0/16 192.168.0.0/16

Could be worth a try...

/Lakris

where can i find these decryption cools. I would normally google it myself but i barely know what I am seaching for. I don't know the encryption scheme that cisco uses for IPsec vpn.
I am also having trouble finding this IPSec ID. The word "ID" occurs no where in the pcf file that I have.

I just found this tutorial about decrypting the IPSec Secret but I am still having trouble. http://www.spiration.co.uk/post/1293. When I try to connect with sudo vpnc it says

Code:

vpnc: hash comparison failed:  (ISAKMP_N_AUTHENTICATION_FAILED)(24)

check group password!

When I decrypted the grouppwd i got a 6 character alphanumeric string which is very different from what the guy in the tutorial got. I think I decrypted it wrong but can't see where I messed up.

EDIT: I found the error. I entered the network ID wrong. The 6 character ipsec secret was correct.

Quote:

Originally Posted by tamoneya (Post 3035321)

I just found this tutorial about decrypting the IPSec Secret but I am still having trouble. http://www.spiration.co.uk/post/1293. When I try to connect with sudo vpnc it says

Code:

vpnc: hash comparison failed:  (ISAKMP_N_AUTHENTICATION_FAILED)(24)

check group password!

Great. So You have it working now?
Btw, what Linux do You have?

I am using Ubuntu 7.10 x86 on a T61 Lenovo Thinkpad

Quote:

Originally Posted by tamoneya (Post 3035402)

I am using Ubuntu 7.10 x86 on a T61 Lenovo Thinkpad

Haven't You tried the nm-applet and configure Your tunnel through that? I am using it for both Microsoft and Cisco VPN, it works just fine. Except that I can only use one at a time.

/Lakris

It doesnt matter any more since it is working. I am fairly happy with how it has turned out actually.