How to Install Cisco VPN Client 4.0.4B in Fedora Core 2

[Daniel Ulfe]

Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
(kernel 2.6 compatible). Somebody in this mail-list has this working
in Fedora-Core 2?.

Feew weeks back I install sucesfully in kernel 2.6.6-1.427smp  and
work properly but after install kernel  2.6.6-1.435smp (using same
profile file at /etc/CiscoSystemsVPNClient/Profiles    I have receive
this message:

Cisco Systems VPN Client Version 4.0.4 (B)
Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.6-1.435.2.1smp #1 SMP Wed Jun 30 15:54:05 EDT 2004 i686

Initializing the VPN connection.
Contacting the gateway at xxx.xxx.xxx.xxx
Secure VPN Connection terminated locally by the Client
Reason: Failed to establish a VPN connection.
There are no new notification messages at this time.

Before that .....In /var/log/messages I can see:

after /etc/init.d/vpnclient_init start at startup

Jul  2 16:07:54 moruroa kernel: Cisco Systems VPN Client Version 4.0.4
(B) kernel module loaded

I can see cipsec0 interface with ifconfig -a command.

Good news was that works fine sometime before update my system with
old kernel. I try everithing.....unistall and install in old-kernel.

Any idea?

Regards

Daniel Ulfe

[Anders Damm]

On Friday 02 July 2004 16.14, Daniel Ulfe wrote:
> Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
> (kernel 2.6 compatible). Somebody in this mail-list has this working
> in Fedora-Core 2?.
>
> Feew weeks back I install sucesfully in kernel 2.6.6-1.427smp  and
> work properly but after install kernel  2.6.6-1.435smp (using same
> profile file at /etc/CiscoSystemsVPNClient/Profiles    I have receive
> this message:
>
> Cisco Systems VPN Client Version 4.0.4 (B)
> Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
> Client Type(s): Linux
> Running on: Linux 2.6.6-1.435.2.1smp #1 SMP Wed Jun 30 15:54:05 EDT 2004
> i686
>
> Initializing the VPN connection.
> Contacting the gateway at xxx.xxx.xxx.xxx
> Secure VPN Connection terminated locally by the Client
> Reason: Failed to establish a VPN connection.
> There are no new notification messages at this time.
>
> Before that .....In /var/log/messages I can see:
>
> after /etc/init.d/vpnclient_init start at startup
>
> Jul  2 16:07:54 moruroa kernel: Cisco Systems VPN Client Version 4.0.4
> (B) kernel module loaded
>
> I can see cipsec0 interface with ifconfig -a command.
>
> Good news was that works fine sometime before update my system with
> old kernel. I try everithing.....unistall and install in old-kernel.
>
> Any idea?
>
> Regards
>
> Daniel Ulfe

Hi!
I don't have a solution for this problem, but have you tryed vpnc (+ kvpnc)?
I use them insted of the Cisco driver, and they don't need any messy modules 
to work (And you get a nice GIU with kvpnc...)

Regards 
Anders D.

[Daniel Ulfe]

when can I download this software? Is a RPM package? Works fine if I
use as VPN Server a Cisco PIX Firewall?

