Linux下安裝Cisco vpn client的曲折經曆

過程極其曲折、折騰。

下載vpnclient-linux-x86_64-4.8.02.0030-k9.tar.gz

解壓縮 tar-zxf vpnclient-linux-x86_64-4.8.02.0030-k9.tar.gz

執行安裝 ./vpn_install

第一個碉堡：

Cisco Systems VPN Client Version 4.8.02 (0030) Linux InstallerCopyright (C) 1998-2006 Cisco Systems, Inc. All Rights Reserved.By installing this product you agree that you have read thelicense.txt file (The VPN Client license) and will comply withits terms.Directory where binaries will be installed [/usr/local/bin]Automatically start the VPN service at boot time [yes]In order to build the VPN kernel module, you must have thekernel headers for the version of the kernel you are running.For RedHat 6.x users these files are installed in /usr/src/linux by defaultFor RedHat 7.x users these files are installed in /usr/src/linux-2.4 by defaultFor Suse 7.3 users these files are installed in /usr/src/linux-2.4.10.SuSE by defaultDirectory containing linux kernel source code []* Binaries will be installed in "/usr/local/bin".* Modules will be installed in "/lib/modules/2.6.18-238.el5/CiscoVPN".* The VPN service will be started AUTOMATICALLY at boot time.* Kernel source from "" will be used to build the module.Is the above correct [y]yMaking module./driver_build.shCisco Systems VPN Client Version BUILDVER_STRINGCopyright (C) 1998-2001 Cisco Systems, Inc. All Rights Reserved.usage:    ./driver_build.sh 'kernel_src_dir''kernel_src_dir' is the directory containing the linux kernel sourceFailed to make module "cisco_ipsec.ko".

遇到問題，按照國際慣例，google之。

google出一堆英文網站，他們給的解決辦法是打補丁，於是一個一個補丁地去試。盲目跟從別人的做法果然沒有好結果，沒一個補丁解決了問題。

還是得仔細看錯誤資訊，發現vpnclinet的安裝需要使用linux kernel source，於是安裝kernel-devel:

yum install kernel-devel

問題還在。現在安裝的kernel-devel版本是2.6.18-308.20.1.el5，而我目前的系統是舊的2.6.18-238.el5，因此還需更新核心：

yum update kernel

reboot之後，再執行vpn_install，新的問題又來了。

第二個碉堡：

Making modulemake -C /lib/modules/2.6.18-308.20.1.el5/build SUBDIRS=/home/ytf/vpnclient modulesmake[1]: Entering directory `/usr/src/kernels/2.6.18-308.20.1.el5-x86_64'  CC [M]  /home/ytf/vpnclient/interceptor.oIn file included from /home/ytf/vpnclient/Cniapi.h:15,                 from /home/ytf/vpnclient/interceptor.c:34:/home/ytf/vpnclient/GenDefs.h:111:2: warning: #warning 64 bit/home/ytf/vpnclient/interceptor.c: In function ‘recv_ip_packet_handler’:/home/ytf/vpnclient/interceptor.c:660: error: ‘struct sk_buff’ has no member named ‘mac_header’make[2]: *** [/home/ytf/vpnclient/interceptor.o] Error 1make[1]: *** [_module_/home/ytf/vpnclient] Error 2make[1]: Leaving directory `/usr/src/kernels/2.6.18-308.20.1.el5-x86_64'make: *** [default] Error 2Failed to make module "cisco_ipsec.ko".

解決辦法，打補丁：


wget http://lamnk.com/download/vpnclient-linux-4.8.02-64bit.patch

patch <./vpnclient-linux-4.8.02-64bit.patch

網上找的各種補丁不要盲目使用，得對症下藥。

總算安裝成功了，下面正常流程。

啟動初始化服務

/etc/init.d/vpnclient_init start

配置

cd /etc/opt/cisco-vpnclient/Profiles/


cp sample.pcf xxxxxx.pcf

vim xxxxxx.pcf


建立串連

vpnclient connect xxxxxx

斷開vpn串連

vpnclient disconnect

事情還沒完，串連過程中什麼檔案不可讀，連不上vpn子系統神馬的，真的很不好用。