Tag Archives: vpn

AT&T VPN and Ubuntu play nice

Posted by on 11-Nov-10 No comments

Since moving a role of a non-traditional office worker, I have joined the group of folks that live or die by VPN access. I have had success with tips and tricks from the internet and intranet to get the clients installed and working but haven’t found any really good ways to make them work when I need to access both the VPN and my local intranet.

Here is a bug someone else files showing what happens to the /etc/resolv.conf file when the AT&T VPN is started: https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/291161

Apparently the folks at AT&T made some assumptions about how this should work, or purposefully limited the dual use access for whatever reason. In either case if I want to get to local machines by name I need to disconnect from the VPN, and if I want to get to corporate LAN machines I need to be on the VPN, so you can see how this is not ideal. Since the development of the linux VPN client by AT&T seems to be dead for one reason or another, and I don’t have another VPN client option at the moment I need to work with what I have.

Sure I can modify my /etc/hosts file but I don’t like the way little hacks like this make me feel, and that nullifies the effort I put into the dnsmasq solution that is doing my internal static dhcp/dns host resolution for me. But after further investigation it looks like I need to setup a DNS server that will fail rather than forward the request, right now my router acts as a dnsmasq server to check for statically defined host names first and returning them if possible or forwarding the requests onto OpenDNS for resolution. This is not really practical for my rather simplistic use here where I have less than 30 machines to deal with. So I will concede for now, update my /etc/hosts file with the few machines I need right now, and revisit this when I have a better answer.

Score another one for the bad guys… cludge 1, elegance 0 may be I should just put in a request for the Cisco VPN client and actually get some linux support…

Reference:

  • AT&T VPN Linux -  ftp://ftp.attglobal.net/pub/custom/ibm_linux/
  • AT&T Debianizer script – http://blog.afmacedo.com/?p=17
  • Installing the client on Ubuntu – http://technobluez.blogspot.com/2009/11/installing-ubuntu-910-karmic-koala-in.html
  • https://bugs.launchpad.net/ubuntu/+bug/291161
  • https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/291161

AT&T VPN client on RHEL5

Posted by on 10-Oct-10 No comments

Get the latest agnclient rpm from AT&T:
ftp://ftp.attglobal.net/pub/custom/ibm_linux/
wget ftp://ftp.attglobal.net/pub/custom/ibm_linux/agnclient-1.0-2.0.1.3003.i386.rpm
Then install agnclient rpm with no dependencies:

rpm -ivh --nodeps agnclient-1.0-2.0.1.3003.i386.rpm

created symlinks

Here is my 5.0 install
[code]

[root@ratlsvr ~]# cd /opt/agns/lib
[root@ratlsvr lib]# ls -als
total 60
4 drwxr-xr-x 2 root root 4096 Feb 4 14:35 .
4 drwxr-xr-x 7 root root 4096 Feb 4 14:32 ..
0 lrwxrwxrwx 1 root root 30 Feb 4 14:32 libagnc.so.1 -> /opt/agns/lib/libagnc.so.1.0.0
40 -rwxr-xr-x 1 root root 40909 Feb 18 2008 libagnc.so.1.0.0
0 lrwxrwxrwx 1 root root 33 Feb 4 14:32 libagnLogc.so.1 -> /opt/agns/lib/libagnLogc.so.1.0.0
12 -rwxr-xr-x 1 root root 9671 Feb 18 2008 libagnLogc.so.1.0.0
0 lrwxrwxrwx 1 root root 20 Feb 4 14:35 libcrypt.so.4 -> /usr/lib/libcrypt.so
0 lrwxrwxrwx 1 root root 19 Feb 4 14:35 libcurl.so.3 -> /usr/lib/libcurl.so
0 lrwxrwxrwx 1 root root 18 Feb 4 14:35 libssl.so.4 -> /usr/lib/libssl.so

[/code]

From my 5.5 machine:
[code]

[root@ratlsvr ~]# cd /opt/agns/lib
[root@ratlsvr lib]# ls -als
total 60
4 drwxr-xr-x 2 root root 4096 Feb 4 14:35 .
4 drwxr-xr-x 7 root root 4096 Feb 4 14:32 ..
0 lrwxrwxrwx 1 root root 30 Feb 4 14:32 libagnc.so.1 -> /opt/agns/lib/libagnc.so.1.0.0
40 -rwxr-xr-x 1 root root 40909 Feb 18 2008 libagnc.so.1.0.0
0 lrwxrwxrwx 1 root root 33 Feb 4 14:32 libagnLogc.so.1 -> /opt/agns/lib/libagnLogc.so.1.0.0
12 -rwxr-xr-x 1 root root 9671 Feb 18 2008 libagnLogc.so.1.0.0
0 lrwxrwxrwx 1 root root 20 Feb 4 14:35 libcrypt.so.4 -> /usr/lib/libcrypt.so
0 lrwxrwxrwx 1 root root 19 Feb 4 14:35 libcurl.so.3 -> /usr/lib/libcurl.so.3
0 lrwxrwxrwx 1 root root 18 Feb 4 14:35 libssl.so.4 -> /lib/libssl.so.4

[/code]

updated /opt/agns/bin/NetVPN.sh

started services

/etc/init.d/agnclientd start
/etc/init.d/agnLogd start

/opt/agns/bin/NetVPN.sh

Now to connect run the CLI client or if you have X running the GUI should be working as well, enjoy!

Related/Reference

http://manpages.ubuntu.com/manpages/jaunty/man1/dpkg.1.html

http://technobluez.blogspot.com/2009/11/installing-ubuntu-910-karmic-koala-in.html