diff options
Diffstat (limited to 'docs/vpn/anyconnect.rst')
| -rw-r--r-- | docs/vpn/anyconnect.rst | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/vpn/anyconnect.rst b/docs/vpn/anyconnect.rst index 64c3e49f..e8945fbb 100644 --- a/docs/vpn/anyconnect.rst +++ b/docs/vpn/anyconnect.rst @@ -7,6 +7,7 @@ OpenConnect-compatible server feature is available from this release. Openconnect VPN supports SSL connection and offers full network access. SSL VPN network extension connects the end-user system to the corporate network with access controls based only on network layer information, such as destination IP address and port number. So, it provides safe communication for all types of device traffic across public networks and private networks, also encrypts the traffic with SSL protocol. The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network. + .. note:: All certificates should be stored on VyOS under /config/auth. If certificates are not stored in the /config directory they will not be migrated during a software update. @@ -44,6 +45,7 @@ Server Configuration set vpn openconnect ssl cert-file <file> set vpn openconnect ssl key-file <file> + Example ---- @@ -62,12 +64,15 @@ The Gateway IP Address must be in one of the router´s interfaces. set vpn openconnect ssl cert-file '/config/auth/cert.pem' set vpn openconnect ssl key-file '/config/auth/privkey.pem' + Verification ---- .. code-block:: none + vyos@RTR1:~$ show openconnect-server sessions + interface username ip remote IP RX TX state uptime ----------- ---------- ------------ ------------- -------- -------- --------- -------- sslvpn0 user4 100.64.0.105 xx.xxx.49.253 127.3 KB 160.0 KB connected 12m:28s |