Search Results for anyconnect vpn

anyconnect 外部控制管理vpn连接

之前公司所有人都使用iPhone，为了方便微信网页测试，用AnyConnect来实现DNS推送，将微信的网页域名指向不同开发、测试环境的IP。 iOS可以使用Apple Configurator生成mobileconfig文件来配置AnyConnect。最早使用这份配置的时候，发现如果使用密码认证，即便配置文件里写了用户名和密码，iOS的AnyConnect还是会需要用户再输入一次密码。所以一直以来用AnyConnect做的各种解决方案都是使用证书的方式，将用户证书和CA证书一并集成到mobileconfig文件里。不幸的是去年下半年的某天，突然就发现iOS的AnyConnect连上了VPN，但是DNS不生效了。那会儿，iOS升级到10.2之后的某个版本，AnyConnect在iOS平台推出了新版客户端，老的改名Legacy了。换了新版，同样的配置文件下发方式，这回问题更大了，直接连不上。日志里看到的内容大概是客户端不知道该用哪份证书进行身份验证。研究了cisco的文档，发现可以用 anyconnect://connect 直接呼起客户端的连接操作，而这个链接iOS和Android都可用。链接类似如下： anyconnect://connect/?name=Int&host=vpn-internal.sskaje.me:8433&prefill_username=user&prefill_password=password&onsuccess=http%3A%2F%2Fsskaje.me%2Fsuccess 不过由于安全原因，AnyConnect默认将“外部控制”的功能关闭了。（其实，我之前一直以为这个是服务器可以推送客户端执行命令的功能，所以很敏感）在设置中改为提示或者启用。而，之前dns不生效的功能，现在只能开启 split-dns 了。 Incoming search terms:amountockanyconnect split dnsanyconnectios地址enemyz1cfunctionlneiceziximportantxblpost64nsoundletstaredok9www anyconnect://connect/?name=Int&host=vpn-internal sskaje me:8433&prefill_usyouradnLink to this post!

EdgeOS PPTP VPN客户端配置

背景及目标买了个Ubnt EdgeRouter Lite，应同事的需求，研究配置自动翻墙。考虑过之前配置的各种VPN：PPTP、L2TP、IPSec、AnyConnect/OpenConnect。目前搞定的只有PPTP。本次配置使用远程PPTP Server，只考虑Google、Twitter和Facebook的自动翻墙，其他可以参照思路自己加路由和NAT。环境假设网络已经配置好，eth0为内网口，eth1为外网口。 Incoming search terms:articleri3castjbiedgeos l2tp vpnlatervcPPTP 客户端配置文件中各参数含义sentenceei2strongerxogunusualmewLink to this post!

OCServ with AnyConnect on OSX

I tried a lot to make Cisco Anyconnect Secure Mobility Client work with OCServ, on OSX, on Windows, all failed. But the AnyConnect for iOS works fine. You can download the latest clients from: Cisco AnyConnect Clients 3.1.05170 download, 3.1.05182 is also provided. AnyConnect for OSX always says:

The service provider in your current location is restricting access to the Internet. You need to log on with the service provider before you can establish a VPN session. You can try this by visiting any website with your browser.

1	The service provider in your current location is restricting access to the Internet. You need to log on with the service provider before you can establish a VPN session. You can try this by visiting any website with your browser.

In /var/log/system.log:

Apr  2 15:25:04 sskajetekiMacBook-Pro.local acvpnagent[9494]: Function: processConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 11572 Received connect notification (host vpn.sskaje.me:443, profile N/A)
Apr  2 15:25:04 sskajetekiMacBook-Pro.local acvpnagent[9494]: Function: respondToConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 4813 The requested VPN connection to vpn.sskaje.me:443 is not possible at this time (Captive Portal needs to be remediated).
Apr  2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Message type warning sent to the user: Connection attempt has failed.
Apr  2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Function: processIfcData File: ../../vpn/Api/ConnectMgr.cpp Line: 2641 Content type (unknown) received. Response type (Captive Portal detected) from openconnect.sskaje.me: Captive Portal detected
Apr  2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Function: showConnectError File: ../../vpn/Api/ConnectMgr.cpp Line: 5511 Attempt to connect failed when Agent detected a network issue.
Apr  2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Message type error sent to the user: The service provider in your current location is restricting access to the Internet. You need to log on with the service provider before you can establish a VPN session. You can try this by visiting any website with your browser.

Apr 2 15:25:04 sskajetekiMacBook-Pro.local acvpnagent[9494]: Function: processConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 11572 Received connect notification (host vpn.sskaje.me:443, profile N/A)

Apr 2 15:25:04 sskajetekiMacBook-Pro.local acvpnagent[9494]: Function: respondToConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 4813 The requested VPN connection to vpn.sskaje.me:443 is not possible at this time (Captive Portal needs to be remediated).

Apr 2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Message type warning sent to the user: Connection attempt has failed.

Apr 2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Function: processIfcData File: ../../vpn/Api/ConnectMgr.cpp Line: 2641 Content type (unknown) received. Response type (Captive Portal detected) from openconnect.sskaje.me: Captive Portal detected

Apr 2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Function: showConnectError File: ../../vpn/Api/ConnectMgr.cpp Line: 5511 Attempt to connect failed when Agent detected a network issue.

Apr 2 15:25:04 sskajetekiMacBook-Pro.local acvpnui[9520]: Message type error sent to the user: The service provider in your current location is restricting access to the Internet. You need to log on with the service provider before you can establish a VPN session. You can try this by visiting any website with your browser.

I read the … Continue reading “OCServ with AnyConnect on OSX”

Cisco AnyConnect Client for OS X/Windows/Linux (Version 3.1.05160)

You are not authorised to read all content in this post. Please login… Incoming search terms:cisco anyconnect 3 1 05160 downloadCisco 3 1 05160Link to this post!

Ocserv IPv6

I’m using AnyConnect both on iOS and OS X, you can read previously posted article on my blog: anyconnect, openconnect, ocserv. You can find ipv6-network and ipv6-prefix in ocserv’s sample.config:

# The IPv6 subnet that leases will be given from. 
#ipv6-network = fc00:: 
#ipv6-prefix = 16

# The IPv6 subnet that leases will be given from.

#ipv6-network = fc00::

#ipv6-prefix = 16

which means ocserv should be compatible with IPv6. And, in AnyConnect for iOS, ipv6 can be found somewhere, seems ipv6 is also compatible here. … Continue reading “Ocserv IPv6”