[Translated]20150506 Linux FAQs with Answers--How to install Shrew Soft IPsec VPN client on Linux.md

This commit is contained in:
GOLinux 2015-05-08 10:18:40 +08:00
parent 0335bf82df
commit d481015932
2 changed files with 98 additions and 98 deletions

View File

@ -1,98 +0,0 @@
Translating by GOLinux!
Linux FAQs with Answers--How to install Shrew Soft IPsec VPN client on Linux
================================================================================
> **Question**: I need to connect to an IPSec VPN gateway. For that, I'm trying to use Shrew Soft VPN client, which is available for free. How can I install Shrew Soft VPN client on [insert your Linux distro]?
There are many commercial VPN gateways available, which come with their own proprietary VPN client software. While there are also open-source VPN server/client alternatives, they are typically lacking in sophisticated IPsec support, such as Internet Key Exchange (IKE) which is a standard IPsec protocol used to secure VPN key exchange and authentication. Shrew Soft VPN is a free IPsec VPN client supporting a number of authentication methods, key exchange, encryption and firewall traversal options.
Here is how you can install Shrew Soft VPN client on Linux platforms.
First, download its source code from the [official website][1].
### Install Shrew VPN Client on Debian, Ubuntu or Linux Mint ###
Shrew Soft VPN client GUI requires Qt 4.x. So you will need to install its development files as part of dependencies.
$ sudo apt-get install cmake libqt4-core libqt4-dev libqt4-gui libedit-dev libssl-dev checkinstall flex bison
$ wget https://www.shrew.net/download/ike/ike-2.2.1-release.tbz2
$ tar xvfvj ike-2.2.1-release.tbz2
$ cd ike
$ cmake -DCMAKE_INSTALL_PREFIX=/usr -DQTGUI=YES -DETCDIR=/etc -DNATT=YES .
$ make
$ sudo make install
$ cd /etc/
$ sudo mv iked.conf.sample iked.conf
### Install Shrew VPN Client on CentOS, Fedora or RHEL ###
Similar to Debian based systems, you will need to install a number of dependencies including Qt4 before compiling it.
$ sudo yum install qt-devel cmake gcc-c++ openssl-devel libedit-devel flex bison
$ wget https://www.shrew.net/download/ike/ike-2.2.1-release.tbz2
$ tar xvfvj ike-2.2.1-release.tbz2
$ cd ike
$ cmake -DCMAKE_INSTALL_PREFIX=/usr -DQTGUI=YES -DETCDIR=/etc -DNATT=YES .
$ make
$ sudo make install
$ cd /etc/
$ sudo mv iked.conf.sample iked.conf
On Red Hat based systems, one last step is to open /etc/ld.so.conf with a text editor, and add the following line.
$ sudo vi /etc/ld.so.conf
----------
include /usr/lib/
Reload run-time bindings of shared libraries to incorporate newly installed shared libraries:
$ sudo ldconfig
### Launch Shrew VPN Client ###
First launch IKE daemon (iked). This daemon speaks the IKE protocol to communicate with a remote host over IPSec as a VPN client.
$ sudo iked
![](https://farm9.staticflickr.com/8685/17175688940_59c2db64c9_b.jpg)
Now start qikea which is an IPsec VPN client front end. This GUI application allows you to manage remote site configurations and to initiate VPN connections.
![](https://farm8.staticflickr.com/7750/16742992713_eed7f97939_b.jpg)
To create a new VPN configuration, click on "Add" button, and fill out VPN site configuration. Once you create a configuration, you can initiate a VPN connection simply by clicking on the configuration.
![](https://farm8.staticflickr.com/7725/17337297056_3d38dc2180_b.jpg)
### Troubleshooting ###
1. I am getting the following error while running iked.
iked: error while loading shared libraries: libss_ike.so.2.2.1: cannot open shared object file: No such file or directory
To solve this problem, you need to update the dynamic linker to incorporate libss_ike library. For that, add to /etc/ld.so.conf the path where the library is located (e.g., /usr/lib), and then run ldconfig command.
$ sudo ldconfig
Verify that libss_ike is added to the library path:
$ ldconfig -p | grep ike
----------
libss_ike.so.2.2.1 (libc6,x86-64) => /lib/libss_ike.so.2.2.1
libss_ike.so (libc6,x86-64) => /lib/libss_ike.so
--------------------------------------------------------------------------------
via: http://ask.xmodulo.com/install-shrew-soft-ipsec-vpn-client-linux.html
作者:[Dan Nanni][a]
译者:[译者ID](https://github.com/译者ID)
校对:[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译,[Linux中国](https://linux.cn/) 荣誉推出
[a]:http://ask.xmodulo.com/author/nanni
[1]:https://www.shrew.net/download/ike

