How to route my traffic through the VPN

David Woodhouse dwmw2 at infradead.org
Thu Aug 28 12:28:50 PDT 2014


On Thu, 2014-08-28 at 18:11 +0400, manmad dvb12er wrote:
> Can't change the server config right now.
> When I write exec /etc/vpnc/vpnc-script the terminal closes immediately. 

That's expected. If you use 'exec' that means the shell won't spawn the
program and wait for it; it'll just directly call execve() to run it.
Your login shell is no longer running.

+
> I add "unset CISCO_SPLIT_INC" to /etc/vpnc/vpnc-script (first line), 

No, it can't be the first line. The first line has to be #!/bin/sh

> executed open connect from the command line, and my routing table is
> the same but tun0 is used instead vpn0:

It's always tun0 (or some number) when you run from the command line.
NetworkManager creates names for itself and will use vpn0 (or some
number).

> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
> 0.0.0.0         10.0.0.138      0.0.0.0         UG    0      0        0 wlan0
> 10.0.0.0        0.0.0.0         255.0.0.0       U     9      0        0 wlan0
> 10.100.100.0    0.0.0.0         255.255.255.0   U     0      0        0 tun0
> xx.yy.zz.cc   10.0.0.138      255.255.255.255 UGH   0      0        0 wlan0
> 192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 tun0
> 192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 tun0
> 
> I'm really confused...

Change the first line of vpnc-script to '#!/bin/sh -x' and show the full
output. You'll want to run 'script' and then run openconnect inside that
and send the output.


Are you sure you're running the same vpnc-script that you edited? If you
don't provide a --script argument to openconnect on the command line
it'll use the default one which is usually /etc/vpnc/vpnc-script.

-- 
dwmw2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5745 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20140828/eee55bb4/attachment.bin>


More information about the openconnect-devel mailing list