janhouse/always-on-openconnect-vpn
1
0
Fork 0
Code Issues Pull Requests Activity
6 Commits 1 Branch 0 Tags 133 KiB
Shell 100%
b939b7aa0e
Go to file
Janis Jansons b939b7aa0e Added run.sh to gitignore
2020-12-18 02:16:54 +02:00
.gitignore Added run.sh to gitignore 2020-12-18 02:16:54 +02:00
hostscan-bypass.sh Initial commit 2020-12-17 20:22:15 +02:00
README.md Pass TOTP code on STDIN to hide seed from process list. 2020-12-18 01:59:40 +02:00
routes.txt.sample Added subnet routing support 2020-12-18 01:05:16 +02:00
routing.sh Added subnet routing support 2020-12-18 01:05:16 +02:00
run-vpn.sh Pass TOTP code on STDIN to hide seed from process list. 2020-12-18 01:59:40 +02:00

README.md

Always on Openconnect VPN

This script uses Openconnect to automatically connect to Cisco Anyconnect VPN server.

Server address, username, password and 2fa seed is stored in macOS keychain. Feel free to remove them and ask for user input instead.

Additionaly routing for only specific subnets can be added in routes.txt

Setup

git clone this repo
brew install openconnect
brew install vpn-slice
brew install oath-toolkit

Add server address, username, password and 2fa seed in keychain with these names:

  • Openconnect VPN Server
  • Openconnect Username
  • Openconnect Account Password
  • Openconnect TOTP Seed

For ease of use you can allow automatic keychain access to some of the attributs, but do not allow automatic access to password and especially the 2fa seed. It will keep it in memory as long as the script is running.

Rename routes.txt.sample to routes.txt or create an empty routes.txt and add subnets to be routed through VPN there.

Usage

sudo -E ./run-vpn.sh

In case of disconnect, it will try reconnecting after 3 seconds. You can stop it by pressing CTRL+C or killing the script.