[APP][4.0+][v1.11 - 20150221] OpenConnect - SSL VPN client for Cisco AnyConnect

petelking · Jun 11, 2014

cernekee said:
Code:

busybox ifconfig tun0 mtu 1200

Many thanks for getting back to me, Anyconnect MTU is 1405 while openconnect MTU is 1406
Changing the MTU to 1200 solved this but also chaining it to 1405 solved so I'd like to thank you for your efforts :good:
Any way to make this change permenent?

Code:

busybox ifconfig tun0 mtu 1405

Cheers!

cernekee · Jun 11, 2014

petelking said:
Many thanks for getting back to me, Anyconnect MTU is 1405 while openconnect MTU is 1406

Hmm, that's odd. I wonder how it is being calculated. Normally we just get a number from the server and use it as-is. When I connect to a local ASA with either client, I get 1406.

Can you send the MTU info for the other interfaces under both clients?

petelking · Jun 11, 2014

Sent Via Email

After further testing, setting MTU to 1200 as you suggested works a lot better than 1405 with a lot less time-outs and retransmits.

Thanks.

GT3XX · Jul 8, 2014

(Tasker) intent to start vpn connection

Hi all,

I just switched from Apple to Android and like it already!

Tho, I can't figure out what's the intent to add to tasker to start the vpn connection. I read the github page which said smth about the intent, but i can't translate it to tasker format. Can someone put me into the right direction?

A: public class StartOpenVPNActivity extends Activity {
@Override
public void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.main);

final String EXTRA_NAME = "de.blinkt.openvpn.shortcutProfileName";

Intent shortcutIntent = new Intent(Intent.ACTION_MAIN);
shortcutIntent.setClassName("de.blinkt.openvpn", "de.blinkt.openvpn.LaunchVPN");
shortcutIntent.putExtra(EXTRA_NAME,"upb ssl");
startActivity(shortcutIntent);

or from the shell:

am start -a android.intent.action.MAIN -n de.blinkt.openvpn/.LaunchVPN -e de.blinkt.openvpn.shortcutProfileName Home

cernekee · Jul 8, 2014

GT3XX said:
Tho, I can't figure out what's the intent to add to tasker to start the vpn connection. I read the github page which said smth about the intent, but i can't translate it to tasker format.

This feature was in the original ics-openvpn sources, but it isn't currently working in OpenConnect.

I can look into getting it fixed up if you're interested in using it. Are you starting/stopping the VPN connection based on e.g. location, hours, etc.?

GT3XX · Jul 8, 2014

cernekee said:
This feature was in the original ics-openvpn sources, but it isn't currently working in OpenConnect.

I can look into getting it fixed up if you're interested in using it. Are you starting/stopping the VPN connection based on e.g. location, hours, etc.?

Aff, sorry. I'ts getting kinda late here. It would be great if I can start the VPN connection when the phone is connected to specific WIFI APs.

GT3XX · Jul 12, 2014

Don't want to hesitate you, but I'm still interested. Do you have any updates? Thanks!

cernekee · Jul 12, 2014

GT3XX said:
Don't want to hesitate you, but I'm still interested. Do you have any updates? Thanks!

I haven't coded anything up yet but I gave it some thought.

First - I think SmoothConnect does some sort of blacklist/whitelist based on wifi SSIDs, so that might be something to check out.

Disconnecting in response to another app's intent is easy. Connecting is often interactive, so I think it might work best if the following conditions are satisfied:

VpnService confirmation dialog is bypassed. Arne Schwab made an Xposed module for this. I was thinking I might integrate a cut-down version of this feature into OpenConnect directly, so that if you install OpenConnect you'll automatically get an option in the Xposed Installer to always allow VPN connections from OpenConnect. Hopefully this doesn't have any ill effects if Xposed is not installed.
You would probably want to use batch mode (or a passwordless cert) so that OpenConnect doesn't bug you for group/login/password on every connection. Does this currently work for you?

GT3XX · Jul 13, 2014

1157

cernekee said:
I haven't coded anything up yet but I gave it some thought.

First - I think SmoothConnect does some sort of blacklist/whitelist based on wifi SSIDs, so that might be something to check out.