Regards and Thanks

Daniel Ulfe

On Fri, 2 Jul 2004 16:43:29 +0200, Anders Damm  wrote:
> On Friday 02 July 2004 16.14, Daniel Ulfe wrote:
> > Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
> > (kernel 2.6 compatible). Somebody in this mail-list has this working
> > in Fedora-Core 2?.
> >
> > Feew weeks back I install sucesfully in kernel 2.6.6-1.427smp  and
> > work properly but after install kernel  2.6.6-1.435smp (using same
> > profile file at /etc/CiscoSystemsVPNClient/Profiles    I have receive
> > this message:
> >
> > Cisco Systems VPN Client Version 4.0.4 (B)
> > Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
> > Client Type(s): Linux
> > Running on: Linux 2.6.6-1.435.2.1smp #1 SMP Wed Jun 30 15:54:05 EDT 2004
> > i686
> >
> > Initializing the VPN connection.
> > Contacting the gateway at xxx.xxx.xxx.xxx
> > Secure VPN Connection terminated locally by the Client
> > Reason: Failed to establish a VPN connection.
> > There are no new notification messages at this time.
> >
> > Before that .....In /var/log/messages I can see:
> >
> > after /etc/init.d/vpnclient_init start at startup
> >
> > Jul  2 16:07:54 moruroa kernel: Cisco Systems VPN Client Version 4.0.4
> > (B) kernel module loaded
> >
> > I can see cipsec0 interface with ifconfig -a command.
> >
> > Good news was that works fine sometime before update my system with
> > old kernel. I try everithing.....unistall and install in old-kernel.
> >
> > Any idea?
> >
> > Regards
> >
> > Daniel Ulfe
>
> Hi!
> I don't have a solution for this problem, but have you tryed vpnc (+ kvpnc)?
> I use them insted of the Cisco driver, and they don't need any messy modules
> to work (And you get a nice GIU with kvpnc...)
>
> Regards
> Anders D.
> --
> Anders Damm
>
> The box said: "Requires Windows 98/2000/NT/XP or better"
> So, I installed Linux
>
> --
> fedora-list mailing list
> [e-mail]
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

[Daniel Ulfe]

Sorry for my english...in previous message was Where...not When....

On Fri, 2 Jul 2004 16:55:05 +0200, Daniel Ulfe  wrote:
> when can I download this software? Is a RPM package? Works fine if I
> use as VPN Server a Cisco PIX Firewall?
>
> Regards and Thanks
>
> Daniel Ulfe
>
> On Fri, 2 Jul 2004 16:43:29 +0200, Anders Damm  wrote:
> > On Friday 02 July 2004 16.14, Daniel Ulfe wrote:
> > > Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
> > > (kernel 2.6 compatible). Somebody in this mail-list has this working
> > > in Fedora-Core 2?.
> > >
> > > Feew weeks back I install sucesfully in kernel 2.6.6-1.427smp  and
> > > work properly but after install kernel  2.6.6-1.435smp (using same
> > > profile file at /etc/CiscoSystemsVPNClient/Profiles    I have receive
> > > this message:
> > >
> > > Cisco Systems VPN Client Version 4.0.4 (B)
> > > Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
> > > Client Type(s): Linux
> > > Running on: Linux 2.6.6-1.435.2.1smp #1 SMP Wed Jun 30 15:54:05 EDT 2004
> > > i686
> > >
> > > Initializing the VPN connection.
> > > Contacting the gateway at xxx.xxx.xxx.xxx
> > > Secure VPN Connection terminated locally by the Client
> > > Reason: Failed to establish a VPN connection.
> > > There are no new notification messages at this time.
> > >
> > > Before that .....In /var/log/messages I can see:
> > >
> > > after /etc/init.d/vpnclient_init start at startup
> > >
> > > Jul  2 16:07:54 moruroa kernel: Cisco Systems VPN Client Version 4.0.4
> > > (B) kernel module loaded
> > >
> > > I can see cipsec0 interface with ifconfig -a command.
> > >
> > > Good news was that works fine sometime before update my system with
> > > old kernel. I try everithing.....unistall and install in old-kernel.
> > >
> > > Any idea?
> > >
> > > Regards
> > >
> > > Daniel Ulfe
> >
> > Hi!
> > I don't have a solution for this problem, but have you tryed vpnc (+ kvpnc)?
> > I use them insted of the Cisco driver, and they don't need any messy modules
> > to work (And you get a nice GIU with kvpnc...)
> >
> > Regards
> > Anders D.
> > --
> > Anders Damm
> >
> > The box said: "Requires Windows 98/2000/NT/XP or better"
> > So, I installed Linux
> >
> > --
> > fedora-list mailing list
> > [e-mail]
> > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

[Anders Damm]

Trye http://home.gna.org/kvpnc. You will also need vpnc (link in the download 
section). Vpnc needs som extra rpm's (GNU stuff if I recal right...) 
:-)
Anders Damm

