r0nwilliams said:
Oops, i figured that part out: at a command prompt, change to directory of \Convert Cisco PCF file\ then type pcf2vpnc.pl 1.pcf 1.conf
OK, but not i am stuck at the route add section:
i am running vpnc.exe --debug 2 --no-detach ./default.conf
when i was logged on to the Cisco VPN, i did a route print > routes.txt
but im not sure which line to add.
Also, when i look at the IP settings of the Cisco VPN interface when it is not connected, the IP is set to 0.0.0.0 and the mask is 0.0.0.0. It will not allow me to set the IP of my-tap to that IP. So what i did was conected to the cisco VPN, the ran IPconfig to get the IP of the device (even though it was set through DHCP), then assigned this IP to my-tap.
So am i on the right track? How do i know which routes to add?
sorry
1) error in pcf2vpnc.pl - file
must be
....................................
return $text;
}
#if (defined $ARGV[0]) {
if (1) {
$ARGV[0] = "1.pcf";
$ARGV[1] = "1.conf";
....................................
2)
when you connected
you need route
this TABLE on 32 BIT machine with connected vpn
you need only NETs you want to connect
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
...............
10.16.0.0 255.240.0.0 10.34.128.96 10.34.128.96 1
10.32.0.0 255.240.0.0 10.34.128.96 10.34.128.96 1
10.34.128.0 --mask->255.255.248.0<--- 10.34.128.96 10.34.128.96 20
...............
need -> 10.64.0.0 255.224.0.0 10.34.128.96 10.34.128.96 1
10.128.0.0 255.254.0.0 10.34.128.96 10.34.128.96 1
...........................................................................
10.255.255.255 255.255.255.255 10.34.128.96 10.34.128.96 20
...........................................................................
224.0.0.0 240.0.0.0 10.34.128.96 10.34.128.96 20
...........................................................................
===========================================================================
command you need
route add 10.64.0.0 mask 255.224.0.0 IP metric 1
where IP = ???? read lower
--mask->255.255.248.0<---
mask = 255.255.248.0
Ip address on my-tap interface you need read from console after run command
vpnc.exe --debug 2 --no-detach ./default.conf
file default.conf - must be in directory where vpnc.exe
in console you must find this .......
got save password setting: 0
got 4 acls for split include
acl 0: addr: 10.32.0.0/ 255.240.0.0 (12), protocol: 0, sport: 0, dport: 0 <<<<------------THIS I CAN ROUTE
acl 1: addr: 10.16.0.0/ 255.240.0.0 (12), protocol: 0, sport: 0, dport: 0 <<<<------------THIS I CAN ROUTE
acl 2: addr: 10.128.0.0/ 255.254.0.0 (15), protocol: 0, sport: 0, dport: 0 <<<<------------THIS I CAN ROUTE
acl 3: addr: 10.64.0.0/ 255.224.0.0 (11), protocol: 0, sport: 0, dport: 0 <<<<------------THIS I CAN ROUTE
got pfs setting: 0
Remote Application Version: Cisco Systems, Inc ASA5510 Version 7.2(3) built by builders on Wed
15-Aug-07 16:08
got address ___10.34.128.99___ <<<<<---------- THIS MY IP !!!!!!!!!!!!!!
ip = 10.34.128.99 mask = 255.255.248.0 - you need write on my-tap interface
and command
route add 10.64.0.0 mask 255.224.0.0 10.34.128.99 metric 1
3) it is bad --- ip can change
and you need read console every run vpn
and read ip from console
4) if you install cygwin you dont need read ip - it is automatic writes
but in vista script may not work correctly
