How to setup the Cisco VPN client on a Linux computer

Keonwook Kang and William Cash

Introduction

Cisco VPN is required to connect to many of Stanford's computer resources because of some past security lapses. Unlike the Windows and Mac OS clients, Cisco's Linux VPN requires use of the terminal and has very little documentation from the company. This guide will show you how to install and use the Linux client.

The outdated client has also become incompatible with newer Linux kernels and requires patches created by the Linux community. If you are using kernel 2.6.22, 2.6.24, or beyond, you will probably have to download a newer Cisco VPN client than Stanford provides as outlined in this guide.

Installing the VPN client

1. Download the v4.8 VPN client from http://vpn.stanford.edu.
2. Extract the downloaded file.

# mv vpnclient-linux-4.8.tar.gz /usr/local/src
# cd /usr/local/src
# tar -zxvf vpnclient-linux-4.8.tar.gz

3. Install the VPN client

# cd vpnclient
# ./vpn_install

4. Answer the following questions during the installation (the defaults should be fine)

# ./vpn_install 
Cisco Systems VPN Client Version 4.8.00 (0490) Linux Installer
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms. 

Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]yes

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.

Directory containing linux kernel source code 
                      [/lib/modules/2.6.18-8.1.8.el5/build]

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.18-8.1.8.el5/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/lib/modules/2.6.18-8.1.8.el5/build" 
  will be used to build the module.

Is the above correct [y]y

5. Note that you need to reinstall the VPN client whenever your kernel is upgraded. Before reinstalling it, first run:

# ./vpn_uninstall

to clean files and directories previously installed.