Forge Home

Modules

Puppet

Resources

PuppetEcosystemPuppet CommunityUpdates

vpnc

Puppet module to manage Cisco vpnc client
Project URLRSS FeedReport issues

7,059 downloads

6,202 latest version

4.5 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Support the Puppet Community by contributing to this module

You are welcome to contribute to this module by suggesting new features, currency updates, or fixes. Every contribution is valuable to help ensure that the module remains compatible with the latest Puppet versions and continues to meet community needs. Complete the following steps:

  1. Review the module’s contribution guidelines and any licenses. Ensure that your planned contribution aligns with the author’s standards and any legal requirements.
  2. Fork the repository on GitHub, make changes on a branch of your fork, and submit a pull request. The pull request must clearly document your proposed change.

For questions about updating the module, contact the module’s author.

Version information

  • 0.1.3 (latest)
  • 0.1.2
  • 0.1.1
  • 0.1.0
released Apr 10th 2018
This version is compatible with:
  • ,

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'caezsar-vpnc', '0.1.3'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add caezsar-vpnc
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install caezsar-vpnc --version 0.1.3

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.

Download

Documentation

caezsar/vpnc — version 0.1.3 Apr 10th 2018

Table of Contents

  1. Description

  2. Usage - Configuration options and additional functionality

Description

A simple Puppet Module for managing and configuring Cisco VPNC Client in Debian based Lnux distributions.

vpnc is a VPN client for the Cisco 3000 VPN Concentrator, creating a IPSec-like connection as a tunneling network device for the local system. It uses the TUN/TAP driver in Linux kernel 2.4 and above and device tun(4) on BSD. The created connection is presented as a tunneling network device to the local system.

Usage

Add this class to hiera yaml conf file:

classes:
  - '::vpnc'

Then add your values for the server:

vpnc::gateway: 10.10.10.10
vpnc::id: 'internet'
vpnc::secret: 'internet'
vpnc::username: 'internet'
vpnc::password: 'internet'
vpnc::enable_by_systemd: true

Authentication mode:

IKE Authmode <psk/cert/hybrid>

  • psk: pre-shared key (default)
  • cert: server + client certificate (not implemented yet)
  • hybrid: server certificate + xauth (if built with openssl support)

IKE Authmode defaults to psk. To change it add a new value for ike_authmode variable in hiera.

vpnc::ike_authmode: 'hybrid'

To add a filename or path to the CA-PEM-File or CA dir insert one of the follwoing options to hiera:

CA File:

vpnc::cafile: '/etc/vpnc/vpn-example-com.pem'

or

CA dir:

vpnc::cadir: '/etc/vpnc'

Add local port 0, in order to use a random source port for each VPN connection. This setting allows multiple VPN connections to run at once. 

vpnc::localport0: true

Add script /path/to/my_super_script, in order to use a custom script to disable resolv.conf update for example

vpnc::script: '/etc/vpnc/no_resolvconf_update'

Add interface name my_favorite_name, in order to have a predictable name for the vpn interface

vpnc::interface_name: 'my_vpn'

Enable systemd to manage vpnc connect/disconnect for default profile

vpnc::enable_by_systemd: true

Limitations

This is where you list OS compatibility, version compatibility, etc. If there are Known Issues, you might want to include them under their own heading here.

For CentOS Linux distributions, first install EPEL repos: https://fedoraproject.org/wiki/EPEL

If you aren't using changelog, put your release notes here (though you should consider using changelog).