On Friday 02 July 2004 16.56, Daniel Ulfe wrote:
> Sorry for my english...in previous message was Where...not When....
>
> On Fri, 2 Jul 2004 16:55:05 +0200, Daniel Ulfe  wrote:
> > when can I download this software? Is a RPM package? Works fine if I
> > use as VPN Server a Cisco PIX Firewall?
> >
> > Regards and Thanks
> >
> > Daniel Ulfe
> >
> > On Fri, 2 Jul 2004 16:43:29 +0200, Anders Damm

wrote:
> > > On Friday 02 July 2004 16.14, Daniel Ulfe wrote:
> > > > Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
> > > > (kernel 2.6 compatible). Somebody in this mail-list has this working
> > > > in Fedora-Core 2?.
> > > >
> > > > Feew weeks back I install sucesfully in kernel 2.6.6-1.427smp  and
> > > > work properly but after install kernel  2.6.6-1.435smp (using same
> > > > profile file at /etc/CiscoSystemsVPNClient/Profiles    I have receive
> > > > this message:
> > > >
> > > > Cisco Systems VPN Client Version 4.0.4 (B)
> > > > Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
> > > > Client Type(s): Linux
> > > > Running on: Linux 2.6.6-1.435.2.1smp #1 SMP Wed Jun 30 15:54:05 EDT
> > > > 2004 i686
> > > >
> > > > Initializing the VPN connection.
> > > > Contacting the gateway at xxx.xxx.xxx.xxx
> > > > Secure VPN Connection terminated locally by the Client
> > > > Reason: Failed to establish a VPN connection.
> > > > There are no new notification messages at this time.
> > > >
> > > > Before that .....In /var/log/messages I can see:
> > > >
> > > > after /etc/init.d/vpnclient_init start at startup
> > > >
> > > > Jul  2 16:07:54 moruroa kernel: Cisco Systems VPN Client Version
> > > > 4.0.4 (B) kernel module loaded
> > > >
> > > > I can see cipsec0 interface with ifconfig -a command.
> > > >
> > > > Good news was that works fine sometime before update my system with
> > > > old kernel. I try everithing.....unistall and install in old-kernel.
> > > >
> > > > Any idea?
> > > >
> > > > Regards
> > > >
> > > > Daniel Ulfe
> > >
> > > Hi!
> > > I don't have a solution for this problem, but have you tryed vpnc (+
> > > kvpnc)? I use them insted of the Cisco driver, and they don't need any
> > > messy modules to work (And you get a nice GIU with kvpnc...)
> > >
> > > Regards
> > > Anders D.
> > > --
> > > Anders Damm
> > >
> > > The box said: "Requires Windows 98/2000/NT/XP or better"
> > > So, I installed Linux
> > >
> > > --
> > > fedora-list mailing list
> > > [e-mail]
> > > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

[Kaj J.Niemi]

> Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
> (kernel 2.6 compatible). Somebody in this mail-list has this working
> in Fedora-Core 2?.

Yes, I use it almost every day. Currently I am running it with kernel
2.6.7-1.459 (i686).
> Initializing the VPN connection.
> Contacting the gateway at xxx.xxx.xxx.xxx
> Secure VPN Connection terminated locally by the Client
> Reason: Failed to establish a VPN connection.

Is your BinDirPath set correctly in vpnclient.ini? If nothing else helps
you might want to enable logging. :)
> Running on: Linux 2.6.6-1.435.2.1smp #1 SMP Wed Jun 30 15:54:05 EDT 2004 i686

The release notes mention that SMP kernels are not supported with the
VPN client. You might want to refer to the release notes for more information.
http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel404/404dclnt.htm

If you are able to build your own rpms (relatively easy), you can grab the
kernel-module-ciscovpn*.nosrc.rpm from http://www.a51.org/sw/fedora/ and
play with it.

% vpnclient connect foo
Cisco Systems VPN Client Version 4.0.4 (B)
Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.7-1.459 #1 Mon Jun 28 16:20:56 EDT 2004 i686

Initializing the VPN connection.
Initiating TCP to 10.10.10.10, port 10000
Contacting the gateway at 10.10.10.10
Authenticating user.
Negotiating security policies.
Your VPN connection is secure.

