Instructions:
1. Install vpnc, by default the vpnc in core and AUR already has hybrid support. No need to recompile vpnc like Ubuntu.
0.5.3-1 from core
pacman -S vpnc
vpnc-svn from AUR
yaourt -S vpnc-svn
2. Get the Oracle root certificate and converted pcf files by following the instructions here:
Download: Oracle certificate
SHA1(oracle.cert)= 847b9ff07fdffa8dbab4f27d677758c2312c2244
A sample /etc/vpnc/start.conf
IPSec ID Ora-Hybrid-Gen IPSec gateway au-enc.oracle.com IPSec secret xxxxxxxx Xauth username username_cc Application version Cisco Systems VPN Client 4.8.0 (A):Linux IKE Authmode hybrid CA-File /etc/vpnc/oracle.cert
I preferred to start vpnc in the background by using the rc.d script. Replace au-enc.oracle.com with hq-enc.oracle.com if you wish to connect to HQ.
3. Start vpnc
[terry@tux ~]# /etc/rc.d/vpnc start :: Connecting to VPN [BUSY] Enter password for [email protected]: VPNC started in background (pid: 1588)... [DONE]
4. Check the vpn connection:
[terry@tux ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0C:29:5B:54:ED
inet addr:10.187.65.196 Bcast:10.187.65.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe5b:54ed/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:793 errors:0 dropped:0 overruns:0 frame:0
TX packets:95 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:115842 (113.1 Kb) TX bytes:14789 (14.4 Kb)
Interrupt:19 Base address:0x2024
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4 errors:0 dropped:0 overruns:0 frame:0
TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:280 (280.0 b) TX bytes:280 (280.0 b)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:141.144.168.26 P-t-P:141.144.168.26 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1412 Metric:1
RX packets:1 errors:0 dropped:0 overruns:0 frame:0
TX packets:1 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:60 (60.0 b) TX bytes:40 (40.0 b)
route
[terry@tux ~]# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface tele-csvpn-gw-1 sydney-swi-1-rt 255.255.255.255 UGH 0 0 0 eth0 10.187.65.0 * 255.255.255.0 U 0 0 0 eth0 141.144.168.0 * 255.255.248.0 U 0 0 0 tun0 default * 0.0.0.0 U 0 0 0 tun0
Reference:
http://aur.archlinux.org/packages.php?ID=30468
http://connect.oraclecorp.com/activities/845315-vpnc-configuration-on-arch-linux
http://li2z.cn/2009/09/07/vpnc_cisco/