|
@@ -0,0 +1,30 @@
|
|
1
|
+The openconnect client expects to be configured using the uci interface.
|
|
2
|
+
|
|
3
|
+To setup a VPN connection, add the following to /etc/config/network:
|
|
4
|
+
|
|
5
|
+config interface 'MYVPN'
|
|
6
|
+ option _orig_ifname 'vpnc'
|
|
7
|
+ option _orig_bridge 'false'
|
|
8
|
+ option proto 'openconnect'
|
|
9
|
+ option server 'vpn.example.com'
|
|
10
|
+ option port '4443'
|
|
11
|
+ option username 'test'
|
|
12
|
+ option password 'secret'
|
|
13
|
+ option serverhash 'AE7FF6A0426F0A0CD0A02EB9EC3C5066FAEB0B25'
|
|
14
|
+
|
|
15
|
+The additional files are also used:
|
|
16
|
+/etc/openconnect/user-cert-vpn-MYVPN.pem: The user certificate
|
|
17
|
+/etc/openconnect/user-key-vpn-MYVPN.pem: The user private key
|
|
18
|
+/etc/openconnect/ca-cert-vpn-MYVPN.pem: The CA certificate (instead of serverhash)
|
|
19
|
+
|
|
20
|
+After these are setup you can initiate the VPN using "ifup MYVPN", and
|
|
21
|
+deinitialize it using ifdown. You may also use the luci web interface
|
|
22
|
+(Network -> Interfaces -> AVPN Connect).
|
|
23
|
+
|
|
24
|
+Note that you need to configure the firewall to allow communication between
|
|
25
|
+the MYVPN interface and lan.
|
|
26
|
+
|
|
27
|
+
|
|
28
|
+There is a luci plugin to allow configuring an openconnect interface from
|
|
29
|
+the web environment, available as patch over luci at
|
|
30
|
+https://github.com/nmav/luci-openconnect/tree/openconnect
|