As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [openconnect]

OpenConnect is a client for Cisco's AnyConnect SSL VPN.

Filter by
Sorted by
Tagged with
0 votes
1 answer
38 views

How to run nginx and ocserv on the same IP:Port using the same domain name?

How to run nginx and ocserv on the same IP:Port using the same domain name? Just like how a similar thing is possible by using SSTP protocol, if I am not mistaken. I am using Ubuntu 20.04.
Masood Lapeh's user avatar
0 votes
0 answers
23 views

Ocserv static tun device name for each user

Ocserv assigns dynamic interface names based on TUN device name. For example if tun device name is vpns, users connect via vpns0, vpns1 , vpns2 and ... Everytime a user opens a new session, a new ...
Hamed Zargar's user avatar
0 votes
2 answers
226 views

How to view total traffic usage of each user in ocserv

I'm using ocserv as VPN server in my company on ubuntu, and I want to view how much traffic each user is using. Users are set in ocpsswd file. Do ocserv have this feature or any library I can use? As ...
Hamed Zargar's user avatar
0 votes
1 answer
97 views

VPN started with Network Manager doesn't configure routing table correctly

I have a Debian 11 system that has been configured to connect to a remote network via VPN. This has been functioning fine for a long time (since Debian 9). Recently, the remote network made some ...
BrianD's user avatar
  • 1
0 votes
0 answers
56 views

openconnect client hello dropped by DPI

I've installed openconnect server (ocserv) and works perfectly when I tunnel (SSH) to the server through another server that is inside country. But when I try to connect directly, the "client ...
Fardin Dadashi's user avatar
0 votes
3 answers
52 views

how to make an installed package as a service in ubuntu?

I've installed ocserv package using these commands on Ubuntu22: mkdir /usr/local/src/ocserv cd /usr/local/src/ocserv wget ftp://ftp.infradead.org/pub/ocserv/ocserv-0.10.9.tar.xz unxz ocserv-0.10.9.tar....
Ethan_m's user avatar
  • 11
0 votes
0 answers
333 views

Self hosted ocserv reject clients

I deployed an ocserv on my VPS but my android client raise below error: AnyConnect Connection attempt has timed out. Please verify Internet connectivity. I stop ocserv service on the VPS and run as ...
M.J's user avatar
  • 97
0 votes
1 answer
191 views

Prevent VPN client from network scanning on ocserv

I have a ocserv server for VPN on a debian11 server. One of my clients did a network scanning and service provider blocked my IP for terms of service violation. This is 2nd time that this happened and ...
AminMZ's user avatar
  • 3
0 votes
1 answer
302 views

OpenConnect force clients to use special cipher

I use ocserv on Centos as Openconnect VPN and I use config file for setting up the server I need to force clients to use special cipher like AES-256-GCM because it seems that VPN blocks on some 4G net ...
Farhad Sakhaei's user avatar
1 vote
2 answers
1k views

redirect all traffic from server A (Linux) to another server B (Linux) without intercepting ssh to server A

I would like to forward all traffic from a server (Linux) to another server (Linux) without losing ssh access to first server. Authorities (government) have been shutting down the Internet, we have a ...
Shakiba Moshiri's user avatar
1 vote
0 answers
322 views

forward openconnect to internal proxy port by iptables

In my country sometimes government decides to limit access to the international internet. we only have access to sites and IPs inside the country, but data centers have more access to the internet. I ...
HosSeinM's user avatar
  • 111
0 votes
0 answers
163 views

Authentication using a script in openconnect OCSERV like auth-user-pass-verify in OpenVPN

I'm wondering if openconnect OCSERV, in any way, can support authentication using a script like OpenVPN auth-user-pass-verify configuration?
raitech's user avatar
  • 91
0 votes
1 answer
746 views

Use openconnect and satsify annyconnect scans

My organisation provides vpn access using cisco anyconnect. I use a linux system and I can connect to vpn using openconnect. I have to use openconnect because anyconnect on linux is not compatible ...
aseq's user avatar
  • 4,590
0 votes
1 answer
245 views

Add to route table destnation using this syntax *.mycompany.net

The reason that I am asking this question is that i a using VPN-slice (VPNC) with openconnect While running this command ip route add *.mycompany.net via 0.0.0.0 dev tun0 Error: any valid prefix is ...
Serge Zoghbi's user avatar
1 vote
0 answers
426 views

Best way to connect to L2TP VPN from container running in GCP

I've built an ubuntu container locally that uses OpenConnect to establish a connection to a customer's AnyConnect VPN server. They also have an L2TP connection available as well. After OpenConnect ...
FaultyJuggler's user avatar
0 votes
0 answers
452 views

Openconnect Systemd Unit Hardening: How to restrict access to devices and users

I am hardening my systemd service file for openconnect(8). In my setup, I am using vpn-slice to setup routes (I pass arguments such that it doesn't write to any files) and use various files to define ...
steiny's user avatar
  • 173
0 votes
1 answer
1k views

IPv6 support makes openconnect server vpn connection too slow

I have set up an OpenConnect server (ocserv) on CentOS 8 that is quite fast. However, when I enable IPv6 on it by uncommenting the following line, it becomes painfully slow and upload becomes almost ...
Mehdi Haghgoo's user avatar
1 vote
0 answers
65 views

