Questions tagged [openconnect]
OpenConnect is a client for Cisco's AnyConnect SSL VPN.
34
questions
0
votes
1
answer
38
views
How to run nginx and ocserv on the same IP:Port using the same domain name?
How to run nginx and ocserv on the same IP:Port using the same domain name? Just like how a similar thing is possible by using SSTP protocol, if I am not mistaken. I am using Ubuntu 20.04.
- 48
0
votes
0
answers
23
views
Ocserv static tun device name for each user
Ocserv assigns dynamic interface names based on TUN device name. For example if tun device name is vpns, users connect via vpns0, vpns1 , vpns2 and ...
Everytime a user opens a new session, a new ...
0
votes
2
answers
226
views
How to view total traffic usage of each user in ocserv
I'm using ocserv as VPN server in my company on ubuntu, and I want to view how much traffic each user is using. Users are set in ocpsswd file. Do ocserv have this feature or any library I can use? As ...
0
votes
1
answer
97
views
VPN started with Network Manager doesn't configure routing table correctly
I have a Debian 11 system that has been configured to connect to a remote network via VPN. This has been functioning fine for a long time (since Debian 9).
Recently, the remote network made some ...
- 1
0
votes
0
answers
56
views
openconnect client hello dropped by DPI
I've installed openconnect server (ocserv) and works perfectly when I tunnel (SSH) to the server through another server that is inside country. But when I try to connect directly, the "client ...
0
votes
3
answers
52
views
how to make an installed package as a service in ubuntu?
I've installed ocserv package using these commands on Ubuntu22:
mkdir /usr/local/src/ocserv
cd /usr/local/src/ocserv
wget ftp://ftp.infradead.org/pub/ocserv/ocserv-0.10.9.tar.xz
unxz ocserv-0.10.9.tar....
- 11
0
votes
0
answers
333
views
Self hosted ocserv reject clients
I deployed an ocserv on my VPS but my android client raise below error:
AnyConnect
Connection attempt has timed out. Please verify Internet connectivity.
I stop ocserv service on the VPS and run as ...
- 97
0
votes
1
answer
191
views
Prevent VPN client from network scanning on ocserv
I have a ocserv server for VPN on a debian11 server.
One of my clients did a network scanning and service provider blocked my IP for terms of service violation.
This is 2nd time that this happened and ...
- 3
0
votes
1
answer
302
views
OpenConnect force clients to use special cipher
I use ocserv on Centos as Openconnect VPN and I use config file for setting up the server
I need to force clients to use special cipher like AES-256-GCM
because it seems that VPN blocks on some 4G net ...
- 131
1
vote
2
answers
1k
views
redirect all traffic from server A (Linux) to another server B (Linux) without intercepting ssh to server A
I would like to forward all traffic from a server (Linux) to another server (Linux) without losing ssh access to first server.
Authorities (government) have been shutting down the Internet, we have a ...
- 221
1
vote
0
answers
322
views
forward openconnect to internal proxy port by iptables
In my country sometimes government decides to limit access to the international internet. we only have access to sites and IPs inside the country, but data centers have more access to the internet.
I ...
- 111
0
votes
0
answers
163
views
Authentication using a script in openconnect OCSERV like auth-user-pass-verify in OpenVPN
I'm wondering if openconnect OCSERV, in any way, can support authentication using a script like OpenVPN auth-user-pass-verify configuration?
- 91
0
votes
1
answer
746
views
Use openconnect and satsify annyconnect scans
My organisation provides vpn access using cisco anyconnect. I use a linux system and I can connect to vpn using openconnect. I have to use openconnect because anyconnect on linux is not compatible ...
- 4,590
0
votes
1
answer
245
views
Add to route table destnation using this syntax *.mycompany.net
The reason that I am asking this question is that i a using VPN-slice (VPNC) with openconnect
While running this command
ip route add *.mycompany.net via 0.0.0.0 dev tun0
Error: any valid prefix is ...
1
vote
0
answers
426
views
Best way to connect to L2TP VPN from container running in GCP
I've built an ubuntu container locally that uses OpenConnect to establish a connection to a customer's AnyConnect VPN server. They also have an L2TP connection available as well. After OpenConnect ...
google-cloud-platform
0
votes
0
answers
452
views
Openconnect Systemd Unit Hardening: How to restrict access to devices and users
I am hardening my systemd service file for openconnect(8). In my setup, I am using vpn-slice to setup routes (I pass arguments such that it doesn't write to any files) and use various files to define ...
- 173
0
votes
1
answer
1k
views
IPv6 support makes openconnect server vpn connection too slow
I have set up an OpenConnect server (ocserv) on CentOS 8 that is quite fast. However, when I enable IPv6 on it by uncommenting the following line, it becomes painfully slow and upload becomes almost ...
