Terry : Arch Linux vpnc

Instructions:

1. Install vpnc, by default the vpnc in core and AUR already has hybrid support. No need to recompile vpnc like Ubuntu.

0.5.3-1 from core

pacman -S vpnc

vpnc-svn from AUR

yaourt -S vpnc-svn

2. Get the Oracle root certificate and converted pcf files by following the instructions here:

http://connect.oraclecorp.com/activities/844113-working-vpnc-with-network-manager-integration-on-karmic-64-bit

Download: Oracle certificate
SHA1(oracle.cert)= 847b9ff07fdffa8dbab4f27d677758c2312c2244

A sample /etc/vpnc/start.conf

IPSec ID Ora-Hybrid-Gen
IPSec gateway au-enc.oracle.com
IPSec secret xxxxxxxx

Xauth username username_cc
Application version Cisco Systems VPN Client 4.8.0 (A):Linux
IKE Authmode hybrid
CA-File /etc/vpnc/oracle.cert

I preferred to start vpnc in the background by using the rc.d script. Replace au-enc.oracle.com with hq-enc.oracle.com if you wish to connect to HQ.

3. Start vpnc

[terry@tux ~]# /etc/rc.d/vpnc start
:: Connecting to VPN                                                     [BUSY]
Enter password for weicwang_au@hq-enc.oracle.com:
VPNC started in background (pid: 1588)...
                                                                         [DONE]

4. Check the vpn connection:

[terry@tux ~]# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:0C:29:5B:54:ED
          inet addr:10.187.65.196  Bcast:10.187.65.255  Mask:255.255.255.0
          inet6 addr: fe80::20c:29ff:fe5b:54ed/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:793 errors:0 dropped:0 overruns:0 frame:0
          TX packets:95 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:115842 (113.1 Kb)  TX bytes:14789 (14.4 Kb)
          Interrupt:19 Base address:0x2024

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:280 (280.0 b)  TX bytes:280 (280.0 b)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:141.144.168.26  P-t-P:141.144.168.26  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1412  Metric:1
          RX packets:1 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500
          RX bytes:60 (60.0 b)  TX bytes:40 (40.0 b)

route

[terry@tux ~]# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
tele-csvpn-gw-1 sydney-swi-1-rt 255.255.255.255 UGH   0      0        0 eth0
10.187.65.0     *               255.255.255.0   U     0      0        0 eth0
141.144.168.0   *               255.255.248.0   U     0      0        0 tun0
default         *               0.0.0.0         U     0      0        0 tun0

Reference:

http://aur.archlinux.org/packages.php?ID=30468
http://connect.oraclecorp.com/activities/845315-vpnc-configuration-on-arch-linux
http://li2z.cn/2009/09/07/vpnc_cisco/

Attachments:

  File Modified
File
Nov 19, 2009 by Terry Wang
File
Nov 13, 2009 by Terry Wang
File
Nov 13, 2009 by Terry Wang

Attachments:

oracle.cert (application/octet-stream)
PKGBUILD (application/octet-stream)
start.conf (application/octet-stream)