Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

OpenConnect is an open-source, command-line-based VPN Client for macOS. OpenConnect supports a wide range of VPN platforms, including Cisco AnyConnect.

This article is intended for users who would prefer to use an open-source client for connecting to our AnyConnect VPN.

Noteinfo

Please be aware this article is informational only - ; Information Security does not support OpenConnect in an official capacity, and you will be on your own if any issues arise. We officially support and recommend the Cisco AnyConnect client.

...

Installing OpenConnect via Homebrew

To install OpenConnect, you’ll need to ensure you have Homebrew installed on your Mac. If you do not already have Homebrew installed, please visit https://brew.sh/ and follow the instructions for installation.

  1. Open Terminal (Applications > Utilities > Terminal).

  2. First, ensure Homebrew is up-to-date using the following command.

    Code Block
    languagebash
    $ brew update
  3. After Homebrew finishes updating, run the following command to install OpenConnect.

    Code Block
    $ brew install openconnect
  4. OpenConnect should now be installed.

\uD83D\uDCD8 Using Using OpenConnect

Once OpenConnect has been installed, you’re you are ready to connect.

...

...

For a list of available Realms, please see here: Cisco AnyConnect VPN Realms

Starting OpenConnect

  1. To start the VPN connections enter the following command in Terminal, where $realm is the Realm

...

  1. you would like to connect to

...

  1. (e.g., anyconnect.uconn.edu/split or anyconnect.uconn.edu/priv

...

  1. ).

    Code Block
    languagebash
    sudo openconnect anyconnect.uconn.edu/$realm

...

  1. You will be prompted to enter your Password (for sudo), followed by your NetID and Password.

  2. Once entered

...

  1. , you will see a bunch of text

...

  1. , which is OpenConnect setting up your session. You can tell

...

  1. you are connected when you see the following message, with $IP_ADDRESS being the IP you receive from AnyConnect:

Code Block
languagebash
Established DTLS connection (using GnuTLS). Ciphersuite (DTLS1.2)-(ECDHE-RSA)-(AES-256-GCM).
Configured as $IP_ADDRESS, with SSL connected and DTLS connected
Session authentication will expire at Thu Feb 24 04:47:42 2022

add host 137.99.22.58: gateway 192.168.1.1
add net 10.195.96.0: gateway 10.195.97.30
add net 52.202.147.91: gateway 10.195.97.30
add net 10.0.0.0: gateway 10.195.97.30
add net 137.99.0.0: gateway 10.195.97.30
add net 137.99.25.14: gateway 10.195.97.30
add net 137.99.203.20: gateway 10.195.97.30

As OpenConnect is command-line based, you’ll you need to remember that keep your Terminal window will need to remain open while you’re you are connected to the VPN. If you don’t do not need to use Terminal for anything else, you can minimize it to your dock , or leave it open in the background. If you do need to use Terminal, you can open another Window or Tab in Terminal.

Stopping OpenConnect

When you’re you are ready to disconnect from the VPN, you can press Control + C in Terminal to kill the session. You’ll You will see the following when you’re you are successfully disconnected:.

Code Block
languagebash
Send BYE packet: Aborted by caller
delete net 52.202.147.91: gateway 10.195.97.30
delete net 10.0.0.0: gateway 10.195.97.30
delete net 137.99.0.0: gateway 10.195.97.30
delete net 137.99.25.14: gateway 10.195.97.30
delete net 137.99.203.20: gateway 10.195.97.30
delete host 137.99.22.58: gateway 192.168.1.1
ifconfig: ioctl (SIOCAIFADDR): Destination address required
User cancelled (SIGINT/SIGTERM); exiting.

...

Filter by label (Content by label)
showLabelsfalse
max510
spacescom.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@11b60sortmodified
showSpacefalsereversetrue
typepage
cqllabel = "anyconnect" and type = "page" and space = "IKB"
labelskb-how-to-article

...