1. become root

host:$ su
Password:

2. Get Cisco VPN client for Linux here (Required ICEMS Login)

3. Unpack the downloaded .tar.gz:

host:/usr/local/src# tar -xvzf vpnclient-linux.tar.gz
host:/usr/local/src# cd vpnclient
host:/usr/local/src/vpnclient#

4. Run the installer script

host:/usr/local/src/vpnclient# ./vpn_install
Cisco Systems VPN Client Version 4.8.00 (0490) Linux Installer
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms.

Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.

Directory containing linux kernel source code [/lib/modules/2.6.15-26-686/build]

* Binaries will be installed in “/usr/local/bin”.
* Modules will be installed in “/lib/modules/2.6.15-26-686/CiscoVPN”.
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from “/lib/modules/2.6.15-26-686/build” will be used to build the module.

Is the above correct [y]

<… … …>

Setting permissions.
/opt/cisco-vpnclient/bin/cvpnd (setuid root)
/opt/cisco-vpnclient (group bin readable)
/etc/opt/cisco-vpnclient (permissions not changed)
* You may wish to change these permissions to restrict access to root.
* You must run “/etc/init.d/vpnclient_init start” before using the client.
* This script will be run AUTOMATICALLY every time you reboot your computer.

5. Depends on Linux Distribution Check/create appropriate startup script links. This depends on Linux distribution. For Debian/Ubuntu:

host:# ls -s /etc/init.d/vpnclient_init /etc/rc2.d/S85vpnclient_init

if you get this error

ls: /etc/rc2.d/S85vpnclient_init: No such file or directory
4 /etc/init.d/vpnclient_init

This depends on Linux distribution. For Debian/Ubuntu:

host:# cp /etc/init.d/vpnclient_init /etc/rc2.d/S85vpnclient_init

*note: It is important to understand that running the vpnclient_init script does not create VPN yet. The script only checks whether the system is configured properly and loads the necessary kernel module.

6.Configuration

[code][b]host:# cd /etc/CiscoSystemsVPNClient/Profiles/
host: /etc/CiscoSystemsVPNClient/Profiles# ‘wget’ www.linuxsig.net/files/mmuvpn.pcf

7. First time connect,else jump to #8

host:# /etc/init.d/vpnclient_init start

8. Change the permission so that nornal user can connect

host:# chmod 4111 /opt/cisco-vpnclient/bin/cvpnd

9. Connect to MMU VPN (normal user will do)

host:$ vpnclient connect mmuvpn

FAQ: What is my username?
Read Here

10.The VPN between your host and the MMU VPN server was created.
To bring the session to the background

**Press Ctrl+Z**
[1]+ Stopped vpnclient connect sample
host:~$ bg
[1]+ vpnclient connect mmuvpn &

11.To disconnect

host:~$ vpnclient disconnect
Cisco Systems VPN Client Version 4.8.00 (0490)
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.15-26-686 #1 SMP PREEMPT Thu Aug 3 03:13:28 UTC 2006 i686
Config file directory: /etc/opt/cisco-vpnclientDisconnecting the VPN connection.
Your VPN connection has been terminated.

FAQ: I get the following error

host: $ vpnclient connect mmuvpn
Cisco Systems VPN Client Version 4.8.00 (0490)
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.17-10-generic #2 SMP Tue Dec 5 22:28:26 UTC 2006 i686
Config file directory: /etc/opt/cisco-vpnclientCould not attach to driver. Is kernel module loaded?
The application was unable to communicate with the VPN sub-system.

Your Operating System startup did not run the following code.You could run

host: # /etc/init.d/vpnclient_init start

or check Instruction #5

To Uninstall
Use the vpn_uninstall script that comes with the client.Depends on where u extract it.

If you follow the above instruction,you can use the below code.

host:# /usr/local/src/vpnclient/vpn_uninstall

2. Become root

host:$ su

3. Change directory to /usr/share/fonts/truetype/

host:# cd /usr/share/fonts/truetype

4. (Optional) Create a folder that you’ll remember

host:/usr/share/fonts/truetype# mkdir New-Folder-Name
host:/usr/share/fonts/truetype# cd New-Folder-Name

* New-Folder-Name could be any name you wish

5. Copy .ttf fonts file to /usr/share/fonts/truetype/ or /usr/share/fonts/truetype/New-Folder-Name

host:/usr/share/fonts/truetype/New-Folder_Name# cp /original-file-directory/font.ttf /usr/share/fonts/truetype/

OR

In Gnome

host:/usr/share/fonts/truetype/New-Folder-Name# nautilus /usr/share/fonts/truetype/

OR /usr/share/fonts/truetype/New-Folder-Name

and drag & drop .ttf files

If your planning to use EAP,you know u need SSL but not openssl.You’ll need libssl-dev.This piece of information took me few days looking on the net and even compiled openssl by source (which doesn’t help).

If your planning to use ippool,you’ll need libltdl3-dev & libgdbm-dev.

configure freeradius for wpa-enterprise http://tldp.org/HOWTO/html_single/8021X-HOWTO/#confradius

http://ubuntuforums.org/archive/index.php/t-478804.html

So far,that all I need to record down.Just in case I need to reformat the whole OS for the 5th 6th 7th time.One more bad news for ya,freeradius can’t uninstall and I can’t replace it too.So…last resort,reinstall OS.