My Notepad

  • My Linux Notes
  • My Grid Notes
  • To do List
  • Saturday, May 06, 2006

     

    CISCO vpn client under Linux(2.6.14-1.1653_FC4)

    The instruction for cisco vpn client installtion under linux is available here:
    http://security.sc.edu/tools/vpn/instruct/vpnclient_linux.html

    However, you will get error if you are using 2.6.14 Kernel linux, what I experienced is
    like this :
    ****************************************************************
    [root@goblin vpnclient]# ./vpn_install
    Cisco Systems VPN Client Version 4.6.00 (0045) Linux Installer
    Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved.

    By installing this product you agree that you have read the
    license.txt file (The VPN Client license) and will comply with
    its terms.


    Directory where binaries will be installed [/usr/local/bin]/usr/local/vpn_cisco/bin

    Directory "/usr/local/vpn_cisco/bin" doesn't exist. Create ? [y]y

    Automatically start the VPN service at boot time [yes]yes

    In order to build the VPN kernel module, you must have the
    kernel headers for the version of the kernel you are running.


    Directory containing linux kernel source code [/lib/modules/2.6.14-1.1653_FC4/build]

    * Binaries will be installed in "/usr/local/vpn_cisco/bin".
    * Modules will be installed in "/lib/modules/2.6.14-1.1653_FC4/CiscoVPN".
    * The VPN service will be started AUTOMATICALLY at boot time.
    * Kernel source from "/lib/modules/2.6.14-1.1653_FC4/build" will be used to build the module.

    Is the above correct [y]y

    Create directory "/usr/local/vpn_cisco/bin".
    Making module
    make -C /lib/modules/2.6.14-1.1653_FC4/build SUBDIRS=/home/synew/download/vpnclient modules
    make[1]: Entering directory `/usr/src/kernels/2.6.14-1.1653_FC4-i686'
    CC [M] /home/synew/download/vpnclient/linuxcniapi.o
    /home/synew/download/vpnclient/linuxcniapi.c: In function ‘CniInjectReceive’:
    /home/synew/download/vpnclient/linuxcniapi.c:315: error: ‘struct sk_buff’ has no member named ‘stamp’
    /home/synew/download/vpnclient/linuxcniapi.c: In function ‘CniInjectSend’:
    /home/synew/download/vpnclient/linuxcniapi.c:452: error: ‘struct sk_buff’ has no member named ‘stamp’
    make[2]: *** [/home/synew/download/vpnclient/linuxcniapi.o] Error 1
    make[1]: *** [_module_/home/synew/download/vpnclient] Error 2
    make[1]: Leaving directory `/usr/src/kernels/2.6.14-1.1653_FC4-i686'
    make: *** [default] Error 2
    Failed to make module "cisco_ipsec.ko".
    *********************************************************************

    The reason for this is beacuse some changes between 2.6.13 and 2.6.14, to work around, we need a patch for vpnclient code:
    (Details available at: http://www.daimi.au.dk/~u981101/vpn_client_fc4/)
    1) download
    vpnclient-linux-4.7.00.0640-k9_kernel-2.6.14-1.1637_FC4.patch from the link above.

    2) Make sure put the patch file under src directry of vpnclient.
    [root@goblin vpnclient]#cd /home/synew/download/vpnclient/
    [root@goblin vpnclient]# patch <>
    patching file linuxcniapi.c
    Hunk #1 succeeded at 299 with fuzz 2 (offset 23 lines).
    Hunk #3 succeeded at 414 (offset 20 lines).

    3)make clean
    4)./vpn_install



    Comments: Post a Comment



    << Home

    Archives

    December 2005   January 2006   February 2006   April 2006   May 2006   June 2006   July 2006   November 2006   February 2007   May 2007   June 2007   November 2007   February 2008   March 2008   April 2008   August 2008   December 2008   March 2009   April 2009   May 2009   June 2009   October 2009   November 2009   December 2009   May 2013  

    This page is powered by Blogger. Isn't yours?