Ocserv Anyconnect User
When I using Anyconnect on iPad connect to the ocserv server (0.11.7-1) running by an Asus RT-N18u router with Tomato Shibby and entware. There is no problem when using the openconnect client to establish the VPN connection. However, when using Cisco’s Anyconnect, the connection will be terminated about 30 seconds after connected. What is left is to start the service and test a successful connection using the OpenConnect client or Cisco’s AnyConnect. An invalid (self-signed) certificate will be presented to the clients (which can be trusted manually) as no certificate has been installed yet.
| no-route = 0.0.0.0/255.0.0.0 |
| no-route = 1.0.0.0/255.128.0.0 |
| no-route = 1.160.0.0/255.224.0.0 |
| no-route = 1.192.0.0/255.224.0.0 |
| no-route = 10.0.0.0/255.0.0.0 |
| no-route = 14.0.0.0/255.224.0.0 |
| no-route = 14.96.0.0/255.224.0.0 |
| no-route = 14.128.0.0/255.224.0.0 |
| no-route = 14.192.0.0/255.224.0.0 |
| no-route = 27.0.0.0/255.192.0.0 |
| no-route = 27.96.0.0/255.224.0.0 |
| no-route = 27.128.0.0/255.128.0.0 |
| no-route = 36.0.0.0/255.192.0.0 |
| no-route = 36.96.0.0/255.224.0.0 |
| no-route = 36.128.0.0/255.128.0.0 |
| no-route = 39.0.0.0/255.224.0.0 |
| no-route = 39.64.0.0/255.192.0.0 |
| no-route = 39.128.0.0/255.192.0.0 |
| no-route = 42.0.0.0/255.0.0.0 |
| no-route = 43.224.0.0/255.224.0.0 |
| no-route = 45.64.0.0/255.192.0.0 |
| no-route = 47.64.0.0/255.192.0.0 |
| no-route = 49.0.0.0/255.128.0.0 |
| no-route = 49.128.0.0/255.224.0.0 |
| no-route = 49.192.0.0/255.192.0.0 |
| no-route = 54.192.0.0/255.224.0.0 |
| no-route = 58.0.0.0/255.128.0.0 |
| no-route = 58.128.0.0/255.224.0.0 |
| no-route = 58.192.0.0/255.192.0.0 |
| no-route = 59.32.0.0/255.224.0.0 |
| no-route = 59.64.0.0/255.192.0.0 |
| no-route = 59.128.0.0/255.128.0.0 |
| no-route = 60.0.0.0/255.192.0.0 |
| no-route = 60.160.0.0/255.224.0.0 |
| no-route = 60.192.0.0/255.192.0.0 |
| no-route = 61.0.0.0/255.192.0.0 |
| no-route = 61.64.0.0/255.224.0.0 |
| no-route = 61.128.0.0/255.192.0.0 |
| no-route = 61.224.0.0/255.224.0.0 |
| no-route = 100.64.0.0/255.192.0.0 |
| no-route = 101.0.0.0/255.128.0.0 |
| no-route = 101.128.0.0/255.224.0.0 |
| no-route = 101.192.0.0/255.192.0.0 |
| no-route = 103.0.0.0/255.192.0.0 |
| no-route = 103.224.0.0/255.224.0.0 |
| no-route = 106.0.0.0/255.128.0.0 |
| no-route = 106.224.0.0/255.224.0.0 |
| no-route = 110.0.0.0/254.0.0.0 |
| no-route = 112.0.0.0/255.128.0.0 |
| no-route = 112.128.0.0/255.224.0.0 |
| no-route = 112.192.0.0/255.192.0.0 |
| no-route = 113.0.0.0/255.128.0.0 |
| no-route = 113.128.0.0/255.224.0.0 |
| no-route = 113.192.0.0/255.192.0.0 |
| no-route = 114.0.0.0/255.128.0.0 |
| no-route = 114.128.0.0/255.224.0.0 |
| no-route = 114.192.0.0/255.192.0.0 |
| no-route = 115.0.0.0/255.0.0.0 |
| no-route = 116.0.0.0/255.0.0.0 |
| no-route = 117.0.0.0/255.128.0.0 |
| no-route = 117.128.0.0/255.192.0.0 |
| no-route = 118.0.0.0/255.224.0.0 |
| no-route = 118.64.0.0/255.192.0.0 |
| no-route = 118.128.0.0/255.128.0.0 |
| no-route = 119.0.0.0/255.128.0.0 |
| no-route = 119.128.0.0/255.192.0.0 |
| no-route = 119.224.0.0/255.224.0.0 |
| no-route = 120.0.0.0/255.192.0.0 |
| no-route = 120.64.0.0/255.224.0.0 |
| no-route = 120.128.0.0/255.224.0.0 |
| no-route = 120.192.0.0/255.192.0.0 |
| no-route = 121.0.0.0/255.128.0.0 |
| no-route = 121.192.0.0/255.192.0.0 |
| no-route = 122.0.0.0/254.0.0.0 |
| no-route = 124.0.0.0/255.0.0.0 |
| no-route = 125.0.0.0/255.128.0.0 |
| no-route = 125.160.0.0/255.224.0.0 |
| no-route = 125.192.0.0/255.192.0.0 |
| no-route = 127.0.0.0/255.0.0.0 |
| no-route = 139.0.0.0/255.224.0.0 |
| no-route = 139.128.0.0/255.128.0.0 |
| no-route = 140.64.0.0/255.224.0.0 |
| no-route = 140.128.0.0/255.224.0.0 |
| no-route = 140.192.0.0/255.192.0.0 |
| no-route = 144.0.0.0/255.192.0.0 |
