Home / ubuntu / Questions / 1032792
Accepted
Neal Gamradt
Asked: 2018-05-07 07:17:39 +0800 CST

OpenConnect Juniper VPN Not Working in Ubuntu 18.04

  • 772

I have been using openconnect for a long time now with our corporate VPN. I upgraded my personal laptop to Ubuntu 18.04 and I can no longer receive network traffic once connect.

I use the following command to connect:

/usr/bin/sudo /usr/sbin/openconnect --juniper --servercert $CERT --user=$USERNAME $HOST

I have to use the --servercert flag because of how the certs were installed on the VPN servers.

Anyway, this has been working flawlessly for the last few versions of Ubuntu.

With 18.04, the /etc/resolve.conf file is getting modified as expected, openconnect itself reports no issues, but once I am connected, I receive no traffic.

I have been doing some reading that the kernel with 18.04 may require some changes to the /etc/sysctl.conf file.

Is there anyone who can help figure out why I no longer receive traffic once connected the VPN via openconnect?

I assume since it doesn't appear to be DNS, that this is a problem with the tunnel.

I am going to compare to my 17.10 machine to see if there is something obvious which is different.

Any help would be greatly appreciated!

networking server vpn network-manager openconnect

2 Answers

  1. Best Answer

    I performed a:

    sudo apt install network-manager-openconnect-gnome

    Then I setup the VPN details via the GUI. When I connect now via the GUI, it is working and there is communication.

    I still need to investigate what is happening differently, but this might help in the meantime.

    • 3

  2. @Fabby Thank you for the response. I also made some progress the other day. I did some reading and ended up creating a tunnel manually:

    sudo ip tuntap add vpn0 mode tun user $USERNAME

    I then had to modify my command to use the new tunnel that was manually created:

    exec /usr/bin/sudo /usr/sbin/openconnect --juniper --servercert $CERT --user=$USERNAME $HOST -i vpn0

    This generally worked, but I didn't get the DNS servers, if I add them manually, then everything works.

    I suspect that some changes with the latest kernel are preventing the tunnel from being created on the fly and that DNS is not being set when you tell it to use a pre-made tunnel.

    I will play with the Gnome network manager as you suggest and play around with command line more as well. Thanks!

    • 2