Disconnecting in response to another app's intent is easy. Connecting is often interactive, so I think it might work best if the following conditions are satisfied:

VpnService confirmation dialog is bypassed. Arne Schwab made an Xposed module for this. I was thinking I might integrate a cut-down version of this feature into OpenConnect directly, so that if you install OpenConnect you'll automatically get an option in the Xposed Installer to always allow VPN connections from OpenConnect. Hopefully this doesn't have any ill effects if Xposed is not installed.

You would probably want to use batch mode (or a passwordless cert) so that OpenConnect doesn't bug you for group/login/password on every connection. Does this currently work for you?

Thanks for your quick reply. I own an ASA for home use so I'm able to set it up as needed.
At this moment, I have to Anyconnect profiles:

Cert based - To use an encrypted tunnel when I'm connected to public AP's so it would be hard to intercept traffic.
AAA + 2 factor authentication - To access my LAN.

I'd like to connect to my cert based profile when I'm not locally connected to my LAN nor 4G. I tried to setup SmoothConnect but it keeps bugging me certficate warnings (your OpenConnect and the official AnyConnect apps work perfectly though).
If it ain't much work the most ideal situation would be to manage the connection by Tasker and be able to see the status of the connection by Tasker variables.

Ray-Out · Sep 2, 2014

I found a problem with the current version:

Since commit 4d4c10 certificate files in the cache folder that get used by the lib are no more updated with the ones for the connection.

Seems path never gets changed as only srcPath is assigned.

cernekee · Sep 2, 2014

Ray-Out said:
I found a problem with the current version:

Since commit 4d4c10 certificate files in the cache folder that get used by the lib are no more updated with the ones for the connection.

Seems path never gets changed as only srcPath is assigned.

Oops, looks like I forgot to return srcPath for the !isExecutable case (no temp file). Thanks for catching that.

I'll make a v1.02 with the fix.

Ray-Out · Sep 2, 2014

cernekee said:
Oops, looks like I forgot to return srcPath for the !isExecutable case (no temp file). Thanks for catching that.

I'll make a v1.02 with the fix.

Thanks, and sorry for being too lazy to send a patch

RainFlying · Jan 13, 2015

Is it possible to connect to a "default" connection upon launching?

wilhexm · May 3, 2015

Hello
I connected to a Cisco ASA server with a P12 file certification. But I can't select user group, while I can chose it by AnyConnect app.
Need for help, Thank you.

hatoxda · Oct 12, 2015

When the mtu is less than 1280, the ipv6 should be disabled

Hi, thanks for this great app. But I got a problem regarding MTU setting:
Because the lame HUAWEI phone has an MTU of 1400 for both wireless and mobile data interface, the resulted MTU is 1269. And the app fallback to 1280, I think it's for the IPV6? In this case, I think the IPV6 should be disabled instead of fallback? I believe the recent version of ocserv is doing this. I also filed an issue on GitHub. Could you please have a look on this?

Thanks.

batvan · Nov 3, 2015

Split Tunelling

Hello

Can someone help me set up split tunelling? I want to be able to access my local home printer while on my work VPN .

I tried using both options and inputted my home subnet;

192.168.0.0/24

Doesn't seem to be working .

lyrelai · Nov 5, 2015

The split tunnel is specified to include the ip address range you want Openconnect to route to on your Work VPN side. Any other ip address that is not in this range will be routed through your normal local network route. So, put your work VPN internal ip address range in that split tunnel range, then everything else will not be routed through VPN.

Lyre

batvan · Nov 6, 2015

Thanks. I got it working using 10.0.0.0/8

Quirken · Nov 13, 2015

seems like the TOTP token isn't working for me.

I set software token to TOTP and entered my token string and when i connect, it still asks me for my 2 step passcode. It isn't prefilled with anything

The log tab mentions

CALLBACK: onProcessAuthForm
AUTH: message 'somestringblahblah'
AUTH form result is 1

Running Android 6 if relevant, AOSP stock. Typing in the code manually succeeds with connection.

aderbalito · Jul 27, 2016

Alphanumeric PIN

PIN allow only numbers and I need to use alphanumeric characters...

[APP][4.0+][v1.11 - 20150221] OpenConnect - SSL VPN client for Cisco AnyConnect

Member

Senior Member

Member

New member

Senior Member

New member

New member

Senior Member

New member

Member

Senior Member

Member

Member

Member

Member

Senior Member

Member

Senior Member

Member

Member

Similar threads

Top Liked Posts