This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cisco VPN client - PSK

Hi,

I'm trying to setup the 'vpnc' client on linux with the UTM (9.111) Cisco VPN config.

VPNC asks for a PSK or 'secret', but I don't see a setting for that in the UTM's Cisco VPN settings.

Where can I find that?

Thanks,
Barry

This thread was automatically locked due to age.

0 Scott_Klassen over 10 years ago

UTM Cisco VPN doesn't support shared secret or group authentication, only certificate.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago

Thanks...

So the UTM is set to use "Local x509 certificate" for the Server Certificate, but I don't see a way to download the Cisco client cert from the User Portal in UTM 9.111.
Is it the same as the IPSEC VPN's cert in PKCS#12 format?

Thanks,
Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

Yep, same as IPSec. See the PDF at How to configure the Cisco VPN Client for the UTM Gateway

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago

Hi,

Thanks, I tried that... VPNC keeps asking for a VPN ID.

From
vpnc(8) - Linux man page
it appears that VPNC does not accept client-server certificates.

I posted another thread here abot using the L2TP + IPSEC VPN in Linux, but unfortunately no one seems to have a working config file, and I'm running out of time.
https://community.sophos.com/products/unified-threat-management/astaroorg/f/58/t/55379

I guess I will have to open that China won't block the OpenSSL VPN using UDP.
Alternatively, if they don't block 4444/webadmin, I could get in and allow an SSH connection for my netbook if needed for remote admin.

Thanks,
Barry
Cancel
Vote Up 0 Vote Down

Cancel