Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm considering investing in a Cisco ASA5505. As Cisco's own VPN client requires a service subscription, which I am trying to do without, are there any free or low-cost ipsec VPN clients that will work with the ASA and run on Windows XP? Is XP's built-in ipsec client compatible? Any links to guides and walkthroughs would be much appreciated.

share|improve this question
add comment

8 Answers

up vote 3 down vote accepted

Install a virtual server inside the remote network and use RRAS for VPN on it. Then expose the relevant ports through the ASA.

That way all XP/Vista clients can connect reliably.

Mike

share|improve this answer
add comment

Have you taken a look at shrew?

http://www.shrew.net/software. I've used it on windows machines as a replacement for a specific version of the cisco client which was not playing nicely with windows 7.

vpnc combined with network-manager-vpnc is a great option if you're on a linux platform though.

share|improve this answer
add comment

Came across this article on how to get Windows Vista to connect to a Cisco PIX using a native client. Since ASA is mostly just a glorified PIX, these options might also work for you.

I also have to agree with the previous posts that the 'vpnc' client that you can install on Linux is just great, as it does not force any network routes or blockage like the official Cisco client does. You decide what your computer routes through the tunnel, as it should be.

share|improve this answer
    
Thanks for the link! –  weiyin Jul 13 '09 at 22:35
add comment

Cisco VPN is proprietary and will not work with anything but Cisco VPN :-) It is IPSec but it is not compatible with other IPSec clients.

share|improve this answer
    
Thanks for the clarification. I thought IPSec being an "industry standard" meant that it's cross-vendor compatible. –  weiyin Jun 8 '09 at 19:31
1  
Well it's standardized via RFCs but just Cisco decided to not have cross-vendor compatibility. –  Antoine Benkemoun Jun 8 '09 at 20:56
    
Do any vendors do strict IPSec? It appears that Checkpoint is not compatible with standard clients either –  prestomation Jul 10 '09 at 14:44
add comment

A cludge of a solution:

  1. Virtualize your WinXP installation
  2. Install Ubuntu 9.04
  3. Install Ubuntu package vpnc (vpn cisco)
  4. Install VMWare
  5. Run WinXP inside VMWare with NAT interface (not bridging)
  6. Establish your VPN with vpnc in Ubuntu, and the Virtual Machine will use that VPN connection.

I would consider this a bad solution - too convoluted. You will want to service contract in order to get security updates for your router and to get access to the Cisco Support Site.

If the Cisco device is just too expensive, consider a lower cost alternative, either from a different vendor or "Roll-Your-Own". Just remember RFC 1925 truth #3

With sufficient thrust, pigs fly just fine. However, this is not necessarily a good idea. It is hard to be sure where they are going to land, and it could be dangerous sitting under them as they fly overhead.

share|improve this answer
add comment

Looks like you can run vpnc under Windows via Cygwin.

share|improve this answer
add comment

TEsted and working on

On ubuntu 9.04 -64 bit

Sudo apt-gete install VPNC

sudo apt-get install KVpnc

;)

import the Cisco VPN profile and enjoy

Thanks kartook

share|improve this answer
add comment

Another way to use VPN

install the Windows Box on VMware Workstation and move that Vmdk file to ubuntu box box download and install VMware player then play that windows.vmdk file

If you want move files from ubuntu to Windows you can connect the Windows box through nautilus-connect-server

It cool

Thanks kartook

share|improve this answer
    
I am not sure how this is relevant at all to the question –  MadBoy Jul 30 '11 at 16:21
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.