46
Add this to your ~/.bash_profile:
export PATH=$(brew --prefix openvpn)/sbin:$PATH
37
I think I just figured it out.
From the BIG-IP f5 application log, you can only find this from the icon in the menu bar. I saw this line:
2018-06-15, 23:30:54:000, 1274, 1274, edge, 1, (0xfffffffe)
EXCEPTION - TunnelService, TunnelServer already launched, pid, 1514
I went into my terminal and found this.
ps alx | grep 1514
0 1514 1 0 ...
34
Removing the following worked for me.
/Library/LaunchAgents/com.cisco.anyconnect.vpnagent.plist
/Library/LaunchDaemons/com.cisco.anyconnect.gui.plist
Update:
For macOS Catalina and anyconnect 4.7.x removing this single file seems to be enough:
/Library/LaunchAgents/com.cisco.anyconnect.gui.plist
27
Technically - the process is called trilateration and operates by cross checking all BSSID - the unique identifier / MAC address for each wireless base station that your Mac can detect while it listens periodically or is actively searching to join a WiFi channel.
How does Maps on Mac OS determine the computer's location
You can run this scan manually ...
27
The FlowVPN client is free (and works with any provider).
It supports PPTP and OpenVPN on macOS Sierra and High Sierra:
https://www.flowvpn.com/download-mac/
Just overwrite the FlowVPN server address with any server and it connects.
22
At the terminal type:
echo $PATH
That's your default search path for executables. Looks like the openvpn executable was installed someplace not in your search path.
First, you'll need to find the openvpn executable:
sudo find / -type f -name "openvpn"
Then add the directory containing the openvpn executable to your default search path by adding this ...
16
So it would seem that if you only install the VPN client AnyConnect will not autostart.
I uninstalled AnyConnect (version 4.x) then reinstalled doing a custom install. I only installed VPN, I did not install:
Web Security
AMP Enabler
Diagnostics and Reporting Tool
Posture
ISE Posture
Now AnyConnect no longer auto starts (yeah!)
Makes sense I suppose as ...
16
These are perfectly normal.
lo is the loopback interface
en0 and en1 are your hardware interfaces (usually Ethernet and WiFi)
p2p0 is a point to point link (usually VPN)
stf0 is a "six to four" interface (IPv6 to IPv4)
gif01 is a software interface
bridge0 is a software bridge between other interfaces
utun0 is used for "Back to My Mac"
...
15
I guess you are using anyconnect to connect to the Cisco VPN server. AnyConnect can also be used from Terminal. This works on macOS Sierra and AnyConnect 3.1.14018. Create a bash script with the following command:
/opt/cisco/anyconnect/bin/vpn connect your-vpn.server.here -s <.credentials
And put the login details in the file .credentials with the ...
14
I had the same problem on my Mac, and after fixing it I have figured out that it was caused by FortiClient (VPN client). Even when FortiClient was disconnected - it's DNS still appeared in the scutil.
The solution for me was:
scutil
> list ".*DNS"
This will show you a list of all DNS configs, that will look something like:
subKey [0] = State:/Network/...
14
I had the exact same issue. Basically, this happens only if you enable the checkbox "Save Settings" at the username/password prompt in Junos Pulse. If you do not enable this checkbox, it should not freeze at the next connection attempt.
Pulsesecure have released the software version 5.1R5.1 build 61437, where this issue has been fixed (I tested it today and ...
13
I guess not all VPN connections of the build-in VPN client in Mac have that option.
The PPTP and L2TP do offer the option: Open your network settings:
Select your VPN connection and click on the advanced button.
A new window will pop up with three check-boxes under the heading "Session options".
The last one of these checkboxes is the one you want: "...
11
In short, no. Both are instances of VPN configurations profiles.
By default, the “VPN Configurations” pane should be the only one that exists if you are installing a VPN configuration profile under the natively supported protocols (PPTP, L2TP/IPSEC).
The “Personal VPN” option appears only after installing certain software, such as Unlimited Free VPN by ...
11
You can usually (but not always) remove a menulet icon by holding down the Command key and dragging it off.
10
I made some changes to the provided answer, because if something is worth doing it's worth doing into the ground. I wanted to reconnect if the VPN was dropped, but NOT reconnect if the VPN was intentionally disconnected. The solution I came up with was both effective and inelegant.
