Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: vpnc: devel

Is my pcf file compatible?

 

 

vpnc devel RSS feed   Index | Next | Previous | View Threaded


lists at i-sommer

May 4, 2009, 6:33 AM

Post #1 of 3 (2737 views)
Permalink
Is my pcf file compatible?

Dear list members and vpnc developers,

since 6 month I have to use a vpn connection at my school.
At first I tried the programs with GUIs (kvpnc, network-manager vpnc plugin)
with no luck and at last I could use vpnclient with my Kubuntu jaunty.

Today I would give vpnc a new chance and had no luck again. :-|
I think the pcf file from my provider is not much spezial or complicated but
for me it's not possible to connect. - Maybe someone can help me (a little
bit), please.

Facts:
I use Kubuntu jaunty and tried vpnc-0.5.3-1 (from the official repos) and
vpnc-0.5.3-394 (today SVN trunk).
I have a clear text group name & password, a username & password and the
following pcf file:

---8<------
Description=VPN
Host=10.254.254.10
GroupName=wlan
enc_GroupPwd=$encGroupPassword$
TunnelingMode=1
TcpTunnelingPort=10000
UserPassword=
enc_UserPassword=
AuthType=1
GroupPwd=
EnableISPConnect=0
ISPConnectType=0
ISPConnect=fh intern
ISPPhonebook=
SaveUserPassword=0
NTDomain=
EnableBackup=0
BackupServer=
EnableMSLogon=1
MSLogonType=0
EnableNat=1
CertStore=0
CertName=
CertPath=
CertSubjectName=
CertSerialHash=00000000000000000000000000000000
SendCertChain=1
PeerTimeout=90
EnableLocalLAN=0
ISPCommand=
me=
Username=$Username$
---8<------

With this pcf file I can connect to the VPN with vpnlient and get the
following status messages on the konsole:

---8<------
root [at] axolot:~# vpnclient connect fhp
Cisco Systems VPN Client Version 4.8.02 (0030)
Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.28-11-generic #42-Ubuntu SMP Fri Apr 17 01:57:59 UTC
2009 i686
Config file directory: /etc/opt/cisco-vpnclient

Initializing the VPN connection.
Initiating TCP to 10.254.254.10, port 10000
Contacting the gateway at 10.254.254.10
User Authentication for fhp...

Enter Username and Password.

Username [$Username$]:
Password []:
Authenticating user.
Negotiating security policies.
Securing communication channel.

WILLKOMMEN!
Do you wish to continue? (y/n): y

Your VPN connection is secure.

VPN tunnel information.
Client address: 194.94.234.11
Server address: 10.254.254.10
Encryption: 168-bit 3-DES
Authentication: HMAC-MD5
IP Compression: None
NAT passthrough is active on port TCP 10000
Local LAN Access is disabled
---8<------

Today I converted the pcf into the following vpnc config file:

---8<------
## generated by pcf2vpnc
IPSec ID wlan
IPSec gateway 10.254.254.10
IPSec secret $clearGroupPassword$

Xauth username $Username$
IKE Authmode psk
---8<------

With that config I only get the message:

vpnc: no response from target

The VPN server (10.254.254.10) is not pingable but has port 10000 open.
I tried "NAT Traversal Mode cisco-udp", "DPD idle timeout (our side) 0" and
"Cisco UDP Encapsulation Port 10000" in my config file without success, too.
Debug doesn't help me as well.

Please give me a hint - better a solution! :) I will thank you in advance!

Best regards,
Kai Sommer

--
Kai Sommer | Schopenhauerstraße 29 | 14467 Potsdam
http://sokai.name | OpenPGP-Fingerprint
9B5D AAE8 3D0F 7BA9 2F9D 5E2E FA58 43BD 5599 4068
Attachments: signature.asc (0.19 KB)


cforbis at gmail

May 12, 2009, 7:44 AM

Post #2 of 3 (2615 views)
Permalink
Re: Is my pcf file compatible? [In reply to]

I am by far not a VPNC expert, but I do not see the port in the vpnc config
file... I am not at a place with my config file, so I am not sure of the
port synax but might be worth a look around and see if that could be it.

"vpnc: no response from target"

Error just seems like it can not connect to the vpn server.



On Mon, May 4, 2009 at 9:33 AM, Kai Sommer <lists [at] i-sommer> wrote:

