I use vpnc from extras-devel for as long as I have my N900 and it works just the way it should.
There is also openconnect (plus openconnect-gui) in extras-testing which is probably a bit more end-user/touch friendly but I haven't tested it.