1
vote
0
answers
65
views
Tunnel all traffic through VPN except a specific network
I am using openconnect on a remote CentOS 7.5 to connect to a VPN on another network. When I ssh to that machine and connect to VPN, my ssh connection breaks. Both my CentOS and desktop machines are ...
- 151
2
votes
0
answers
4k
views
SSL_ERROR_SYSCALL in docker container when using openconnect vpn
I'm developing a telegram bot, but the API is banned here (Iran) so i have to use VPN or cant make a single call to the BOT API.
for development i'm using docker,docker-compose in Ubuntu-18 and my VPN ...
- 121
1
vote
1
answer
1k
views
No network connection after killing openconnect process
I use openconnect to connect to my VPN server, one strange thing I've noticed is that if I use kill or pkill command to kill a background running openconnect process then the whole Linux network will ...
- 21
1
vote
2
answers
3k
views
How can I connect to a 2FA VPN on Linux?
I need to connect to the office VPN from a linux machine. I'm able to connect to it only via Citrix NetScaler Gateway on Windows. The connection needs the secondary password (in my case is an OTP from ...
- 11
1
vote
0
answers
562
views
How to debug tun0 issues with OpenConnect Juniper
I'm using OpenConnect in Debian testing to connect to a corporate Juniper VPN, this way:
sudo openconnect --juniper -v <my_corporate_VPN_url>
I'm doing this from three physical instances of ...
- 133
9
votes
2
answers
6k
views
Openconnect and Pulse Stopped Working
I connect to a pulse VPN via
sudo openconnect --juniper {{myserver}}
and it has worked for months.
This morning when I try to get in, after accepting the cert and doing username/password it just ...
- 231
6
votes
2
answers
20k
views
How do I supply a password to NetworkManager-openconnect automatically?
I am running a RedHat Enterprise Linux 7.3 server with NetworkManager 1.4 that needs periodic access over VPN to a client's network using openconnect 7.06-1.el7. I can use nmcli to connect with the --...
- 161
2
votes
1
answer
550
views
establish openconnect without lose ssh connection
In my linux VPS, I want access to special web service that check my VPS IP, so i must use VPN.
but when establishing my VPN using openconnect , I'm lost ssh and control over my VPS ? any workaround to ...
- 149
4
votes
0
answers
2k
views
Does openconnect have native support for Pulse Secure?
Since they rolled out Pulse Secure in place of Network Connect, I have been attempting to connect to my company's vpn using openconnect.
I am seemingly able to run openconnect without errors, do the ...
- 203
25
votes
2
answers
31k
views
openconnect cannot connect to Anyconnect VPN group using -g
I am using openconnect to connect to a VPN. When starting the client as sudo openconnect -v -u anaphory vpn-gw1.somewhere.net, I am able to connect after entering the GROUP and Password.
# ...
- 351
6
votes
3
answers
11k
views
LAN access with Cisco AnyConnect Secure Mobility Client v. 3.0.4235
Whenever I connect to a VPN server using the Cisco AnyConnect Secure Mobility Client v. 3.0.4235 (probably also with other versions) I lose access to my LAN. I hope to remedy this by manually adding ...
- 336
3
votes
0
answers
487
views
Ubuntu & OpenConnect : any way to provide additional arguments?
I'm using OpenConnect to connect to my workplace via VPN. This works fine, but I'd like to use Ubuntu's network manager to establish connections. I guess it's a matter of having all connections ...
- 1,558
1
vote
1
answer
337
views
openconnect on startup at debian wheezy through ssh [closed]
I am trying to connect to Cisco vpn using open connect.
I can do it with the terminal where it asks for my user and pass.
However, is there any method for automating this on login.
- 11
2
votes
1
answer
5k
views
openconnect VPN works in KDE NetworkManager widget but not on command line
I need to connect to a Cisco VPN on Linux and at first I did this using the KDE NetworkManager plasma widget thingy. That worked fine and I'm able to connect to the VPN if I choose it from the Network ...
- 273
8
votes
5
answers
27k
views
Supplying password to openconnect started via start-stop-daemon
I am attempting to start openconnect via a Debian init script that makes use of start-stop-daemon:
DAEMON=/usr/sbin/openconnect
DAEMON_ARGS="<endpoint> --script /etc/vpnc/vpnc-script --user <...
0
votes
0
answers
75
views
OpenConnect causing problems with httpd service
My httpd service was working properly, however whenever using OpenConnect through the box I can no longer connect to the box's webserver, it's giving me a 522 timeout error. Maybe I'm going about ...
- 101
1
vote
1
answer
433
views
Writing an upstart file which allows the user to input username and password
I'm trying to write an upstart file for OpenConnect. The task is pretty simple, but I'm stuck because I don't want to provide the username and password in a config file, but prompt the user to provide ...
- 1,644