Vpnc

[woodson2]

So I've had vpnc up and working to connect to my company's VPN concentrator, then all of the sudden i stopped working..Apparently they must have made a change on the Cisco concentrator...Does anyone know if there is a workaround for this problem, or if there's another Cisco compatible client available for linux?


vpnc: quick mode response rejected: (ISAKMP_N_INVALID_PAYLOAD_TYPE)(1)
this means the concentrator did not like what we had to offer.
Possible reasons are:
* concentrator configured to require a firewall
this locks out even Cisco clients on any platform expect windows
which is an obvious security improvment. There is no workaround (yet).
* concentrator configured to require IP compression
this is not yet supported by vpnc.
Note: the Cisco Concentrator Documentation recommends against using
compression, expect on low-bandwith (read: ISDN) links, because it
uses much CPU-resources on the concentrator

[smr54]

Is it definitely on the server side? That is, did you possibly update vpnc?

(This is a stab in the dark, but just to make sure it's broken on the Linux side.....another test is to try another distribution, possibly a live one, and see if their VPNC client also fails to work.)

[woodson2]

Originally Posted by smr54

Is it definitely on the server side? That is, did you possibly update vpnc?

(This is a stab in the dark, but just to make sure it's broken on the Linux side.....another test is to try another distribution, possibly a live one, and see if their VPNC client also fails to work.)

The vpnc package hasn't changed. I also tried installing from source and I get the same issue.

[smr54]

I was afraid of that. Any way of communicating with whoever may have updated the server side?

Hrrm, quick google comes up with this.


http://divby0.blogspot.com/2008/07/u...-response.html

[woodson2]

Originally Posted by smr54

I was afraid of that. Any way of communicating with whoever may have updated the server side?

Hrrm, quick google comes up with this.


http://divby0.blogspot.com/2008/07/u...-response.html

Thanks for replying...I tried what was suggested in the link last night to no avail...I can't get any help because the corporate group are all Microsoft weenies so technically I'm not supposed to be connecting to their Cisco concentrator with Linux anyways...I'm fairly certain is was a security update or setting change they made because myself and the rest of the other small linux group of users are having the same issue.

---------- Post added at 11:33 AM CST ---------- Previous post was at 11:32 AM CST ----------

Someone suggested Openconnect but I can't figure out how to pass the VPN shared secret on the command line..

[smr54]

Not familiar with openconnect.
Hrm, man page does seem lacking in that info, though I see there's an option to use a vpnc script.

http://www.linuxcertif.com/man/8/openconnect/

has a link to contact the author--worth dropping him a line?

---------- Post added at 01:31 PM CST ---------- Previous post was at 01:28 PM CST ----------

This looks helpful too (for openconnect)
http://www.infradead.org/openconnect.html

I get the impression you set it to use your existing vpnc-script which should point to your conf file.