August 27, 2013
Rather than use Cicso’s AnyConnect (which has given me trouble in the past) I have setup Openconnect for VPN access.
Here is a high level set of steps to install and configure it for your use. As always, proceed at your own risk, make a backup, complete your last will and testament, and accept that your computer may overheat and fuse into a worthless pile of slag as a result of following these directions.
##Installs You’ll need openconnect and vpnc-script.
The caveats for openconnect warn you that you’ll need the TUN/TAP kernel extensions. Get TUN/TAP from
http://tuntaposx.sourceforge.net/download.html. After running the installer, run
Download vpnc-script. I saved mine to
/usr/local/bin/vpnc-script. Make sure the script is executable.
##Configuration You can view the openconnect command options by running
Rather than enter the options each time you want to create a virtual private network, create an openconnect configuration file and put the configuration values you need there.
Here is my
Fill in your own authgroup and user information.
There is no configuration necessary for vpnc-script.
##Running openconnect With a configuration file in place, here’s how to start a VPN:
If you don’t want to have to enter your local account password for the
sudo command, you can add an exception for the openconnect command to
/etc/sudoers, like so:
And add this line to the file:
Finally, create an alias for the openconnect command above to make life easier.