Hi all. Is there anyone on the list with experience using vpnc/kvpnc to connect to a cisco vpn? I have the .pcf file and have imported it successfully into kvpnc and it connects OK to the remote network; all authorisation etc. seems OK but kvpnc never sets up any routes to the remote network. I've tried both "Replace Defaut Route" and "Add Additional Routes" settings with no success. Running /sbin/ifconfig shows no interfaces set up for the vpn tunnel. Running ip link shows an interface tun0 with status DOWN and no ip address. The output in the log window is as follows: debug: Preserving network environment debug: vpnc: /usr/sbin/vpnc info: Gateway hostname (remote host) resolved to "<remote_ip>". debug: vpnc version (major): "0" debug: vpnc version (minor): "5" debug: vpnc version (subminor): "2" debug: Default interface: "eth0". debug: IP address of default interface: "192.168.1.2". debug: VpncScript: /root/.kde4/share/apps/kvpnc/vpnc-script.<profile_name> debug: Support for TUN/TAP found (compiled into kernel or kernel module already loaded). debug: Using NAT-T mode "natt". debug: Using UDP. info: Trying to connect to server "<remote_server" (<remote_ip>) with user "<remote user>" and IPSec ID "<IPsec ID>"... debug: Setting DNS_UPDATE "NO". debug: Vpnc has started debug: "vpnc" started. debug: vpnc version (major): "0" debug: vpnc version (minor): "5" debug: vpnc version (subminor): "2" success: [vpnc] Connection established. success: Successful connected to server: "<remote_server>", user: "<remote_user>", IPSec ID: "<IPsec ID>" at Sun Sep 20 21:29:47 2009 [Cisco (free)] debug: [vpnc] Tunnel IP: debug: setFirewallAfterConnectScript: /root/.kde4/share/apps/kvpnc/firewall_after_connect_script.<profile_name> debug: "SetFirewallAfterConnectScript" started. debug: "SetFirewallAfterConnectScript" finished. debug: Setting additional network routes... debug: [route err] SIOCADDRT: Network is down debug: [route err] Unknown host debug: [route err] debug: [route err] debug: Use gateway address (<remote_ip>) for connection status check. debug: "ping_check.sh" started. I've replaced security-related items with generic labels for obvious reasons. I'd appreciate any tips on why this doesn't want to work. BTW, I've also tried getting the Cisco vpn client going under 11.2 RC7 but it will not compile. That might be a thread for another time... TIA, Rodney. -- =================================================== Rodney Baker VK5ZTV rodney.baker@iinet.net.au =================================================== -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org