Tunnel all traffic through VPN except a specific network

I am using openconnect on a remote CentOS 7.5 to connect to a VPN on another network. When I ssh to that machine and connect to VPN, my ssh connection breaks. Both my CentOS and desktop machines are ...
sorush-r's user avatar
  • 151
2 votes
0 answers
4k views

SSL_ERROR_SYSCALL in docker container when using openconnect vpn

I'm developing a telegram bot, but the API is banned here (Iran) so i have to use VPN or cant make a single call to the BOT API. for development i'm using docker,docker-compose in Ubuntu-18 and my VPN ...
Arash's user avatar
  • 121
1 vote
1 answer
1k views

No network connection after killing openconnect process

I use openconnect to connect to my VPN server, one strange thing I've noticed is that if I use kill or pkill command to kill a background running openconnect process then the whole Linux network will ...
Tonni's user avatar
  • 21
1 vote
2 answers
3k views

How can I connect to a 2FA VPN on Linux?

I need to connect to the office VPN from a linux machine. I'm able to connect to it only via Citrix NetScaler Gateway on Windows. The connection needs the secondary password (in my case is an OTP from ...
croov3n's user avatar
  • 11
1 vote
0 answers
562 views

How to debug tun0 issues with OpenConnect Juniper

I'm using OpenConnect in Debian testing to connect to a corporate Juniper VPN, this way: sudo openconnect --juniper -v <my_corporate_VPN_url> I'm doing this from three physical instances of ...
Antonio López's user avatar
9 votes
2 answers
6k views

Openconnect and Pulse Stopped Working

I connect to a pulse VPN via sudo openconnect --juniper {{myserver}} and it has worked for months. This morning when I try to get in, after accepting the cert and doing username/password it just ...
Feasoron's user avatar
  • 231
6 votes
2 answers
20k views

How do I supply a password to NetworkManager-openconnect automatically?

I am running a RedHat Enterprise Linux 7.3 server with NetworkManager 1.4 that needs periodic access over VPN to a client's network using openconnect 7.06-1.el7. I can use nmcli to connect with the --...
Brad's user avatar
  • 161
2 votes
1 answer
550 views

establish openconnect without lose ssh connection

In my linux VPS, I want access to special web service that check my VPS IP, so i must use VPN. but when establishing my VPN using openconnect , I'm lost ssh and control over my VPS ? any workaround to ...
Mojtaba Asgari's user avatar
4 votes
0 answers
2k views

Does openconnect have native support for Pulse Secure?

Since they rolled out Pulse Secure in place of Network Connect, I have been attempting to connect to my company's vpn using openconnect. I am seemingly able to run openconnect without errors, do the ...
jerome's user avatar
  • 203
25 votes
2 answers
31k views

openconnect cannot connect to Anyconnect VPN group using -g

I am using openconnect to connect to a VPN. When starting the client as sudo openconnect -v -u anaphory vpn-gw1.somewhere.net, I am able to connect after entering the GROUP and Password. # ...
Anaphory's user avatar
  • 351
6 votes
3 answers
11k views

LAN access with Cisco AnyConnect Secure Mobility Client v. 3.0.4235

Whenever I connect to a VPN server using the Cisco AnyConnect Secure Mobility Client v. 3.0.4235 (probably also with other versions) I lose access to my LAN. I hope to remedy this by manually adding ...
Wuhtzu's user avatar
  • 336
3 votes
0 answers
487 views

Ubuntu & OpenConnect : any way to provide additional arguments?

I'm using OpenConnect to connect to my workplace via VPN. This works fine, but I'd like to use Ubuntu's network manager to establish connections. I guess it's a matter of having all connections ...
sbrattla's user avatar
  • 1,558
1 vote
1 answer
337 views

openconnect on startup at debian wheezy through ssh [closed]

I am trying to connect to Cisco vpn using open connect. I can do it with the terminal where it asks for my user and pass. However, is there any method for automating this on login.
Ishan's user avatar
  • 11
2 votes
1 answer
5k views

openconnect VPN works in KDE NetworkManager widget but not on command line

I need to connect to a Cisco VPN on Linux and at first I did this using the KDE NetworkManager plasma widget thingy. That worked fine and I'm able to connect to the VPN if I choose it from the Network ...
StFS's user avatar
  • 273
8 votes
5 answers
27k views

Supplying password to openconnect started via start-stop-daemon

I am attempting to start openconnect via a Debian init script that makes use of start-stop-daemon: DAEMON=/usr/sbin/openconnect DAEMON_ARGS="<endpoint> --script /etc/vpnc/vpnc-script --user <...
Thilo-Alexander Ginkel's user avatar
0 votes
0 answers
75 views

OpenConnect causing problems with httpd service

My httpd service was working properly, however whenever using OpenConnect through the box I can no longer connect to the box's webserver, it's giving me a 522 timeout error. Maybe I'm going about ...
sunshinekitty's user avatar
1 vote
1 answer
433 views

Writing an upstart file which allows the user to input username and password

I'm trying to write an upstart file for OpenConnect. The task is pretty simple, but I'm stuck because I don't want to provide the username and password in a config file, but prompt the user to provide ...
Robert Munteanu's user avatar