Arch Linux

plattfot

Member

Registered: 2012-09-15

Posts: 16

[SOLVED] Juniper VPN stopped working after linux-4.5

I'm using the mad scientist script to connect to my work's vpn. It's been working fine until linux 4.5 came out then it stopped working.

Similar to what is described in this post:
VPN routing no longer works with linux-4.5-1. Fine with linux-4.4.5-1.

I tried figure it out then but no luck, instead I switched to the lts kernel when I needed to work remotely. Which have been working fine until recently when the lts kernel got bumped to 4.9.

I tried using openconnect as was suggested in the post but getting

$ sudo openconnect --juniper https://my-work.vpn

WARNING: Juniper Network Connect support is exper
It will probably be superseded by Junos Pulse sup
GET https://my-work.vpn/
Connected to 111.111.111.111:443
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
Got HTTP response: HTTP/1.1 302 Found
GET https://my-work.vpn/dana-na/auth/url_2/welc
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
frmLogin
username:<username>
password:
POST https://my-work.vpn/dana-na/auth/url_2/log
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
Got HTTP response: HTTP/1.1 302 Moved
GET https://my-work.vpn/dana-na/auth/url_2/ … 0a666882b9
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
POST https://my-work.vpn/dana-na/auth/url_2/log
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
Got HTTP response: HTTP/1.1 302 Moved
GET https://my-work.vpn/dana/home/starter0.cgi?
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
SSL negotiation with my-work.vpn
Connected to HTTPS on my-work.vpn
Unexpected response of size 3 after hostname pack
Creating SSL connection failed

Note that I replaced my work's real vpn address with my-work.vpn

Here's what kernel I'm currently running

$ uname -r
4.9.13-1-lts

Any idea how to debug this?

Thanks.

Last edited by plattfot (2017-04-18 03:28:48)

plattfot

Member

Registered: 2012-09-15

Posts: 16

Re: [SOLVED] Juniper VPN stopped working after linux-4.5

Completely missed the entry in the Wiki about this, my bad. However the workaround described in the wiki didn't work for me.

 echo 0 > /proc/sys/net/ipv6/conf/default/router_solicitations

But I found one from this comment that did!

echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6

I can finally drop the 4.4 lts kernel that I've been dual booting with and use this until the bug is fixed.
Tested it on a lenovo thinkpad x220 with the kernel 4.10.8-1-ARCH.

Hopefully this will be helpful.