VPN tunnel information.
Client address: 192.168.128.66
Server address: 10.10.10.10
Encryption: 256-bit AES
Authentication: HMAC-SHA
IP Compression: None
NAT passthrough is active on port TCP 10000
Local LAN Access is disabled

// kaj

[Daniel Ulfe]

well. my vpnclient.ini is:

[main]
BinDirPath=/usr/local/bin
EnableLog=1
[LOG.IKE]
LogLevel=3
[LOG.CM]
LogLevel=3
[LOG.CVPND]
LogLevel=3
[LOG.XAUTH]
LogLevel=3
[LOG.CERT]
LogLevel=3
[LOG.IPSEC]
LogLevel=3
[LOG.CLI]
LogLevel=3

As you can see EnableLog=1 but I don find this files at all. I Cisco
documentation nothing about this files in Linux platforms. Any clue?

Regards.

Daniel

PD: I test vpnc and works fine form me (kvpnc GUI fornt-end doen't
work for me) , but there are one reason to try Cisco VPN Client: You
can't connect to VPN and to Internet at same time.

On Fri,  2 Jul 2004 19:54:26 +0300 (EEST), Kaj J.Niemi
 wrote:
> > Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
> > (kernel 2.6 compatible). Somebody in this mail-list has this working
> > in Fedora-Core 2?.
>
> Yes, I use it almost every day. Currently I am running it with kernel
> 2.6.7-1.459 (i686).
> > Initializing the VPN connection.
> > Contacting the gateway at xxx.xxx.xxx.xxx
> > Secure VPN Connection terminated locally by the Client
> > Reason: Failed to establish a VPN connection.
>
> Is your BinDirPath set correctly in vpnclient.ini? If nothing else helps
> you might want to enable logging. :)
> > Running on: Linux 2.6.6-1.435.2.1smp #1 SMP Wed Jun 30 15:54:05 EDT 2004 i686
>
> The release notes mention that SMP kernels are not supported with the
> VPN client. You might want to refer to the release notes for more information.
> http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel404/404dclnt.htm
>
> If you are able to build your own rpms (relatively easy), you can grab the
> kernel-module-ciscovpn*.nosrc.rpm from http://www.a51.org/sw/fedora/ and
> play with it.
>
> % vpnclient connect foo
> Cisco Systems VPN Client Version 4.0.4 (B)
> Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
> Client Type(s): Linux
> Running on: Linux 2.6.7-1.459 #1 Mon Jun 28 16:20:56 EDT 2004 i686
>
> Initializing the VPN connection.
> Initiating TCP to 10.10.10.10, port 10000
> Contacting the gateway at 10.10.10.10
> Authenticating user.
> Negotiating security policies.
> Your VPN connection is secure.
>
> VPN tunnel information.
> Client address: 192.168.128.66
> Server address: 10.10.10.10
> Encryption: 256-bit AES
> Authentication: HMAC-SHA
> IP Compression: None
> NAT passthrough is active on port TCP 10000
> Local LAN Access is disabled
>
> // kaj
>
> --
> fedora-list mailing list
> [e-mail]
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

[Kaj J.Niemi]

> well. my vpnclient.ini is:
> [main]
> BinDirPath=/usr/local/bin

Is "cvpnd" located in /usr/local/bin? If not, you need to change that line.
You could also try "strace -f vpnclient connect somewhere" and see what it
really fails on..
> As you can see EnableLog=1 but I don find this files at all. 
> I Cisco documentation nothing about this files in Linux platforms. Any clue?

Start the logger first with "ipseclog /tmp/logfile &" and then execute the
vpnclient command.
> but there are one reason to try Cisco VPN Client: You can't connect to
> VPN and to Internet at the same time.

I really like the split tunneling feature too :)

// kaj

[Daniel Ulfe]

Thank-you very much. My Cisco VPN Client 4.0.4B is working properly in
kernel 2.6.6-1.435.2.1smp. My problem was Incorrect HASH in group
Password afther look at the ipseclog.

