<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Benjamin Sherman &#187; cisco</title>
	<atom:link href="http://holyarmy.org/tag/cisco/feed/" rel="self" type="application/rss+xml" />
	<link>http://holyarmy.org</link>
	<description>I have to have a tagline?</description>
	<lastBuildDate>Wed, 02 Jun 2010 06:06:06 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Fight Back! (When VPN Clients Mis-Behave)</title>
		<link>http://holyarmy.org/2008/07/fight-back-when-vpn-clients-mis-behave/</link>
		<comments>http://holyarmy.org/2008/07/fight-back-when-vpn-clients-mis-behave/#comments</comments>
		<pubDate>Wed, 23 Jul 2008 18:20:19 +0000</pubDate>
		<dc:creator>benjamin</dc:creator>
				<category><![CDATA[Mac]]></category>
		<category><![CDATA[Networks]]></category>
		<category><![CDATA[cisco]]></category>
		<category><![CDATA[command line]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[mac hack]]></category>
		<category><![CDATA[scutil]]></category>
		<category><![CDATA[VPN]]></category>

		<guid isPermaLink="false">http://sherman.bz/?p=310</guid>
		<description><![CDATA[I have to use VPNs at work. Specifically, to access my production webservers (etc), I have to use a Cisco VPN client. Sadly, the VPN concentrator overrides my choice of allowing local LAN access. So, when I am on the VPN, I have my DNS options changed so I can&#8217;t use any local servers. This [...]]]></description>
			<content:encoded><![CDATA[<p>I have to use VPNs at work. Specifically, to access my production webservers (etc), I have to use a Cisco VPN client. Sadly, the VPN concentrator overrides my choice of allowing local LAN access. So, when I am on the VPN, I have my DNS options changed so I can&#8217;t use any local servers. This is a serious, serious pain. So painful in fact, that many times instead of fight with it, I simply would run a Windows session in VMware (on my Mac) and connect the VPN there. This has drawbacks too, but it&#8217;s better than not having local network access.</p>
<p>So I set out to find a solution and I found a <a href="http://blog.dv8.ro/2008/06/configuring-cisco-vpn-for-local-dns.html">post by loudhush</a> which described using the <strong>scutil</strong> to modify DNS network settings after connecting to a Cisco VPN. This was great, but I needed something a bit handier.</p>
<p>So, I cranked out the following which goes in my /Users/username/.profile:<br />
<code><br />
# .profile or .bash_profile<br />
function myvpn {<br />
vpnclient connect VPNPROFILENAME user MYVPNUSERNAME<br />
myworkdns<br />
}<br />
function myworkdns {<br />
printf "get State:/Network/Service/com.cisco.VPN/DNS\nd.add ServerAddresses * 192.168.1.252, 192.168.1.198\nd.add SearchDomains * example.com, other.example.com\nset State:/Network/Service/com.cisco.VPN/DNS" | sudo scutil<br />
}<br />
</code></p>
<p>These are bash functions which i run from the command line. (I also find the Client GUI Cisco to be a pain, and prefer command line)</p>
<p>So, obviously, you&#8217;ll need to substitute in your Cisco VPN profile name ( found in /etc/opt/cisco-vpnclient/Profiles), your VPN username, your DNS server IP addresses, and your DNS search domains to your legitimate values.</p>
<p>To use, run <strong>Terminal</strong>, then type <strong>myvpn</strong>. The VPN client will prompt you for your username and password. You&#8217;ll then have to hit CTRL+Z to suspend the VPN client so the script can run the DNS updates; this part uses <strong>sudo</strong> to run the command as root, so you will probably need to type your Mac password immediately after hitting CTRL+Z. If you didn&#8217;t want to bother with the command line VPN client, you could just use your GUI Cisco VPN client, then run <strong>myworkdns</strong> from Terminal, which will still probably prompt you for your Mac password.</p>
<p>Hope others find this useful. If I find a cleaner way, I&#8217;ll post that too.</p>
]]></content:encoded>
			<wfw:commentRss>http://holyarmy.org/2008/07/fight-back-when-vpn-clients-mis-behave/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Beating the Cisco VPN Client Error 51 On Leopard</title>
		<link>http://holyarmy.org/2008/07/beating-the-cisco-vpn-client-error-51-on-leopard/</link>
		<comments>http://holyarmy.org/2008/07/beating-the-cisco-vpn-client-error-51-on-leopard/#comments</comments>
		<pubDate>Tue, 22 Jul 2008 16:10:01 +0000</pubDate>
		<dc:creator>benjamin</dc:creator>
				<category><![CDATA[Mac]]></category>
		<category><![CDATA[Networks]]></category>
		<category><![CDATA[cisco]]></category>
		<category><![CDATA[error]]></category>
		<category><![CDATA[leopard]]></category>
		<category><![CDATA[VPN]]></category>

		<guid isPermaLink="false">http://sherman.bz/?p=308</guid>
		<description><![CDATA[I had this error popup today on my Mac OS X Lepopard 10.5.4 machine. This is not cool as, well, I NEED MY VPN TO WORK! Thankfully google came to my rescue. The solution is to execute the following in Terminal: sudo /System/Library/StartupItems/CiscoVPN/CiscoVPN restart Thanks for the answer, VirtuallyShocking.com.]]></description>
			<content:encoded><![CDATA[<p>I had this error popup today on my Mac OS X Lepopard 10.5.4 machine.</p>
<p><a href="http://holyarmy.org/files/2008/07/vpnerr51.png"><img class="alignnone size-medium wp-image-309" title="vpnerr51" src="http://holyarmy.org/files/2008/07/vpnerr51-300x69.png" alt="Cisco VPN Client Error 51" width="300" height="69" /></a></p>
<p>This is not cool as, well, I NEED MY VPN TO WORK!</p>
<p>Thankfully google came to my rescue. The solution is to execute the following in Terminal:</p>
<p><code>sudo /System/Library/StartupItems/CiscoVPN/CiscoVPN restart</code></p>
<p>Thanks for the answer, <a href="http://virtuallyshocking.com/2008/06/26/cisco-vpn-client-error-51-after-leopard-1053-upgrade/">VirtuallyShocking.com</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://holyarmy.org/2008/07/beating-the-cisco-vpn-client-error-51-on-leopard/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

