Cisco vpn client for SL-6000?

[tdt]

I see that there is an opensource zaurus client for Cisco vpn, i.e., vpnc. Has anyone been able to run this or port it to the 6000?

Thanks,
Terry

[Johnny]

I, too, am interested in this.  I took a look at http://www.liebchen-online.de/vpn-zaurus-cisco_en.html and I\'m pretty confused.  Do I need to install the tun device and iproute in addition to the vpnc ipk?  The version of iproute won\'t show up to install when I xfer it to my Zaurus.  Also, when I install the vpnc client, I get an error message about not all files extracting and that it might not execute properly.  Can you help this Zaurus n00b?

[tdt]

I have the vpnc Cisco vpn client running fine on the SL-6000.  For
anyone interested here is what I did.

1. Found the embedix kernel source that matches the SL-6000:

linux-sl6000-20040311-rom1_11.tar.bz2

(http://developer.ezaurus.com/sl_j/source/6000/build_kernel_111J_6000.htm)

2. After getting gcc 2.95 built and set up for cross compiling I
compiled the tun.o module and put it on the zaurus. Had to make the
device file with:

mkdir /dev/net
mknod /dev/net/tun c 10 200

3. Put on iproute using iproute_2.2.4-now-ss991023-1_arm.ipk.  I had
to extract the executable and put it on the z manually. I think there
is a directory mismatch and ipk croaks trying to install it on the
SL-6000.

4. Got vpnc-0.2-rm+zomb.1.tar.gz from:

http://www.unix-ag.uni-kl.de/~massar/vpnc/

(I found and tried an earlier pre-built version (0.2-rm+zomb-pre7) but
it would not talk properly with the Cisco 3030 vpn gateway that we
have at work. Thanks to Maurice Massar for replying to my email on
this.)

You also need libgcrypt and libgpg-error. I used
libgcrypt-1.2.0.tar.gz and libgpg-error_0.7.orig.tar.gz, which I found
out there somewhere.

Once these three packages were built I manually moved the libgcrypt
and libgpg-error libs over to the zaurus (/usr/lib). Then copied vpnc,
vpnc-connect and vpnc-disconnect to /usr/local/bin, and copied
vpnc.conf to /etc. Then you have to set up /etc/vpnc.conf using
instructions from the package.

When invoking it I use:

vpnc-connect --application-version \"Cisco Systems VPN Client 3.7.3 (A):Linux\" --enable-1des

(which I learned from Maurice\'s site.)

Terry

[dedge]

Excellent description for getting vpn client to work.  I've never set up a cross-compile environment before but there is a good description of how to do that in the article located at

 Sharp Zaurus.  

You'll need to edit the kernel .config file to set CONFIG_TUN=m.  Rather than do a make zImage, do a 'make modules' and move the file tun.o over to the SL6000.

I'm not sure if this helped or not, but I also added the link in /etc for localtime.

Finally, my vpn connection would fail if I supplied any of the switches for application version or 1des.   I guess that's specific to each vpn concentrator.

David

[pdavidson]

Ok, I'm going round the bend on this one, and I'm wondering if anyone can save me a chunk of time here.

I've gotten the tun module loaded, the iproute package on, and the precompiled version of the vpnc (0.2-rm+zomb-pre7) executables onto the SL-6000L we're working with.. but now I've hit a wall.

I get a message"UNEQUAL_PAYLOAD_LENGTHS" during the connection.  I'm unable to get past it.  My guess, from this posting chain, is that I need to move to the .1 version of vpnc- but I can't find that precompiled anywhere, and I'm hesitant to start down the path of cross-compiling libraries, etc., without some knowledge that it's worth it.

If someone has a precompiled (statically linked) version of the .1 vpnc client they can throw at me, I'd love to see it- or a simple confirmation that I should keep going down x-compile lane (I've got the build environment made, but it's been a while since I've dealt with makefiles, and it's looking like I have to understand them to mod them for the cross compilation environment and tmake).

TIA.
-Paul

[agosine]

Hi tdt,

Would you be willing to share your libgcrypt-1.2.0 and libgpg-error_0.7.orig lib files?  I can't find them anywhere.

thanks..

[witzgall]

Any chance  one of those that have gotten this to work on the sl6000 could make up an install package for the rest of us? I don't have a Linux box right now to do any compiling, so I am at the mercy of those more talented individuals that do.

Chris