This repository contains
- The
csdscript necessary to connect to a VPN which expects an AnyConnect client. - Instructions on how to get openconnect to work using this
csdscript. - A
dockerimage to wrap it all up.
If you just want to run openconnect, replacing your use of AnyConnect you first need to
update CSD_HOSTNAME in csd.sh. The value of
CSD_HOSTNAME is VPN_URL, replace this with your VPN's url.
CSD_HOSTNAME=my-vpn.com
Now, run open connect setting --csd-user to the user on your system which will run
the CSD script, ${VPN_USER} to the user you want to login to the VPN with and ${VPN_URL}
to the URL of the VPN you are logging into.
$ sudo openconnect -u${VPN_USER} ${VPN_URL} --csd-user=root --csd-wrapper=/var/tmp/csd.sh
It is also possible to run openconnect inside a docker container and route traffic from the host through the container. To do this first build this repo's image.
$ docker build --tag vpner .
Now run a container as follows:
$ docker run -ti --name vpner -e VPN_URL=${VPN_URL} -e VPN_USER=${VPN_USER} --privileged --cap-add=ALL vpner
This will run the init.sh script which sets up forwarding via iptables within
the container and starts openconnect as outlined above. The first time this is run it will
have to pull down a bunch of libs and executables so may take a minute or so. The first
prompt will be a prompt for PASSCODE you can just hit return here and then it will prompt
for your correct credentials. Once you are logged in, you can enter the container via
docker exec -ti vpner bash and ping a host on your vpn.
The container will now allow forwading through it and then along the tun device that openconnect
sets up. The last thing you need to do to get the host access to the VPN is to set up a
route through the container. Run the following to get the IP of the container:
$ docker inspect --format '{{ .NetworkSettings.IPAddress }}' vpner
172.17.0.2
Finally, set up a route:
$ sudo ip route add 10.0.0.0/8 via 172.17.0.2