<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE artikkel
        PUBLIC "-//infoweb.ntnu.no//DTD Infoweb 1.0 //NO"
        "http://infoweb.ntnu.no/infoweb.dtd">
<artikkel spraak="en">
        <tittel>Guide for installing VPN - Linux using Cisco VPN client (4.6)</tittel>
        <forfatter>atlegran</forfatter>
        <sammendrag>VPN on Linux systems</sammendrag>
<lenker>
<infoweb aid="222" tittel="VPN"/>
</lenker>

<hoveddel>

  <avsnitt>There is an alternative VPN client available for Linux users. Read more about it <ekstern uri="http://www.unix-ag.uni-kl.de/~massar/vpnc/" tittel="VPNC">here</ekstern>.</avsnitt>

  <avsnitt>Download the Cisco VPN client here (user: vpn, password:
klient): <ekstern uri="http://www.ntnu.no/oppringt/vpn"
tittel="Download Cisco VPN client here">vpn client</ekstern>. You can also download the file via wget:</avsnitt>

<kode>wget --http-user=vpn --http-passwd=klient
http://www.ntnu.no/oppringt/vpn/klient/linux/vpnclient-linux-4.8.00.0490-k9.tar.gz</kode>

  <avsnitt>To decompress the file, use the command:</avsnitt>

<kode>tar -xzf vpnclient-linux-4.8.00.0490-k9.tar.gz</kode>

  <avsnitt>Go to the vpn catalogue, and enter the command:</avsnitt>

<kode>./vpn_install</kode>

  <avsnitt>Choose <kommando>no</kommando> when asked <kommando>Automatically start
the VPN service at boot time [yes]</kommando> if you want to start your vpn client manually. For the rest of the options, the default value should work.</avsnitt>

  <avsnitt>The client is installed, and configuration files have to be made. These are placed in 
<kommando>/etc/CiscoSystemsVPNClient/Profiles</kommando>. Go there and make a new file called <kommando>ntnu.pcf</kommando>. The contents of this file should be as shown below (Enter your user name after the line <kommando>Username=</kommando>):</avsnitt>

<kode>
[main]
Description=sample user profile
Host=vpn.ntnu.no
AuthType=1
GroupName=alle
GroupPwd=passord
Username=
EnableLocalLAN=1
EnableISPConnect=0
ISPConnectType=0
ISPConnect=
ISPCommand=
SaveUserPassword=0
EnableBackup=0
BackupServer=
EnableNat=1
TunnelingMode=1
CertStore=0
CertName=
CertPath=
CertSubjectName=
CertSerialHash=00000000000000000000000000000000
DHGroup=2
ForceKeepAlives=1</kode>

  <avsnitt>Now the vpn client is ready to use <ekstern uri="http://en.wikipedia.org/wiki/IPSEC" tittel="IPSEC">IPSEC</ekstern> over <ekstern uri="http://en.wikipedia.org/wiki/Transmission_Control_Protocol" tittel="TCP">TCP</ekstern>. The client should handle being behind a <ekstern uri="http://en.wikipedia.org/wiki/NAT" tittel="NAT">NAT</ekstern> router. If you want to use UDP, choose
<kommando>TunnelingMode=0</kommando>. To block access to the local network when vpn is being used, choose
<kommando>EnableLocalLAN=0</kommando>.</avsnitt>

<os2>Connecting</os2>

  <avsnitt>To open the vpn connection, write:</avsnitt>

<kode>/usr/local/bin/vpnclient connect ntnu</kode>


</hoveddel>
</artikkel>

