[PATCH 0/4] [vpnc-script] Support for Pulse's split-exclude routes

Gernot Hillier gernot.hillier at siemens.com
Wed Oct 11 13:39:58 PDT 2017


OpenConnect already sets the according environment variables when the Pulse
gateway sends "split-exclude" routes, so we only need to handle them
in vpnc-script. 

I hope this is the right place for vpnc-script patches.

While this is basically trivial copy-n-paste code duplication, we need some
preparation for script's infrastructure as it now needs to handle routes to your
normal Internet uplink device in addition to your VPN tunnel.

Implemented and tested for "ip-route" as well as old-fashioned /sbin/route mode
of vpnc-script - so now your dream to have a Pulse VPN connection with
split-exclude routes on your ancient embedded device can become reality!

Please let me know if you prefer a different patch splitup, removal of untested
IPv6 code or similar!

Gernot Hillier
Siemens AG, Corporate Competence Center Embedded Linux

Gernot Hillier (4):
  Support routes with different devs and gateways
  Helper functions for uplink dev and gateway
  Support split-exclude rules from Pulse gateway
  Revive route cleanup for /sbin/route code

 vpnc-script | 156 ++++++++++++++++++++++++++++++++++++++++++++++++++----------
 1 file changed, 132 insertions(+), 24 deletions(-)

-- 
2.12.3




More information about the openconnect-devel mailing list