/usr/share/doc/openconnect/html/vpnc-script.html is in openconnect 7.08-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>OpenConnect VPN client.</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="description" content="VPN client compatible with Cisco AnyConnect SSL VPN" />
<meta name="keywords" content="OpenConnect, AnyConnect, Cisco, VPN, SSLVPN, SSL VPN" />
<link href="./styles/main.css" rel="styleSheet" type="text/css" />
<link href='http://fonts.googleapis.com/css?family=Raleway' rel='stylesheet' type='text/css' />
</head>
<body>
<div id="logo" align="right">
<img src="./images/openconnect.png" height="96px" alt="OpenConnect" />
</div>
<div id="main">
<div id="menu1">
<span class="nonsel">
<a href="index.html"><span>Home</span></a>
</span>
<span class="nonsel">
<a href="features.html"><span>Features</span></a>
</span>
<span class="sel">
<a href="building.html"><span>Getting Started</span></a>
</span>
<span class="nonsel">
<a href="mail.html"><span>Mailing List / Help</span></a>
</span>
<span class="nonsel">
<a href="contribute.html"><span>Contribute</span></a>
</span>
<span class="nonsel">
<a href="anyconnect.html"><span>Protocols</span></a>
</span>
<span class="nonsel">
<a href="http://www.infradead.org/ocserv/"><span>VPN Server</span></a>
</span>
<p>OpenConnect VPN client</p>
</div>
<div id="menu2">
<span class="nonsel">
<a href="building.html"><span>Building</span></a>
</span>
<span class="sel">
<a href="vpnc-script.html"><span>vpnc-script</span></a>
</span>
<span class="nonsel">
<a href="connecting.html"><span>Connecting</span></a>
</span>
<span class="nonsel">
<a href="manual.html"><span>Manual</span></a>
</span>
</div>
<div id="textbox">
<div id="text">
</div>
<h1>Install a <tt>vpnc-script</tt>.</h1>
<p>OpenConnect just handles the communication with the VPN server; it does
not know how to configure the network routing and name service on all the
various operating systems that it runs on.</p>
<p>To set the routing and name service up, it uses an external script
which is usually called <tt>vpnc-script</tt>. It's exactly the same script that
<a href="http://www.unix-ag.uni-kl.de/~massar/vpnc/">vpnc</a> uses.
You may already have a <tt>vpnc-script</tt> installed on your system,
perhaps in a location such as <tt>/etc/vpnc/vpnc-script</tt>.</p>
<p>If you don't already have it, you can get a current version from <a href="http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script">here</a>.
Even if you already have a copy from vpnc, you may wish to install this updated
version which has support for IPv6, and for running on Solaris and on newer Linux
kernels amongst other bug fixes.</p>
<p>Note that the script needs to be executable, and stored somewhere
where SELinux or similar security systems won't prevent the root user
from accessing it.</p>
<p>Current versions of OpenConnect <i>(since version 3.17)</i> are configured
with the location of the script at build time, and will use the script
automatically. If you are using a packaged build of OpenConnect rather than
building it yourself, then the OpenConnect package should have a dependency
on a suitable version of <tt>vpnc-script</tt> and should be built to look in
the right place for it. Hopefully your distributions gets that right.</p>
<p>If you're using an older version of OpenConnect, or if you want to use
a script other than the one that OpenConnect was configured to use, you
can use the <tt>--script</tt> argument on the command line. For example:
<ul><li><tt>openconnect --script /etc/vpnc/vpnc-script https://vpn.example.com/</tt></li></ul></p>
<p>If OpenConnect is invoked without a suitable script, it will not be able
to configure the routing or name service for the VPN.</p>
<h1>Windows</h1>
<p>On Windows, the default configuration of OpenConnect will look for
a script named named <tt>vpnc-script-win.js</tt> in the same directory
as the <tt>openconnect.exe</tt> executable, and will execute it with the
<a href="http://technet.microsoft.com/en-us/library/bb490887.aspx">command-based script
host (<tt>CScript.exe</tt>)</a>.</p>
<p>The current version of this script can be found <a href="http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script-win.js">here</a>.</p>
<p>Note that although the script is basically functional for
configuring both IPv6 and Legacy IP, it does not fully tear down the
configuration on exit so stale IP address might be left around on the
interface.</p>
</div>
</div>
</body>
</html>
|