Cyberoam IPSec VPN client on linux

My struggle of connecting my Ubuntu-9.04 (Karmic Koala) to Cyberoam's ipsec VPN is worth a mention. Cyberoam provides a road-warrior client for establishing VPN connections from Windows, but nothing for Linux based systems.

So here you go. On Cyberoam:

• Logon to Cyberoam GUI
• Click on the following menu on left panel: OBJECTS --> Hosts
• Click the ADD button

• Add the local network (behind Cyberoam) that you wish to access over VPN and give it a name. See the snapshot below. The local network behind my Cyberoam is 192.168.0.0/20, I named it as 192series. Press OK.

• Click on the following menu on left panel: VPN --> IPSec
• Press the ADD button. Follow the steps as per below snapshots.

• If everything went well, you should see the following screen.

• The Red button should turn green after pressing it.

• Now you need to allow the VPN connection in firewall. On the left panel, click on Firewall --> Rule. Click ADD to add a rule to allow traffic from VPN to LAN. Do the same for allowing traffic from LAN to VPN. Here's a snapshot:

Here, you are done with the Cyberoam part. Now turn to your laptop or desktop:
--------------------------------------------------------------
 
On your laptop or PC:

1. Install the openswan package from the default repositories. For debian based systems:
   

   apt-get install openswan

   For redhat based systems:
   

   yum install openswan

    
2. Add the following configuration to your /etc/ipsec.conf. Change the network parameters as per your network scenario.
   

   conn roadwarrior
           rightsubnet=192.168.0.0/255.255.240.0
           auto=add
           type=tunnel
           right=<your_cyberoam_public_ipaddress>
           left=your-laptop-ipaddress
           leftnexthop=%defaultroute
           authby=secret
           keyingtries=3
           compress=yes
           failureshunt=drop
           dpddelay=30
           dpdtimeout=120
           dpdaction=clear
           pfs=yes
           ike="aes128-md5-modp1024,aes128-sha1-modp1024,3des-md5-modp1024"
   

           esp="aes128-md5,aes128-sha1,3des-md5"

    
3. Add the following line in /etc/ipsec.secrets
   %any <your_cyberoam_public_ipaddress>: PSK "<pre-shared-key which you defined on cyberoam>"
   
   
4. Load the connection in ipsec by using the following command on command line.

   sudo ipsec auto --add roadwarrior

5. Start the connection and test if you are able to reach the local network behind Cyberoam.
   

   sudo ipsec auto --up roadwarrior

   ping 192.168.13.102

   
   That should get your VPN up and running. In case of problems, you may contact Cyberoam Support at:
   http://www.cyberoam.com/contactsupport.html