2014-12-11 8:04 GMT+01:00 Hajder Rabiee <hajd...@gmail.com>: > Hi > > Trying to connect to VPN at work but keep getting: "vpnc: no response from > target". > > I have created my vpn.conf in /etc/vpnc/myconf.conf and also added Local > Port 10000 as I've read some posts that the particular error message might > have to do > with a block in the firewall. Comparing with OSX - where the VPN works, the > only difference is that I have to specify a group name in Linux. I have > talked to the IT admins and gotten the correct group name. I wonder though > is the Group Password the same as the shared key? Otherwise how do I > specify it?
I followed this tutorial to connect to Palo Alto GlobalProtect using vpnc protocol: http://blog.webernetz.net/2014/03/31/palo-alto-globalprotect-for-linux-with-vpnc/ The group name and group password are distinct parameters. The IT admin should give you both in addition to your own credentials. In the case of Palo Alto, it was necessary to enable X-Auth. I don't remember the error message I received when it was not enabled. OSX, Android and Windows with the GlobalProtect client don't need the X-Auth protocol. Only Linux's vpnc needs it. You may have some similar settings on your VPN server. I configured the vpn using the Network Manager in KDE so I don't know about /etc/vpnc. Make sure you are not trying to connect to the VPN server from inside the lan. It doesn't work on my network. I can only connect from the wan. I also had to circumvent another problem after the connection was established. The route to the gateway is set to 128.0.0.0/1. Half of the internet address space is routed through the VPN tunnel. I had to configure vpnc to ignore the default route and add my own custom routes (I did all of this in the Network Manager). OSX and Windows receive the correct route though. I have yet to investigate more deeply into that problem. Frederic -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/CAJ7R-8R1HLVORcnUhfrhv+xJG7E9wm3mGZUcAf_ofeBWVGbg=w...@mail.gmail.com
