PDA

View Full Version : vpnc problem


hotdog
12th September 2008, 03:03 PM
I've been trying to connect to my work Cisco VPN using Network Manager and vpnc, but it's not working for me. I was given a .pcf file with the appropriate settings by the sysadmins at work and imported that into Network Manager when configuring a vpnc VPN connection. I also used cisco-decrypt to turn the encrypted group password key (included in the .pcf file) back into a text password to enter into the password prompt dialogue when enabling the VPN. Whatever I try Network Manager pops up an error window saying:

VPN Connection failed
The VPN connection 'aaovpn' failed because the VPN service stopped unexpectedly

An example of what goes into /var/log/messages:
Sep 12 23:27:42 localhost NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.vpnc'...
Sep 12 23:27:42 localhost NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' started (org.freedesktop.NetworkManager.vpnc), PID 3737
Sep 12 23:27:42 localhost NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' just appeared, activating connections
Sep 12 23:27:42 localhost NetworkManager: <info> VPN plugin state changed: 1
Sep 12 23:28:10 localhost NetworkManager: <info> VPN plugin state changed: 3
Sep 12 23:28:10 localhost NetworkManager: <info> VPN connection 'aaovpn' (Connect) reply received.
Sep 12 23:28:10 localhost kernel: tun0: Disabled Privacy Extensions
Sep 12 23:28:11 localhost NetworkManager: <info> VPN plugin state changed: 6
Sep 12 23:28:11 localhost NetworkManager: <WARN> connection_vpn_state_changed(): Could not process the request because no VPN connection was active.

Any ideas?

I'm running kernel 2.6.25.14-108.fc9.x86_64, NetworkManager-0.7.0-0.9.4.svn3675.fc9.x86_64 and vpnc-0.5.1-6.fc9.x86_64

sklm
13th September 2008, 12:58 AM
Are you able to connect using vpnc directly?

Try this:
- edit /etc/vpnc/default.conf according to your settings, e.g.
IPSec gateway <your server IP>
IPSec ID <your group ID>
IPSec secret <group password>
Xauth username <your username>
Domain <windows domain at work>
- run "vpnc", provide your personal password when asked.

hotdog
14th September 2008, 10:11 AM

OK, I edited /etc/vpnc/default.conf to include the server name, group ID, group password, my username and domain name (mostly copied from the .pcf file). When I then run vpnc I'm prompted for my password but after entering it I just get 'vpnc: no response from target'. I must be missing something important here, but the output isn't giving me much to go on.

srs
18th December 2008, 04:45 PM
Try to add the following to default.conf:

NAT Traversal Mode cisco-udp