[nmglug] ftp over vpn,
Andres Paglayan
andres at paglayan.com
Fri Jul 8 08:30:26 PDT 2005
more on the saga,
they got back saying that I need no more info than their IP, my user
name and password,
in the conf file there are at least 5 parameters to be configured
I have something like
IPSec gateway the.vpn.ip.add
IPSec ID
IPSec secret
Xauth username the_username
Xauth password the_password
what
IPSec ID
and
IPSec secret
should be?
I tried IPSec ID with the ftp.ip and the_username too,
And now when connecting I get
/usr/sbin/vpnc: binding to port 500: Address already in use
Ed Brown wrote:
>With the Cisco vpn client, 'route' doesn't reflect the new route
>info, but that may be unique to Cisco's client, because it uses a kernel
>module (and precludes the vpnclient machine from becoming a gateway to
>other networks). This probably isn't the case for vpnc, since it is all
>userspace.
>
>Anyway, it's clear that the vpn tunnel isn't being set up. There should
>be a 'tun0' network device, iirc. There has to be support for this
>device compiled in the kernel, maybe it's not in yours? I'm surprised
>you see a running process, and not some errors when starting up,
>possibly in the logs?
>
>It's been a few months since I tried vpnc out, will give it a try again
>tonight or this weekend to see if it leads to any other ideas.
>
>-Ed
>
>On Thu, 2005-07-07 at 12:35, Andres Paglayan wrote:
>
>
>>route display
>>#> route
>>Kernel IP routing table
>>Destination Gateway Genmask Flags Metric Ref Use
>>Iface
>>192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
>>default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
>>
>>I can't ping the ftp server.
>>
>>I can ping the gateway,
>>
>>ifconfig
>>eth0 Link encap:Ethernet HWaddr 00:0C:6E:3A:71:1C
>> inet addr:192.168.1.7 Bcast:192.168.1.255 Mask:255.255.255.0
>> inet6 addr: fe80::20c:6eff:fe3a:711c/64 Scope:Link
>> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
>> RX packets:38143876 errors:0 dropped:0 overruns:0 frame:0
>> TX packets:60724772 errors:0 dropped:0 overruns:0 carrier:0
>> collisions:0 txqueuelen:1000
>> RX bytes:3624853639 (3.3 GiB) TX bytes:3787164031 (3.5 GiB)
>> Interrupt:20 Base address:0x8000
>>
>>lo Link encap:Local Loopback
>> inet addr:127.0.0.1 Mask:255.0.0.0
>> inet6 addr: ::1/128 Scope:Host
>> UP LOOPBACK RUNNING MTU:16436 Metric:1
>> RX packets:42430 errors:0 dropped:0 overruns:0 frame:0
>> TX packets:42430 errors:0 dropped:0 overruns:0 carrier:0
>> collisions:0 txqueuelen:0
>> RX bytes:24845276 (23.6 MiB) TX bytes:24845276 (23.6 MiB)
>>
>>
>>Ed Brown wrote:
>>
>>
>>
>>>Not sure what you mean by 'route display'... Can you ping the ftp
>>>server ip address? Can you ping the vpn gateway address? What does
>>>'ifconfig' show?
>>>
>>>
>>>On Thu, 2005-07-07 at 11:51, Andres Paglayan wrote:
>>>
>>>
>>>
>>>
>>>>Im sure it reads the conf file, if I take the password off it will prompt,
>>>>but after running vpnc-connect there is no change at all in the route
>>>>display,
>>>>will check again with them what I should enter in the .conf file,
>>>>Thank you very much for your feed-back
>>>>
>>>>
>>>>Ed Brown wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>Andres,
>>>>>
>>>>>The vpnc-connect script should handle setting up the routing info for
>>>>>you, once your configuration file is correct. (Take a look at the last
>>>>>few lines of vpnc-connect, there are probably several 'route' commands.)
>>>>>
>>>>>After running vpnc-connect, just try this to see if you are really
>>>>>connected:
>>>>>ping ip.of.ftp.server
>>>>>
>>>>>I wonder if the 'default.conf' file is being consulted: that might just
>>>>>be a starting point conf file. You might try renaming your edited
>>>>>version of 'default.conf' to 'vpnc.conf'. At least that's what the
>>>>>config file was called when I was trying out vpnc.
>>>>>
>>>>>-Ed
>>>>>
>>>>>On Thu, 2005-07-07 at 10:47, Andres Paglayan wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>well, you might hit the nail,
>>>>>>I did configure /etc/vpnc/default.conf according to the settings I got
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>from them,
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>I run vpnc-connect script and it shows running in the background.
>>>>>>I tried the
>>>>>>route add ftp.server.ip ws the.vpn.ip
>>>>>>and it says
>>>>>>SIOCADDRT: Network is unreachable
>>>>>>so I must be missing somethin in the use of vpnc
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>_______________________________________________
>>>>>nmglug mailing list
>>>>>nmglug at nmglug.org
>>>>>http://www.nmglug.org/mailman/listinfo/nmglug
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>_______________________________________________
>>>>nmglug mailing list
>>>>nmglug at nmglug.org
>>>>http://www.nmglug.org/mailman/listinfo/nmglug
>>>>
>>>>
>>>>
>>>>
>>>_______________________________________________
>>>nmglug mailing list
>>>nmglug at nmglug.org
>>>http://www.nmglug.org/mailman/listinfo/nmglug
>>>
>>>
>>>
>>>
>>>
>>>
>>_______________________________________________
>>nmglug mailing list
>>nmglug at nmglug.org
>>http://www.nmglug.org/mailman/listinfo/nmglug
>>
>>
>
>
>_______________________________________________
>nmglug mailing list
>nmglug at nmglug.org
>http://www.nmglug.org/mailman/listinfo/nmglug
>
>
>
>
More information about the nmglug
mailing list