Cisco VPN via vpnc - config issues

[Kevin Kempter]

Hi all ;

I've installed vpnc on Fedora 10

I have a cisco connection on a mac that works fine.

I've tried to re-create in a vpnc config file like this (I replaced the values 
for security):

IPSec gateway 1.2.3.4
IPSec ID custname
IKE Authmode psk
IPSec secret psk_secret
# your username goes here:
Xauth username assigned_username

I always get this response:
Enter password for assigned_username@1.2.3.4:
vpnc: no response from target

Can anyone help me debug this ?

Thanks in advance

[Fred Smith]

On Tue, Dec 02, 2008 at 08:14:06PM -0700, Kevin Kempter wrote:
> Hi all ;
>
> I've installed vpnc on Fedora 10
>
> I have a cisco connection on a mac that works fine.
>
> I've tried to re-create in a vpnc config file like this (I replaced the values 
> for security):
>
> IPSec gateway 1.2.3.4
> IPSec ID custname
> IKE Authmode psk
> IPSec secret psk_secret
> # your username goes here:
> Xauth username assigned_username
>
> I always get this response:
> Enter password for assigned_username@1.2.3.4:
> vpnc: no response from target
>
> Can anyone help me debug this ?

If you have a Cisco .PCF file for this connection, you can convert it
into a vpnc configuration file with the "pcf2vpnc" utility that is part
of the vpnc distribution.

I don't know if pcf2vpnc is part of the vpnc rpm that comes with F10 or
not, though I suspect it may not be. But I got the impression from your
posting that you had built vpnc from source yourself??? if so, you should
have that tool.

If that doesn't help you, you may want to look into firewall rules that
may be blocking the vpn, etc.

[Rick Stevens]

Kevin Kempter wrote:
> Hi all ;
>
> I've installed vpnc on Fedora 10
>
> I have a cisco connection on a mac that works fine.
>
> I've tried to re-create in a vpnc config file like this (I replaced the values 
> for security):
>
> IPSec gateway 1.2.3.4
> IPSec ID custname
> IKE Authmode psk
> IPSec secret psk_secret
> # your username goes here:
> Xauth username assigned_username
>
> I always get this response:
> Enter password for assigned_username@1.2.3.4:
> vpnc: no response from target
>
> Can anyone help me debug this ?

Looks like a firewall setting.  Make sure your iptables is set up to
accept the various protocols.  I have these rules:

# Protocol 50 is for encapsulated security payload...
    -A RH-Firewall-1-INPUT -p 50 -j ACCEPT
    # Protocol 51 is for authentication headers...
    -A RH-Firewall-1-INPUT -p 51 -j ACCEPT

Test first by disabling your firewall ("service iptables stop"), and
trying the connection again.  If it works, then use your favorite
firewall tailoring tool to put in those rules and try again.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer                      [e-mail] -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
-    I don't suffer from insanity...I enjoy every minute of it!      -
----------------------------------------------------------------------