| no-route = 144.96.0.0/255.224.0.0 |
| no-route = 144.224.0.0/255.224.0.0 |
| no-route = 150.0.0.0/255.224.0.0 |
| no-route = 150.96.0.0/255.224.0.0 |
| no-route = 150.128.0.0/255.224.0.0 |
| no-route = 150.192.0.0/255.192.0.0 |
| no-route = 152.96.0.0/255.224.0.0 |
| no-route = 153.0.0.0/255.192.0.0 |
| no-route = 153.96.0.0/255.224.0.0 |
| no-route = 157.0.0.0/255.192.0.0 |
| no-route = 157.96.0.0/255.224.0.0 |
| no-route = 157.128.0.0/255.224.0.0 |
| no-route = 157.224.0.0/255.224.0.0 |
| no-route = 159.224.0.0/255.224.0.0 |
| no-route = 161.192.0.0/255.224.0.0 |
| no-route = 162.96.0.0/255.224.0.0 |
| no-route = 163.0.0.0/255.192.0.0 |
| no-route = 163.96.0.0/255.224.0.0 |
| no-route = 163.128.0.0/255.192.0.0 |
| no-route = 163.192.0.0/255.224.0.0 |
| no-route = 166.96.0.0/255.224.0.0 |
| no-route = 167.128.0.0/255.192.0.0 |
| no-route = 168.160.0.0/255.224.0.0 |
| no-route = 169.254.0.0/255.255.0.0 |
| no-route = 171.0.0.0/255.128.0.0 |
| no-route = 171.192.0.0/255.224.0.0 |
| no-route = 172.16.0.0/255.240.0.0 |
| no-route = 175.0.0.0/255.128.0.0 |
| no-route = 175.128.0.0/255.192.0.0 |
| no-route = 180.64.0.0/255.192.0.0 |
| no-route = 180.128.0.0/255.128.0.0 |
| no-route = 182.0.0.0/255.0.0.0 |
| no-route = 183.0.0.0/255.192.0.0 |
| no-route = 183.64.0.0/255.224.0.0 |
| no-route = 183.128.0.0/255.128.0.0 |
| no-route = 192.0.0.0/255.255.255.0 |
| no-route = 192.0.2.0/255.255.255.0 |
| no-route = 192.88.99.0/255.255.255.0 |
| no-route = 192.96.0.0/255.224.0.0 |
| no-route = 192.160.0.0/255.248.0.0 |
| no-route = 192.168.0.0/255.255.0.0 |
| no-route = 192.169.0.0/255.255.0.0 |
| no-route = 192.170.0.0/255.254.0.0 |
| no-route = 192.172.0.0/255.252.0.0 |
| no-route = 192.176.0.0/255.240.0.0 |
| no-route = 198.18.0.0/255.254.0.0 |
| no-route = 198.51.100.0/255.255.255.0 |
| no-route = 202.0.0.0/255.128.0.0 |
| no-route = 202.128.0.0/255.192.0.0 |
| no-route = 202.192.0.0/255.224.0.0 |
| no-route = 203.0.0.0/255.128.0.0 |
| no-route = 203.128.0.0/255.192.0.0 |
| no-route = 203.192.0.0/255.224.0.0 |
| no-route = 210.0.0.0/255.192.0.0 |
| no-route = 210.64.0.0/255.224.0.0 |
| no-route = 210.160.0.0/255.224.0.0 |
| no-route = 210.192.0.0/255.224.0.0 |
| no-route = 211.64.0.0/255.192.0.0 |
| no-route = 211.128.0.0/255.192.0.0 |
| no-route = 218.0.0.0/255.128.0.0 |
| no-route = 218.160.0.0/255.224.0.0 |
| no-route = 218.192.0.0/255.192.0.0 |
| no-route = 219.64.0.0/255.224.0.0 |
| no-route = 219.128.0.0/255.224.0.0 |
| no-route = 219.192.0.0/255.192.0.0 |
| no-route = 220.96.0.0/255.224.0.0 |
| no-route = 220.128.0.0/255.128.0.0 |
| no-route = 221.0.0.0/255.224.0.0 |
| no-route = 221.96.0.0/255.224.0.0 |
| no-route = 221.128.0.0/255.128.0.0 |
| no-route = 222.0.0.0/255.0.0.0 |
| no-route = 223.0.0.0/255.224.0.0 |
| no-route = 223.64.0.0/255.192.0.0 |
| no-route = 223.128.0.0/255.128.0.0 |
| no-route = 224.0.0.0/224.0.0.0 |
Ocserv 搭建 Cisco Anyconnect Vpn
An openconnect VPN server, which implements an improved version of the Cisco AnyConnect protocol, has also been written. OpenConnect is released under the GNU Lesser Public License, version 2.1. Development of OpenConnect was started after a trial of the Cisco AnyConnect client under Linux found it to have many deficiencies. OpenConnect VPN server, or ocserv, is an SSL VPN server compatible with Cisco AnyConnect. It can easily be installed in a cheap OpenVZ Virtual Private Server (VPS) with TUN capability. However, most online tutorials for installing OpenConnect VPN server rely on certtool to generate a self-signed certificate via OpenSSL. OCserv的服务最好会自动跑，进程挂了也自动恢复。 AnyConnect每次都要输入密码很麻烦，最好用客户端证书验证。 为OCserv写个简单的upstart脚本。 cd /etc/init.d. Sudo ln -s /lib/init/upstart-job ocserv. Sudo nano ocserv.conf. 放入以下内容 #!upstart description 'OpenConnect Server'.
Ocserv Anyconnect Client
Ocserv Cisco Anyconnect