Linux 2.6.10 cisco vpn client freezes system

archdev · 01-18-2005, 02:39 PM

At first I was trying with a 2.6.9 kernel... after i up'ed it to a 2.6.10 it worked like a charm. thanks

octothorpe · 01-18-2005, 02:56 PM

Quote:

Originally posted by archdev
I am still having trouble installing the client

Am running FC3, following instructions found elsewhere to install kernel source

after rpm'ing kernel-2.6.9-1.724.src.rpm
I did:

rpmbuild -bp --target=noarch /usr/src/redhat/SPECS/kernel-2.6.spec

So then i untar the vpn client
apply patch
specify kernel source in installatoin as
/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9/

So dunno what I did wrong along the way...

Use the /lib/modules/<kernel-version>/build/ directory as the source directory

e.g. for the latest FC3 kernel:

./driver_build.sh /lib/modules/2.6.10-1.741_FC3/build/

archdev · 01-19-2005, 08:19 PM

Quote:

Originally posted by octothorpe
Use the /lib/modules/<kernel-version>/build/ directory as the source directory

e.g. for the latest FC3 kernel:

./driver_build.sh /lib/modules/2.6.10-1.741_FC3/build/

Haha that too.... although when I did that before upgrading my kernel it installed and froze upon using it... with the new kernel it installed and worked fine...thanks though

Yozho · 01-25-2005, 12:29 AM

I had to implement both yours and Urr's fixes to get it to work with 2.6.10 in FC3.

Any idea what had changed to break it?

cragland · 01-31-2005, 06:37 PM

Fellas,

I did the patch and that took care of the add net_device, but I get more errors. Thanks in advance for your help

cole
cragland@firstam.com

FC/3 -- 2.6.10-1.741_FC3
* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.10-1.741_FC3/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/usr/src/linux-2.6.10" will be used to build the module.

Is the above correct [y]

Making module
make -C /usr/src/linux-2.6.10 SUBDIRS=/root/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.10'
CC [M] /root/vpnclient/linuxcniapi.o
CC [M] /root/vpnclient/frag.o
CC [M] /root/vpnclient/IPSecDrvOS_linux.o
CC [M] /root/vpnclient/interceptor.o
/root/vpnclient/interceptor.c: In function `do_cni_send':
/root/vpnclient/interceptor.c:733: warning: passing arg 1 of `skb_checksum_help' from incompatible pointer type
/root/vpnclient/interceptor.c: In function `interceptor_mod_init':
/root/vpnclient/interceptor.c:896: error: incompatible type for argument 1 of `r egister_netdev'
/root/vpnclient/interceptor.c:903: error: incompatible type for argument 1 of `r egister_netdevice_notifier'
/root/vpnclient/interceptor.c: In function `interceptor_mod_cleanup':
/root/vpnclient/interceptor.c:919: error: incompatible type for argument 1 of `u nregister_netdev'
make[2]: *** [/root/vpnclient/interceptor.o] Error 1
make[1]: *** [_module_/root/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.10'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".

archdev · 02-02-2005, 06:25 PM

Looks like you did what I did first, using the wrong location of the kernel src

Quote:

Originally posted by octothorpe
Use the /lib/modules/<kernel-version>/build/ directory as the source directory

bafisk · 02-07-2005, 08:30 AM

Thanks for the patch, it fixed my compilation issues as well.....using 2.6.10-1.760_FC3

bafisk · 02-08-2005, 07:55 AM

Well the VPN is up and everything works but HTTPS across the VPN.....SSH works, HTTP, FTP works....any ideas?

dfelicia · 03-13-2005, 03:18 PM

Running 2.6.10-1.766_FC3smp. Applied patch and installed. Tunnel creation works fine... I can read Exchange mail with Evolution + Exchange connector, download and send attachments.

Problem is that if I ssh to any box and do an 'ls' in any directory with more than 4 or 5 objects, the ssh session hangs. Similarly, I cannot access any web site - browser will hang. (Strange that e-mail works flawlessly.)

If I scp 1 big tar file, no problem. If I scp -r a bunch of small files, it hangs.

Any ideas? This client is basically useless for me, right now, as I can read mail but can't work on any remote system.

Per some other post, I also tried manually setting MTU to 1500. No difference in behavior.

I have a fast broadband connection (about 5 Mbps down, 1 up). The Winblows version (running on XP) works fine, but my primary workstation is Linux and it would be great to not have to boot Windows just to do a little work.

tallfred · 03-28-2005, 01:07 PM

dfelicia, I had the same problem for a long time. I solved it by changing
the addresing of my local network. The remote network used the
same ones. RFC 1853 defines three ranges
(192.168.0.0/16, 10.0.0.0/8, and 172.16.0.0/12)
although if the remote networks claims all three you can always use
something completely bogus like 3.3.3.0/24 and lock yourself
out of a tiny fraction of the internet. I recommend starting with
172.22.2.0/24. Good luck.

friver01 · 06-28-2005, 03:00 PM

Urr and SLACKER775:

Thanks so much for posting the patch and providing instructions to use 'patch' to apply it! I was kind of lost and strugling to make it work but after using the PATCH command to apply the patch everything worked just fine.

THANKS AGAIN!

Mandriva 2005 LE
2.6.11-6mdk

repawn · 10-21-2005, 11:42 PM

Quote:

Originally posted by slacker775
Copy/paste this patch:

Code:

--- interceptor.c.orig 2005-01-04 14:55:44.246848280 -0500 +++ interceptor.c 2005-01-04 14:56:15.955027904 -0500 @@ -236,6 +236,24 @@ dev_kfree_skb(skb); return 0; } + +static int +inline supported_device(struct net_device* dev) +{ + int rc=0; + + if(dev->type == ARPHRD_ETHER) + { + rc=1; + } + else if(dev->type == ARPHRD_PPP) + { + rc=1; + } + + return rc; +} + static int add_netdev(struct net_device *dev) { @@ -476,23 +494,6 @@ s->rc = 0; } -static int -inline supported_device(struct net_device* dev) -{ - int rc=0; - - if(dev->type == ARPHRD_ETHER) - { - rc=1; - } - else if(dev->type == ARPHRD_PPP) - { - rc=1; - } - - return rc; -} - static BINDING * getbindingbydev(struct net_device *dev)

and apply it with 'patch -p0 < patch.txt' when you are in the vpnclient directory. All that is being done is modifying interceptor.c by moving the supported_device() function definition before the add_netdev() call. I was able to build it today against FC3s new 724 kernel. If copy/paste on the patch doesn't take, I can email it to you direct.

Awesome! This worked perfectly in Ubuntu 5.10 I have been working on this problem for about 2.5 days. Thanks for posting this!

arnehe · 01-04-2006, 04:07 PM

Quote:

Originally Posted by slacker775

Copy/paste this patch:
...
and apply it
...

This was the solution to my problem - Thanks, slacker775!

panix · 02-15-2006, 11:32 AM

Thanks for the great post! I was able to resolve system freeze problem in my FC4. But I was NOT able to ssh my remote host through VPN. It says:

ssh: connect to host xxx port 22: Connection timed out

Any idea what's goning on here? TIA

-P

panix · 02-17-2006, 01:49 AM

Quote:

Originally Posted by panix

Thanks for the great post! I was able to resolve system freeze problem in my FC4. But I was NOT able to ssh my remote host through VPN. It says:

ssh: connect to host xxx port 22: Connection timed out

Any idea what's goning on here? TIA

-P

Finally, I figured out the problem was due to incorrect profile used. Now it works like charm...

Thanks for the patch!!!