First I added hooks to the pppd startup and shutdown to keep track of the ...
10
Figured it out. First downgrade JAVA to Apple 1.6 as mentioned by Joe L. Farina above.
That actually does work in some situations, but if your VPN provider only supports an old version of Network Connect then it will continue to hang.
To fix that, on the terminal run the following, then restart your computer:
sudo nvram boot-args="kext-dev-mode=1"
For ...
10
If it's not in "Login Items" then it has to be in launchctl. Always prefer the user interface when there is one rather than messing with files directly:
launchctl list | grep -i cisco
launchctl unload -w /Library/LaunchAgents/com.cisco.anyconnect.gui.plist
launchctl list | grep -i cisco
# Load it back
launchctl load -w /Library/LaunchAgents/...
10
You have to add /usr/local/sbin to your path.
It was installed to /usr/local/sbin but that directory is not in your $PATH by default. Add a line like this to your ~/.bashrc or equivalent:
export PATH=/usr/local/sbin:$PATH
10
TL;DR
Launch Terminal and run:
ifconfig | grep -B 6 'status: active' | head -n 1 | cut -d : -f 1
Then run (replace en0 below with the output of the command above):
cd /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources
sudo ./airport en0 prefs DisconnectOnLogout=NO
sudo pmset -a sleep 0
Long version
I am on MacOS Mojave (...
9
I think the unerlying issue is that Yosemite will not load kext (kernel extensions) unless they are signed by an authorized kernel extension developer. However in 10.8 and earlier, kexts could not be signed and signed kexts for 10.9+ will not load in <10.9.
I experienced the same issue loading unsigned tuntaposx for the vpnc cisco client.
You can ...
9
From reading your question I get the impression that you're doing everything correctly and the Cisco VPN Server has the option to allow saving of passwords client-side set to disallow.
I know for certain that such a setting exists.
9
In my case:
Installation using homebrew
brew install openvpn
Information regarding binaries
brew info openvpn
It gave me installation path as:
/usr/local/Cellar/openvpn/2.4.0
Then I browsed for bin directory but found executable inside sbin. So, I added following line
export PATH=$PATH:/usr/local/Cellar/openvpn/2.4.0/sbin
in my ~/.zshrc file
as well ...
9
This worked:
sudo route -n delete default -link 8
9
This was a huge hassle to figure out, so I wrote up a little guide in hopes that others would find it helpful:
How to convince macOS to do IPv6 DNS lookups when your only IPv6 address is via a VPN or tunnel of some sort
The Problem
macOS's domain name resolver will only return IPv6 addresses (from AAAA records) when it thinks that you have a valid ...
9
utun0 is created by macOS for VPN and Back to My Mac, regardless of whether these features are enabled. This is not indicative of any unwanted application being installed; utun0 is expected on macOS Sierra and later.
9
In that menu, click 'Open Network Preferences ...'
and in the next dialog, uncheck the option 'Show VPN status in menu bar'.
8
You can put extra configuration in /etc/ppp/ip-up file, which is described in man pppd, and which is a standard shell script file that will be fired when the pppd establishes a connection.
I don't use the VPN anymore and unfortunately it seems I don't have a copy of my ip-up file anymore, but the way I used to do it is something similar to below (you'll ...
8
The Personal VPN section contains VPN profiles added by applications that use the NetworkExtension.framework. These are traditional IPSEC VPNs that can use IKEv1 or IKEv2 for key exchange.
Supported authentication methods are PSK (Pre-Shared Key) in the case of IKEv1, or X.509 certificates for both IKEv1 and IKEv2. The security is equal to (or greater than,...
8
A possibly better idea than messing around with openvpn directly (Tunnelblick is basically just a fancy GUI around it) would be to use an Applescript, something that can definitely be launched from the terminal (i.e. with osascript)
Example taken from here:
tell application "Tunnelblick"
connect "Company_VPN"
get state of first configuration where ...
8
First step: Ensure that outgoing L2TP connections work properly. To do that, run the following commands in Terminal (you can copy and paste if you want):
/usr/bin/nc -uvw5 portquiz.net 500
/usr/bin/nc -uvw5 portquiz.net 1701
/usr/bin/nc -uvw5 portquiz.net 4500
You should get something that looks like this (note the three "succeeded" lines):
found 0 ...
Only top voted, non community-wiki answers of a minimum length are eligible
