Installation et Configuration du client VPN IPSEC

sous Linux ubuntu

Tlcharger le client vpn pour Windows XP l'adresse suivante : https://cri.univ - lehavre.fr/vpnclients .
Les fichiers tlcharger sont : vpnclient-linux-x86_6-!8!"#!""$"-%&!tar!g' et univ-le(avre!pcf
copier ces fichers dans le rpertoire dossier personnel.
)*co+presser le fic(ier tarball ,
user!"achine:#$ sudo tar %vf vpnclient-linu%-%&'(')-).&.*.**+*-,-.tar.g.
vpnclient/
vpnclient/li/vpnapi.so
vpnclient/vpnapi.h
vpnclient/cisco(cert("gr
vpnclient/vpnclient
vpnclient/ipseclog
vpnclient/cvpnd
vpnclient/vpn(install
vpnclient/vpnclient(init
vpnclient/vpn(uninstall
vpnclient/driver(/uild.sh
vpnclient/sa"ple.pcf
vpnclient/vpnclient.ini
vpnclient/license.t%t
vpnclient/license.rtf
vpnclient/interceptor.c
vpnclient/linu%cniapi.c
vpnclient/linu%cniapi.h
vpnclient/vpn(ioctl(linu%.h
vpnclient/0P1ec2rv31(linu%.c
vpnclient/linu%(os.h
vpnclient/frag.h
vpnclient/frag.c
vpnclient/linu%,ernelapi.c
vpnclient/4en2efs.h
vpnclient/"tu.h
vpnclient/0P1ec2rv315unctions.h
vpnclient/0P1ec2rv31(linu%.h
vpnclient/6niapi.h
vpnclient/uni%cniapi.h
vpnclient/uni%,ernelapi.h
vpnclient/config.h
vpnclient/li/driver').so
vpnclient/li/driver.so
vpnclient/7a,efile
8n dossier vpnclient est nor"ale"ent cr dans votre dossier personnel
Installation du client VPN
user!"achine:#$ cd #/vpnclient
user!"achine:#/vpnclient$ sudo ./vpn(install
6isco 19ste"s :P; 6lient :ersion ).&.* <**+*= Linu% 0nstaller
6op9right <6= >--&-**' 6isco 19ste"s? 0nc. @ll Aights Aeserved.
B9 installing this product 9ou agree that 9ou have read the
license.t%t file <The :P; 6lient license= and will co"pl9 with
its ter"s.
2irector9 where /inaries will /e installed C/usr/local//inD
@uto"aticall9 start the :P; service at /oot ti"e C9esDno
0n order to /uild the :P; ,ernel "odule? 9ou "ust have the
,ernel headers for the version of the ,ernel 9ou are running.
2irector9 containing linu% ,ernel source code C/li//"odules/.'.&->+-generic//uildD
E Binaries will /e installed in F/usr/local//inF.
E 7odules will /e installed in F/li//"odules/.'.&->+-generic/6isco:P;F.
E The :P; service will E;3TE /e started auto"aticall9 at /oot ti"e.
E Gernel source fro" F/li//"odules/.'.&->+-generic//uildF will /e used to /uild the "odule.
0s the a/ove correct C9D
7a,ing "odule
"a,e -6 /li//"odules/.'.&->+-generic//uild 18B20A1H/ho"e/"co/vpnclient "odules
"a,eC>D: entrant dans le rpertoire I /usr/src/linu%-headers-.'.&->+-generic J
Building "odules? stage .
732P31T > "odules
W@A;0;4: could not find /ho"e/"co/vpnclient/.li/driver.so.c"d for /ho"e/"co/vpnclient/li/driver.so
"a,eC>D: Kuittant le rpertoire I /usr/src/linu%-headers-.'.&->+-generic J
6op9ing "odule to director9 F/li//"odules/.'.&->+-generic/6isco:P;F.
@lread9 have group '/in'
6reating start/stop script F/etc/init.d/vpnclient(initF.
/etc/init.d/vpnclient(init
6reating glo/al config /etc/opt/cisco-vpnclient
0nstalling license.t%t <:P; 6lient license= in F/opt/cisco-vpnclient/F:
/opt/cisco-vpnclient/license.t%t
0nstalling /undled user profiles in F/etc/opt/cisco-vpnclient/Profiles/F:
E ;ew Profiles : sa"ple
6op9ing /inaries to director9 F/opt/cisco-vpnclient//inF.
@dding s9"lin,s to F/usr/local//inF.
/opt/cisco-vpnclient//in/vpnclient
/opt/cisco-vpnclient//in/cisco(cert("gr
/opt/cisco-vpnclient//in/ipseclog
6op9ing setuid /inaries to director9 F/opt/cisco-vpnclient//inF.
/opt/cisco-vpnclient//in/cvpnd
6op9ing li/raries to director9 F/opt/cisco-vpnclient/li/F.
/opt/cisco-vpnclient/li//li/vpnapi.so
6op9ing header files to director9 F/opt/cisco-vpnclient/includeF.
/opt/cisco-vpnclient/include/vpnapi.h
1etting per"issions.
/opt/cisco-vpnclient//in/cvpnd <setuid root=
/opt/cisco-vpnclient <group /in reada/le=
/etc/opt/cisco-vpnclient <group /in reada/le=
/etc/opt/cisco-vpnclient/Profiles <group /in reada/le=
/etc/opt/cisco-vpnclient/6ertificates <group /in reada/le=
E Lou "a9 wish to change these per"issions to restrict access to root.
E Lou "ust run F/etc/init.d/vpnclient(init startF /efore using the client.
Lou will need to run this script ever9 ti"e 9ou re/oot 9our co"puter.
Pour d*+arrer le client vpn ,
user!"achine:#/vpnclient$ sudo /etc/init.d/vpnclient(init start
1tarting /opt/cisco-vpnclient//in/vpnclient: 2one
Copier le fic(ier de profil dans le dossier dans -etc-opt-cisco-vpnclient-Profiles- ,
user!"achine:#/vpnclient$ cp ../univ-lehavre.pcf /etc/opt/cisco-vpnclient/Profiles/
Pour se connecter au vpn ,
user!"achine:#/vpnclient$ vpnclient connect univ-lehavre
6isco 19ste"s :P; 6lient :ersion ).&.* <**+*=
6op9right <6= >--&-**M 6isco 19ste"s? 0nc. @ll Aights Aeserved.
6lient T9pe<s=: Linu%
Aunning on: Linu% .'.&->+-generic N))-8/untu 17P Tue Oun *M:PM:+> 8T6 **- i'&'
6onfig file director9: /etc/opt/cisco-vpnclient
0nitiali.ing the :P; connection.
6ontacting the gatewa9 at >-).P).>*&.>>
8ser @uthentication for univ-lehavre...
The server has reKuested the following infor"ation to co"plete the user authentication:
8serna"e CD: dupontd!univ-lehavre.fr
Password CD:
@uthenticating user.
;egotiating securit9 policies.
1ecuring co""unication channel.
Lour :P; connection is secure.
:P; tunnel infor"ation.
6lient address: >M.&.&.)
1erver address: >-).P).>*&.>>
Qncr9ption: >&-/it @Q1
@uthentication: R7@6-1R@
0P 6o"pression: ;one
;@T passthrough is inactive
Local L@; @ccess is disa/led