Juniper Networks Secure Access

Release 5.3 R1

Using the Network Connect service (ncsvc) on a Linux client (End-User Help)
The Network Connect service, which consists of several applications, a library file, and a .jar file, is installed in the following location:
/usr/local/nc

The installer installs the following files: ncsvcThe Network Connect service application ncdiagThe Network Connect diagnostics application libncui.soThe Library containing the ncui C code that is called by the Java GUI NC.jarThe .jar file containing the Java GUI.

Running ncsvc on a Linux client

You can execute the ncsvc application as a standalone application, to provide a GUI-free Network Connect. The application includes options for proxy support and log upload. Warning: Authentication proxy is not fully supported in Linux. As a result, auth proxy may or may not work correctly on the Network Connect Linux client. To execute ncsvc: 1.Open a command window.

2.Change to directory /usr/local/nc. 3.Type ncsvc.

4.Add the appropriate options: Short options: ncsvc -h <ivehostname> -u <username> -p <password> [-r <realm> ] -f <ivecertificate_in_der_format> [-P <service_port>] [L <log_level>] [-g] [-y <proxy> -z <proxy_port> [-x<proxy_username> -a <proxy_password> [-d<proxy_domain>]]] (-g is the standalone log upload option) ncsvc K ncsvc v

Long options (you can alternatively use the single dash (-) instead of the double dash (--): ncsvc --host <ivehostname> --username <username> --password <password> [--realm <realm> ] --certificate <ivecertificate_in_der_format> [--Port <service_port>] [--log-level <log_level>] [--upload-log] [--proxy <proxy> ----proxy-port <proxy_port> [--[proxy-user <proxy_username> --proxy-pass <proxy_password> [--proxy-domain<proxy_domain>]]]

Copyright 2006 Juniper Networks, Inc.

Juniper Networks Secure Access

Release 5.3 R1

5. Press Enter.

ncsvc --Kill ncsvc --version

Examples: Starting the Network Connect service, with no proxy:

ncsvc -h ive1.company.com -u testuser -p testpass -r testrealm -f ./ive1.der -L 1

Starting the Network Connect service, with proxy but no proxy username/password/domain:
ncsvc -h ive1.company.com -u testuser -p testpass -r testrealm -f ./ive1.der -L 1 -y 172.168.1.0 -z 8118

Starting the Network Connect service, with proxy and proxy username/password/domain:
ncsvc -h ive1.company.com -u testuser -p testpass -r testrealm -f ./ive1.der -L 1 -y 172.168.1.0 -z 8118 -s user123 -a pass123 -d company.com

Starting the Network Connect service to upload logs, with no proxy:

ncsvc -h ive1.company.com -u testuser -p testpass -r testrealm -f ./ive1.der -g

Running the Java GUI on a Linux client

You can execute the Java GUI from a command line. Warning: Authentication proxy is not fully supported in Linux. As a result, auth proxy may or may not work correctly on the Network Connect Linux client. To run the Java GUI: 1.Open a command window.

2.Change to directory /usr/local/nc.

3.Type the following command, using either short or long options: Short options: <java_path> -cp NC.jar -h <ivehostname> -u <username> -p <password> [-r <realm>] -f <ivecertificate_in_der_format> [-l <gui_log_level> [-L <ncsvc_log_level>] [-y <proxy> -z <proxy_port> [-s <proxy_username> -a <proxy_password> [-d <proxy_domain>]]]

<java_path> is the path to the Java bin directory. Long options: <java_path> -cp NC.jar --host <ivehostname> --username <username> --password <password> [--realm <realm>] -certificate <ivecertificate_in_der_format> [--ncui-log-level <ncui_log_level> [--

Copyright 2006 Juniper Networks, Inc.

Juniper Networks Secure Access

Release 5.3 R1

ncsvc-log-level <ncsvc_log_level>] [--proxy <proxy> --proxy-port <proxy_port> [--proxy-user <proxy_username> --proxy-pass <proxy_password> [--proxydomain <proxy_domain>]]] <java_path> is the path to the Java bin directory. Examples: Starting the Java GUI, with no proxy:
/usr/java/jre1.4.2_04/bin/java -cp NC.jar NC -h ive1.company.com -u testuser -p testpass -r testrealm -f ./ive1.der -L 1

Starting the Java GUI, with a proxy, but no proxy username/password/domain:

/usr/java/jre1.4.2_04/bin/java -cp NC.jar NC -h ive1.company.com -u testuser -p testpass -r testrealm -f ./ive1.der -L 1 -y 172.168.1.0 -z 8118

Starting the Java GUI, with a proxy, with a proxy username/password/domain:

/usr/java/jre1.4.2_04/bin/java -cp NC.jar NC -h ive1.company.com -u testuser -p testpass -r testrealm -f ./ive1.der -L 1 -y 172.168.1.0 -z 8118 -s user123 -a pass123 -d company.com

Stopping the Network Connect service or the Java GUI

You can stop ncsvc or the Java GUI when they are running in the foreground or the background. To stop these applications while running in the foreground, press Ctrl+c (^c) to stop either application.

To stop the applications when running in the background, use one of the two following methods: Method 1 1. Change to the install directory:

2. Enter ./ncsvc -K. Method 2 1.

/usr/local/nc for rpm installation <user_home>/.juniper_networks/network_connect for GUI

installation

Locate the Java process that is running Network Connect:

ps ax | grep java | grep NC

2.

Kill the Java GUI:

kill -15 <java_nc_pid> sleep 5 kill -1 <java_nc_pid>

Copyright 2006 Juniper Networks, Inc.