up vote 98 down vote favorite
42

I have two VPNs setup on my Ubuntu machine, one using vpnc and one using PPTP. These were both setup using the GNOME network manager interface and work great. However on occasion I need to access this machine remotely - is there a way to connect or disconnect to these VPNs from the command line?

share|improve this question
    
Does the vpnc command detailed here not work for you? Also, there are instructions for configuring and connecting to PPTP here. Do they not work? – Kris Harper Aug 16 '11 at 18:23
up vote 142 down vote accepted

If you want to interact with NetworkManager from the command line you can use the "nmcli" command.

list all NM connections: nmcli con

start connection (wifi, vpn, etc): nmcli con up id ConnectionName

down connection: nmcli con down id ConnectionName

(more nmcli commands in the nmcli manpage).

Also note that regular users usually don't have permission to control networking. Using the commands above with sudo should work for most connections, but VPN specifically might fail with "Error: Connection activation failed: no valid VPN secrets."

If that happens to you, it's likely that the VPN password is stored in your user's gnome-keyring, which makes it inaccessible to the root user. This comment explains why.

To fix this, edit /etc/NetworkManager/system-connections/ConnectionName and under [vpn], change the password flags line to:

password-flags=0

And add the following:

[vpn-secrets]
password=YourPassword

Now restart network manager by:

sudo service network-manager restart

Then starting the VPN connection with sudo nmcli con up id ConnectionName should work without problems.

share|improve this answer
1  
I wish there was a general disconnect command that would disconnect any VPN without having to specify its id. That would probably make this feature (I want) easier to implement. – Lonnie Best Jul 6 '14 at 23:15
    
If you're using ipsec (e.g. vpnc), you may also need to add "IPSec secret-flags=0" and "IPSec secret=<grouppw>" in their respective places – Matt Nov 3 '14 at 0:01
    
This still didn't fix me :( I get a message "Error: Connection activation failed: unknown reason." – Evildonald Mar 8 '15 at 5:12
    
I take that back... after the 3rd time I ran the command it worked. 1st time is failed quickly. 2nd time failed slowly. Third time worked! – Evildonald Mar 8 '15 at 5:14
2  
Clear text PWs?? Really?? Does anyone have a SECURE solution? – user447607 Sep 2 '16 at 15:24
up vote 3 down vote

ihashacks's answer with Matt's comments worked for me... almost. Had to tweak one line.

my password-flag line actually read: "Xauth password-flag". The accepted answer wouldn't work for me until I changed to the following

[vpn]
...
Xauth password-flag=0
IPSec secret-flags=0

[vpn-secrets]
Xauth password=<my pw> ## This is the one I changed.
IPSec secret=<group pw>

Not sure why my vpn connections have "Xauth" before every mention of password.

(Sorry this is a new answer, can't yet make comments.)

share|improve this answer
1  
This is for some types of VPN, for example, the Cisco one; very helpful for these cases! There is a mistake, though: the correct case of one key is IPSec secret - otherwise, it's not recognized by NM. – Marcus Sep 15 '15 at 18:00
    
Thanks Marcus, I've made the correction to my answer so no one tries to copy/paste a typo. – John Sep 16 '15 at 17:38

protected by Community♦ May 31 '12 at 18:58

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.