View File

@ -0,0 +1,98 @@
Linux有问必答——Linux上如何安装Shrew Soft IPsec VPN
================================================================================
> **Question**: I need to connect to an IPSec VPN gateway. For that, I'm trying to use Shrew Soft VPN client, which is available for free. How can I install Shrew Soft VPN client on [insert your Linux distro]?
> **问题**我需要连接到一个IPSec VPN网关鉴于此我尝试使用Shrew Soft VPN客户端它是一个免费版本。我怎样才能安装Shrew Soft VPN客户端到[插入你的Linux发行版]?
市面上有许多商业VPN网关同时附带有他们自己的专有VPN客户端软件。虽然也有许多开源的VPN服务器/客户端备选方案但它们通常缺乏复杂的IPsec支持比如互联网密钥交换IKE这是一个标准的IPsec协议用于加固VPN密钥交换和验证安全。Shrew Soft VPN是一个免费的IPsec VPN客户端它支持多种验证方法、密钥交换、加密以及防火墙穿越选项。
下面介绍如何安装Shrew Soft VPN客户端到Linux平台。
首先,从[官方站点][1]下载它的源代码。
### 安装Shrew VPN客户端到Debian, Ubuntu或者Linux Mint ###
Shrew Soft VPN客户端图形界面要求使用Qt 4.x。所以作为依赖你需要安装其开发文件。
$ sudo apt-get install cmake libqt4-core libqt4-dev libqt4-gui libedit-dev libssl-dev checkinstall flex bison
$ wget https://www.shrew.net/download/ike/ike-2.2.1-release.tbz2
$ tar xvfvj ike-2.2.1-release.tbz2
$ cd ike
$ cmake -DCMAKE_INSTALL_PREFIX=/usr -DQTGUI=YES -DETCDIR=/etc -DNATT=YES .
$ make
$ sudo make install
$ cd /etc/
$ sudo mv iked.conf.sample iked.conf
### 安装Shrew VPN客户端到CentOS, Fedora或者RHEL ###
与基于Debian的系统类似在编译前你需要安装一堆依赖包包括Qt4。
$ sudo yum install qt-devel cmake gcc-c++ openssl-devel libedit-devel flex bison
$ wget https://www.shrew.net/download/ike/ike-2.2.1-release.tbz2
$ tar xvfvj ike-2.2.1-release.tbz2
$ cd ike
$ cmake -DCMAKE_INSTALL_PREFIX=/usr -DQTGUI=YES -DETCDIR=/etc -DNATT=YES .
$ make
$ sudo make install
$ cd /etc/
$ sudo mv iked.conf.sample iked.conf
在基于Red Hat的系统中最后一步需要用文本编辑器打开/etc/ld.so.conf文件并添加以下行。
$ sudo vi /etc/ld.so.conf
----------
include /usr/lib/
重新加载运行时绑定的共享库文件,以容纳新安装的共享库:
$ sudo ldconfig
### 启动Shrew VPN客户端 ###
首先启动IKE守护进程iked。该守护进作为VPN客户端程通过IKE协议与远程主机经由IPSec通信。
$ sudo iked
![](https://farm9.staticflickr.com/8685/17175688940_59c2db64c9_b.jpg)
现在启动qikea它是一个IPsec VPN客户端前端。该GUI应用允许你管理远程站点配置并初始化VPN连接。
![](https://farm8.staticflickr.com/7750/16742992713_eed7f97939_b.jpg)
要创建一个新的VPN配置点击“添加”按钮然后填入VPN站点配置。创建配置后你可以通过点击配置来初始化VPN连接。
![](https://farm8.staticflickr.com/7725/17337297056_3d38dc2180_b.jpg)
### 故障排除 ###
1. 我在运行iked时碰到了如下错误。
iked: error while loading shared libraries: libss_ike.so.2.2.1: cannot open shared object file: No such file or directory
要解决该问题你需要更新动态链接器来容纳libss_ike库。对于此请添加库文件的位置路径到/etc/ld.so.conf文件中然后运行ldconfig命令。
$ sudo ldconfig
验证libss_ike是否添加到了库路径
$ ldconfig -p | grep ike
----------
libss_ike.so.2.2.1 (libc6,x86-64) => /lib/libss_ike.so.2.2.1
libss_ike.so (libc6,x86-64) => /lib/libss_ike.so
--------------------------------------------------------------------------------
via: http://ask.xmodulo.com/install-shrew-soft-ipsec-vpn-client-linux.html
作者:[Dan Nanni][a]
译者:[GOLinux](https://github.com/GOLinux)
校对:[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译,[Linux中国](https://linux.cn/) 荣誉推出
[a]:http://ask.xmodulo.com/author/nanni
[1]:https://www.shrew.net/download/ike