cisco vpn client for ubuntu

公司用的是cisco vpn ,并且提供了一个打包好的客户端,可是是在windows下使用的.

最近一直用ubuntu,想把这个也挪到linux下用

有for linux的client,于是下载之。解压缩并编译,结果出错了

make -C /lib/modules/2.6.24-16-generic/build SUBDIRS=/usr/src/vpnclient modules
make[1]: Entering directory `/usr/src/linux-headers-2.6.24-16-generic'
  CC [M]  /usr/src/vpnclient/linuxcniapi.o
In file included from /usr/src/vpnclient/Cniapi.h:15,
                 from /usr/src/vpnclient/linuxcniapi.c:31:
/usr/src/vpnclient/GenDefs.h:113: 错误: 与‘uintptr_t’类型冲突
include/linux/types.h:40: 错误: ‘uintptr_t’的上一个声明在此
make[2]: *** [/usr/src/vpnclient/linuxcniapi.o] 错误 1
make[1]: *** [_module_/usr/src/vpnclient] 错误 2
make[1]: Leaving directory `/usr/src/linux-headers-2.6.24-16-generic'
make: *** [default] 错误 2
Failed to make module "cisco_ipsec.ko".

开始以为是没有安装开发包和内核头文件,仔细看了看不是这样,提示头文件里面有冲突.原来是需要补丁,立刻搜索补丁,需要说明的是,补丁要和内核版本一致

查看内核版本

coolerfeng@coolerfeng-desktop:/usr/src/vpnclient$ uname -r
2.6.24-16-generic

需要下载2.6.24的

wget -q http://projects.tuxx-home.at/cis ... t-linux-2.6.24.diff

然后patch一下

patch < vpnclient-linux-2.6.24.diff

接下来重新安装

sudo ./vpn_install

ok,这次编译成功了。

确保当前普通用户能使用。执行sudo chmod 4111 /opt/cisco-vpnclient/bin/cvpnd

开始使用,启动clientvpn。执行:$ sudo /etc/init.d/vpnclient_init start

然后要把windows下配置好的配置文件复制过来

在windows操作系统cisco client目录下的profilles,复制扩展名为pcf的文件到

/etc/opt/cisco-vpnclient/Profiles

然后开始连接,这里myVPN是pcf文件的文件名。

$ sudo vpnclient connect myVPN

接下来就是输入用户名和密码了,ok,连接成功了

coolerfeng@coolerfeng-desktop:~$ sudo vpnclient connect SOHU_CNC
Cisco Systems VPN Client Version 4.8.01 (0640)
Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.24-16-generic #1 SMP Thu Apr 10 13:23:42 UTC 2008 i686
Config file directory: /etc/opt/cisco-vpnclient

Initializing the VPN connection.
Contacting the gateway at 202.106.180.11
User Authentication for SOHU_CNC...

The server has requested the following information to complete the user authentication:

Username [weizhou]: weizhou
Password []:
Authenticating user.
Negotiating security policies.
Securing communication channel.

Your VPN connection is secure.

VPN tunnel information.
Client address: 10.1.8.249
Server address: 202.106.180.11
Encryption: 168-bit 3-DES
Authentication: HMAC-MD5
IP Compression: None
NAT passthrough is active on port UDP 4500
Local LAN Access is disabled

公司的网络还需要二次验证,还要打开浏览器,访问一个内网ip,然后再次输入用户名密码

现在可以使用了。