I recently struggled through the details of establishing a VPN connection from my Ubuntu 64 desktop to a Juniper Networks Netscreen-5. There are a number of ways to skin the VPN cat in linux and I'm not going to detail them all here. I'll just tell you how I solved it.
My Netscreen-5 was configured with some typical settings:Phase 1Pre-shared key "your-pre-shared-key-here"Encryption "pre-g2-aes128-sha"Phase 2Encryption "g2-esp-3des-sha"
- On my Jaunty install (Ubuntu 9.04) I first installed the repository version of racoon:
apt-get install racoon
- Then I downloaded the latest build of KVpnc. They only had an intrepid build when I wrote this (kvpnc_0.9.1_intrepid-1_amd64.deb) and it worked for me, but it's worth checking if a Jaunty build is available.
- My Netscreen config translates to the following choices under KVpnc's Racoon options:
- sha1
- aes
- hmac_sha1
- aes
- agressive
- modp1024
- modp1024
- Remote Identifier Type: asn1dn
- Local Identifier Type: user_fqdn
- Local Identifier Value: (we used email addresses for client ids on the netscreen so the Local Identifier value in KVpnc is an email address)
Your VPN gateway is entered under General and don't forget to complete the Network/General portion of your KVpnc profile as well. That's where your destination network goes (for a Host to Network configuration like mine).