Using Cisco VPN client 4.6 with SUSE 10.0

[WebDrake]

Hello all,

I'm trying to set up Cisco VPN client 4.6 to allow me to connect to my university network remotely. My OS is SUSE Linux 10.0.

The actual software is installed, and, as root or superuser, I can log onto the VPN, which gives me a university IP address via the connection cipsec0. (I have checked this using ifconfig -a.)

However, none of my programs appear able to use this connection. They all continue using whatever LAN I am connected to now, and my IP address is recognized as being that of my local connection rather than the VPN connection, this despite the fact that the VPN client claims "Local LAN access is disabled".

Any suggestions for what needs to be changed in the OS or VPN client configuration in order that the VPN is what is used by programs to connect to the outside world?

Many thanks,

-- Joe

 

[thedaver]

I'm not entirely sure this is the suitable forum, but my immediate thought is whether you've established the correct IP routing to accomodate the VPN IP route?

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[WebDrake]

Yes, I also wondered about the forum suitability, but in the end I figured it was a Linux question so it might be worth asking here...

The IP routing sounds like a possible candidate. Could you explain more on how to proceed with that?

I have already used the YaST2 /etc/sysconfig editor to add the VPN gateway to FW_TRUSTED_NETS. However, I think the important one to edit may well be FW_SERVICES_EXT_IP. However, what would be the appropriate thing to add here?

Thanks,

-- Joe

 

[thedaver]

command line:

"route"

I have no specific experience in YaST2, so we'd probably do better on command line, where all things tend to equalize

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[WebDrake]

Thanks for the suggestions.

I'm sorry if it seems like I'm unwilling to RTFM, but I'm kind of inexperienced with serious Linux use, so it's difficult for me to follow man pages unless I'm absolutely confident that I understand what's going on. The command line is sufficiently powerful that I prefer not to use it unless either I have to, or unless I really do understand what I'm doing... ;-)

Anyway, you've pointed me in some good directions so I'm sure I'll get it sorted. :-D

 

[JLL007]

Hi Web,

Question for you. When I installed this client on Suse 10 i'm getting some errors. Did you run into anything like this?

 

[WebDrake]

When I installed this client on Suse 10 i'm getting some errors.

What are the errors---in installation, or in running it?

To install, you need the kernel sources on your system, and when you run the vpn_install script, you need to be root/superuser.

Likewise, when you run the client itself, vpnclient connect NETWORK, you need to do this as a superuser, so, use su or sudo.

Hope that helps...?

 

[JLL007]

Thanks. I think I need to get the Kernel Sources.

Making module
make -C /lib/modules/2.6.13-15.8-default/build SUBDIRS=/usr/src/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.13-15.8-obj/i386/default'
make[1]: *** No rule to make target `modules'. Stop.
make[1]: Leaving directory `/usr/src/linux-2.6.13-15.8-obj/i386/default'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".

Those are the errors...

 

[JLL007]

got that down and now getting this...

Making module
make -C /usr/src/linux/ SUBDIRS=/usr/src/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.13-15'
Makefile:494: .config: No such file or directory

WARNING: Symbol version dump /usr/src/linux-2.6.13-15/Module.symvers
is missing; modules will have no dependencies and modversions.

CC [M] /usr/src/vpnclient/linuxcniapi.o
/bin/sh: scripts/basic/fixdep: No such file or directory
make[2]: *** [/usr/src/vpnclient/linuxcniapi.o] Error 1
make[1]: *** [_module_/usr/src/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.13-15'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".