Connecting to Stanford’s VPN Network with Linux

February 24th, 2009 by

This is a random tidbit that I just figured out. On MacOSX and Windows you typically need to install the special Cisco VPN client to get things to work. This was always a little annoying, and they don't provide an up to date client for x64 Linux which plays nicely, from what I've gathered. This worked under Ubuntu 8.10 (Intrepid Ibex) for x64, your mileage may vary. I saw the instructions from Wei Cai's group wiki and figured that there must be a simpler way, which motivated this. So here's what I did...

Install vpnc as described here

sudo apt-get install network-manager-vpnc

Download the Stanford VPN settings file from here.

From the network settings toolbar, choose VPN Settings > Configure.

Import the VPN settings file you just downloaded.

Now here's the fun part; they give you the encoded group password but you need the decoded password. But there's a solution described here; luckily Cisco has some security problems so that you can decode the group password. Open the VPN configuration file that you downloaded and copy the value for enc_GroupPwd. Paste it into the magic decoder ring here (hint: the decoded password will be a sentence with the last letter of the last word truncated). Paste the password into the VPN configuration box for the group password. Make sure that you didn't accidentally include a trailing space.

Enter your username and password into the other two appropriate boxes.

Save and try connecting; hopefully things will work and you'll be able to connect to Stanford from off campus. Note that these instructions are a completely valid way of connecting to campus and just save you the hassle of trying to install or build the official Cisco VPN client and give you a tightly integrated VPN solution.

Update Nov 12, 2009: An even easier VPN solution is to go to sussl.stanford.edu. Since updating to Ubuntu 9.10 my vpnc connection hasn't been working, and I have started using sussl instead.

  • http://micro.stanford.edu/wiki/ bill

    Hey. I'm the author of the VPN article on Wei Cai's website. I wish I would have noticed your site before, because a couple months after you posted these vpnc steps I went through and figured them out on my own. My page has become a mess from all the Cisco client's past problems.

    I've had a couple people ask me about the group password, so I'll refer them to your site. In the remote chance that someone important reads my article, I didn't post how to decrypt the password because the server is university property. They used to have it unencrypted and it didn't require a SUnet ID to download.

    Gotta love Linux support…

  • Name

    To save some time, the group password is: I certify I am Stanford affiliat

  • Name

    To save some time, the group password is: I certify I am Stanford affiliat

  • jack

    I enjoyed reading this topic. Thank you
    http://www.mexvpn.com