review
preface
Recently, I worked on a project that required a VPN connection to the other party's server, and the other party was using Cisco AnyConnect.
We installed the AnyConnect client and it can be connected.
issue
Later, when our system couldn't run, we discovered a problem: our system needed to connect to our intranet service X, and the IP address of service X was included in AnyConnect's routing table. If you look at the routing table, you can see this situation, as soon as the VPN is disconnected, service X can be accessed again, and immediately it fails. We don't even need a VPN to access the other party's IP, but this VPN routes a bunch of private network segments.
I directly deleted the corresponding routing table, and then refreshed the routing table to see, why is that entry still there? ?
After searching for a long time, I finally found the culprit, that isAnyConnect itself. It will deliberately monitor the routing table and change it back to you if it finds that it has been tampered with。
settle
In the link just now, someone proposed a solution: instead of AnyConnect, use open source insteadOpenConnect。 Installation is simple, Linux/Mac OS has ready-made packages that can be installed via the command line, and Windows also has a corresponding GUI version.
OpenConnect address:The hyperlink login is visible.
OpenConnect is a cross-platform multiprotocol SSL VPN client that supports multiple VPN protocols:
Cisco AnyConnect ( --protocol=anyconnect )
Array Networks AG SSL VPN ( --protocol=array )
Juniper SSL VPN ( --protocol=nc )
Pulse connection security (--protocol=pulse
Palo Alto Networks GlobalProtect SSL VPN ( --protocol=gp )
F5 Big-IP SSL VPN ( --protocol=f5 )
Fortinet Fortigate SSL VPN ( --protocol=fortinet )
Once installed, connect to the VPN using the following command:
After the connection is established, you can check the routing table and find that the routing table has indeed been added a lot.
But it doesn't matter, sudo ip del xxxxxxxxxxxx, you can delete it directly. This solves the problem.
Original:The hyperlink login is visible.
|
Posted on 3/21/2022 9:13:12 AM
|
|
|
Landlord|
Posted on 3/21/2022 9:23:32 AM
|