It's amazing response time in this list

Thank-you and regards form Spain

Daniel

On Sat,  3 Jul 2004 02:13:05 +0300 (EEST), Kaj J.Niemi
 wrote:
> > well. my vpnclient.ini is:
> > [main]
> > BinDirPath=/usr/local/bin
>
> Is "cvpnd" located in /usr/local/bin? If not, you need to change that line.
> You could also try "strace -f vpnclient connect somewhere" and see what it
> really fails on..
> > As you can see EnableLog=1 but I don find this files at all.
> > I Cisco documentation nothing about this files in Linux platforms. Any clue?
>
> Start the logger first with "ipseclog /tmp/logfile &" and then execute the
> vpnclient command.
> > but there are one reason to try Cisco VPN Client: You can't connect to
> > VPN and to Internet at the same time.
>
> I really like the split tunneling feature too :)
>
> // kaj
>
> --
> fedora-list mailing list
> [e-mail]
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

[Daniel Ulfe]

Now I trying to compile module for all kernel version on my FC2 box
and have this problem when I start vpnclient_init

kernel: cisco_ipsec: version magic '2.6.6-1.427smp SMP 686 REGPARM
4KSTACKS gcc-3.3' should be '2.6.6-1.435smp SMP 686 REGPARM 4KSTACKS
gcc-3.3'

I compile modules in 2.6.6-1.435smp with this kernel UP. I have
installed too 2.6.6-1.427smp but I don't know why this version appears
in kernel magic.

Module compiled previously in 2.6.6-1.435.2.1smp still working.

Any idea?

Daniel

PD: When I compile CISCO VPN client in each kernel version I respond:
---------------------------------------------------------------------------------------------------------------------------------
[root@moruroa vpnclient]# ./vpn_install
Cisco Systems VPN Client Version 4.0.4 (B) Linux Installer
Copyright (C) 1998-2001 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms.

Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.

For RedHat 6.x users these files are installed in /usr/src/linux by default
For RedHat 7.x users these files are installed in /usr/src/linux-2.4 by default
For Suse 7.3 users these files are installed in
/usr/src/linux-2.4.10.SuSE by default

Directory containing linux kernel source code
[/lib/modules/2.6.6-1.435.2.1smp/build]

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.6-1.435.2.1smp/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/lib/modules/2.6.6-1.435.2.1smp/build" will be
used to build the module.

Is the above correct [y]
------------------------------------------------------------------------------------------------------------------------
Note about "Directory containing linux kernel source code"

On Sat, 3 Jul 2004 07:42:07 +0200, Daniel Ulfe  wrote:
> Thank-you very much. My Cisco VPN Client 4.0.4B is working properly in
> kernel 2.6.6-1.435.2.1smp. My problem was Incorrect HASH in group
> Password afther look at the ipseclog.
>
> It's amazing response time in this list
>
> Thank-you and regards form Spain
>
> Daniel
>
> On Sat,  3 Jul 2004 02:13:05 +0300 (EEST), Kaj J.Niemi
>  wrote:
> > > well. my vpnclient.ini is:
> > > [main]
> > > BinDirPath=/usr/local/bin
> >
> > Is "cvpnd" located in /usr/local/bin? If not, you need to change that line.
> > You could also try "strace -f vpnclient connect somewhere" and see what it
> > really fails on..
> > > As you can see EnableLog=1 but I don find this files at all.
> > > I Cisco documentation nothing about this files in Linux platforms. Any clue?
> >
> > Start the logger first with "ipseclog /tmp/logfile &" and then execute the
> > vpnclient command.
> > > but there are one reason to try Cisco VPN Client: You can't connect to
> > > VPN and to Internet at the same time.
> >
> > I really like the split tunneling feature too :)
> >
> > // kaj
> >
> > --
> > fedora-list mailing list
> > [e-mail]
> > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

[Phil Schaffner]

On Fri, 2004-07-02 at 16:14 +0200, Daniel Ulfe wrote:
> Hello everybody. I'm triying to install Cisco VPN Client 4.0.4B
> (kernel 2.6 compatible). Somebody in this mail-list has this working
> in Fedora-Core 2?.

Have 4.0.4A working with kernel-2.6.6-1.435.2.3

Just did vpn_install in vpnclient directory and it worked.

According to an earlier post from Dave Rinker:
> vpnclient-linux-4.0.4.A-k9.tar.gz
> Linux VPN Client 4.0.4.A (2.6 kernel supported)
>
> vpnclient-linux-4.0.4.B-k9.tar.gz
> Linux VPN Client 4.0.4.B (SuSe 9.1 support)

Phil