Messages

hi all
to start with, i am not a network specialist but a sys admin and, i need some help with opnsense.

i am trying to upse openconnect -protocol anyconnect to connect fro home to my company network.

i had to modify the script as follow to allow for OTP code send:

===============================================================================
#!/bin/sh
#
# $FreeBSD$
#
# PROVIDE: opnsense-openconnect
# REQUIRE: SERVERS
# KEYWORD: shutdown
#

. /etc/rc.subr

name=openconnect

stop_cmd=openconnect_stop
start_cmd=openconnect_start
status_cmd=openconnect_status
rcvar=openconnect_enable

load_rc_config opnsense-openconnect
pidfile=/var/run/${name}.pid
command=/usr/local/sbin/${name}

secret=/usr/local/etc/openconnect.secret

#settings
user="<UserName>"
host="<Host Name>"
tmpif="tun30000"
iface="ocvpn0"
pidfile="/tmp/${iface}.pid"
script="/usr/local/sbin/vpnc-script"

openconnect="/usr/local/sbin/openconnect"
ifconfig="/sbin/ifconfig"

[ -z "$openconnect_enable" ] && openconnect_enable="NO"

openconnect_status()
{
    if [ -n "$rc_pid" ]; then
        echo "${name} is running as pid $rc_pid."
        return 0
    else
        echo "${name} is not running."
    fi
}

openconnect_stop()
{
        if [ -n "$rc_pid" ]; then
            echo "stopping openconnect"
#            ifconfig ocvpn0 name tun30000
#            kill -2 ${rc_pid}
        $ifconfig "$tmpif" down 2>/dev/null || :
             $ifconfig "$tmpif" destroy 2>/dev/null || :
        $ifconfig "$iface" down 2>/dev/null || :
             $ifconfig "$iface" destroy 2>/dev/null || :
   
        else
            echo "${name} is not running."
        fi
}

openconnect_start()
{
        echo "starting openconnect"
   openconnect --background --pid-file="$pidfile" --interface="$tmpif" --user="$user" --authgroup="<Group Name>" --script="$script" -protocol=anyconnect "$host"
        sleep 5
   ifconfig $tmpif name $iface
   ifconfig $iface group ocvpn
   return 0
}

run_rc_command $
===============================================================================

as you can see blow, the connection is established and the interface put up but, around 30 seconds after, it is put down :(

see image in attachment

Any clever idea?

Best Regards