> Dear list members and vpnc developers,
>
> since 6 month I have to use a vpn connection at my school.
> At first I tried the programs with GUIs (kvpnc, network-manager vpnc
> plugin)
> with no luck and at last I could use vpnclient with my Kubuntu jaunty.
>
> Today I would give vpnc a new chance and had no luck again. :-|
> I think the pcf file from my provider is not much spezial or complicated
> but
> for me it's not possible to connect. - Maybe someone can help me (a little
> bit), please.
>
> Facts:
> I use Kubuntu jaunty and tried vpnc-0.5.3-1 (from the official repos) and
> vpnc-0.5.3-394 (today SVN trunk).
> I have a clear text group name & password, a username & password and the
> following pcf file:
>
> ---8<------
> Description=VPN
> Host=10.254.254.10
> GroupName=wlan
> enc_GroupPwd=$encGroupPassword$
> TunnelingMode=1
> TcpTunnelingPort=10000
> UserPassword=
> enc_UserPassword=
> AuthType=1
> GroupPwd=
> EnableISPConnect=0
> ISPConnectType=0
> ISPConnect=fh intern
> ISPPhonebook=
> SaveUserPassword=0
> NTDomain=
> EnableBackup=0
> BackupServer=
> EnableMSLogon=1
> MSLogonType=0
> EnableNat=1
> CertStore=0
> CertName=
> CertPath=
> CertSubjectName=
> CertSerialHash=00000000000000000000000000000000
> SendCertChain=1
> PeerTimeout=90
> EnableLocalLAN=0
> ISPCommand=
> me=
> Username=$Username$
> ---8<------
>
> With this pcf file I can connect to the VPN with vpnlient and get the
> following status messages on the konsole:
>
> ---8<------
> root [at] axolot:~# vpnclient connect fhp
> Cisco Systems VPN Client Version 4.8.02 (0030)
> Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.
> Client Type(s): Linux
> Running on: Linux 2.6.28-11-generic #42-Ubuntu SMP Fri Apr 17 01:57:59 UTC
> 2009 i686
> Config file directory: /etc/opt/cisco-vpnclient
>
> Initializing the VPN connection.
> Initiating TCP to 10.254.254.10, port 10000
> Contacting the gateway at 10.254.254.10
> User Authentication for fhp...
>
> Enter Username and Password.
>
> Username [$Username$]:
> Password []:
> Authenticating user.
> Negotiating security policies.
> Securing communication channel.
>
> WILLKOMMEN!
> Do you wish to continue? (y/n): y
>
> Your VPN connection is secure.
>
> VPN tunnel information.
> Client address: 194.94.234.11
> Server address: 10.254.254.10
> Encryption: 168-bit 3-DES
> Authentication: HMAC-MD5
> IP Compression: None
> NAT passthrough is active on port TCP 10000
> Local LAN Access is disabled
> ---8<------
>
> Today I converted the pcf into the following vpnc config file:
>
> ---8<------
> ## generated by pcf2vpnc
> IPSec ID wlan
> IPSec gateway 10.254.254.10
> IPSec secret $clearGroupPassword$
>
> Xauth username $Username$
> IKE Authmode psk
> ---8<------
>
> With that config I only get the message:
>
> vpnc: no response from target
>
> The VPN server (10.254.254.10) is not pingable but has port 10000 open.
> I tried "NAT Traversal Mode cisco-udp", "DPD idle timeout (our side) 0" and
> "Cisco UDP Encapsulation Port 10000" in my config file without success,
> too.
> Debug doesn't help me as well.
>
> Please give me a hint - better a solution! :) I will thank you in advance!
>
> Best regards,
> Kai Sommer
>
> --
> Kai Sommer | Schopenhauerstraße 29 | 14467 Potsdam
> http://sokai.name | OpenPGP-Fingerprint
> 9B5D AAE8 3D0F 7BA9 2F9D 5E2E FA58 43BD 5599 4068
>
> _______________________________________________
> vpnc-devel mailing list
> vpnc-devel [at] unix-ag
> https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
> http://www.unix-ag.uni-kl.de/~massar/vpnc/<http://www.unix-ag.uni-kl.de/%7Emassar/vpnc/>
>
>


lists at i-sommer

May 12, 2009, 8:51 AM

Post #3 of 3 (2619 views)
Permalink
Re: Is my pcf file compatible? [In reply to]

Hi Chris,

thanks a lot for your replay!

Am Dienstag 12 Mai 2009 schrieb Chris Forbis:
> I am by far not a VPNC expert, but I do not see the port in the vpnc config
> file... I am not at a place with my config file, so I am not sure of the
> port synax but might be worth a look around and see if that could be it.
> [...]
The man page says:
"--natt-mode <natt/none/force-natt/cisco-udp>
[...]
cisco-udp -- Cisco proprietary UDP encapsulation, commonly over Port 10000"

...so I used in my config file the option (like I wrote in my first mail):
NAT Traversal Mode cisco-udp

But! nmap says:
~# nmap -P0 -vvv -sV -p 10000 10.254.254.10
Interesting ports on 10.254.254.10:
PORT STATE SERVICE VERSION
10000/tcp filtered snet-sensor-mgmt
MAC Address: 00:03:A0:8A:2C:94 (Cisco Systems)

It looks like my 'provider' uses not UDP but TCP (see above = "10000/tcp"), or
I'm wrong!?
...and the man page says:
"Note: cisco-tcp encapsulation is not yet supported"

Could that be my problem!?

Best regards,
Kai

--
Kai Sommer | Schopenhauerstraße 29 | 14467 Potsdam
http://sokai.name | OpenPGP-Fingerprint
9B5D AAE8 3D0F 7BA9 2F9D 5E2E FA58 43BD 5599 4068
Attachments: signature.asc (0.19 KB)

vpnc devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.