37
Add this to your ~/.bash_profile:
export PATH=$(brew --prefix openvpn)/sbin:$PATH
26
Technically - the process is called trilateration and operates by cross checking all BSSID - the unique identifier / MAC address for each wireless base station that your Mac can detect while it listens periodically or is actively searching to join a WiFi channel.
How does Maps on Mac OS determine the computer's location
You can run this scan manually ...
26
The FlowVPN client is free (and works with any provider).
It supports PPTP and OpenVPN on macOS Sierra and High Sierra:
https://www.flowvpn.com/download-mac/
Just overwrite the FlowVPN server address with any server and it connects.
22
I think I just figured it out.
From the BIG-IP f5 application log, you can only find this from the icon in the menu bar. I saw this line:
2018-06-15, 23:30:54:000, 1274, 1274, edge, 1, (0xfffffffe)
EXCEPTION - TunnelService, TunnelServer already launched, pid, 1514
I went into my terminal and found this.
ps alx | grep 1514
0 1514 1 0 ...
18
Removing the following worked for me.
/Library/LaunchAgents/com.cisco.anyconnect.vpnagent.plist
/Library/LaunchDaemons/com.cisco.anyconnect.gui.plist
Update:
For macOS Catalina and anyconnect 4.7.x removing this single file seems to be enough:
/Library/LaunchAgents/com.cisco.anyconnect.gui.plist
17
No.
As of Sept 2012 (and Mountain Lion), macOS does not support OpenVPN in the built-in "Network Manager".
Out-of-the-box macOS only supports:
L2TP over IPSec
PPTP (not recommended)
Cisco IPSec
However, you can use the following third-party OpenVPN clients in macOS:
Shimo
Viscosity
Tunnelblick (open source, free)
pritunl client (open source, free)
I ...
16
At the terminal type:
echo $PATH
That's your default search path for executables. Looks like the openvpn executable was installed someplace not in your search path.
First, you'll need to find the openvpn executable:
sudo find / -type f -name "openvpn"
Then add the directory containing the openvpn executable to your default search path by adding this ...
14
I had the exact same issue. Basically, this happens only if you enable the checkbox "Save Settings" at the username/password prompt in Junos Pulse. If you do not enable this checkbox, it should not freeze at the next connection attempt.
Pulsesecure have released the software version 5.1R5.1 build 61437, where this issue has been fixed (I tested it today and ...
13
EDIT: This answer is outdated. Here are some newer links that may help you if you are trying to set up VPN On Demand:
https://support.apple.com/apple-configurator
https://support.apple.com/guide/mdm/vpn-overview-mdm2d2adb35d/1/web/1
https://developer.apple.com/documentation/devicemanagement/vpn
https://developer.apple.com/documentation/networkextension/...
13
I guess you are using anyconnect to connect to the Cisco VPN server. AnyConnect can also be used from Terminal. This works on macOS Sierra and AnyConnect 3.1.14018. Create a bash script with the following command:
/opt/cisco/anyconnect/bin/vpn connect your-vpn.server.here -s <.credentials
And put the login details in the file .credentials with the ...
12
I guess not all VPN connections of the build-in VPN client in Mac have that option.
The PPTP and L2TP do offer the option: Open your network settings:
Select your VPN connection and click on the advanced button.
A new window will pop up with three check-boxes under the heading "Session options".
The last one of these checkboxes is the one you want: "...
12
So it would seem that if you only install the VPN client AnyConnect will not autostart.
I uninstalled AnyConnect (version 4.x) then reinstalled doing a custom install. I only installed VPN, I did not install:
Web Security
AMP Enabler
Diagnostics and Reporting Tool
Posture
ISE Posture
Now AnyConnect no longer auto starts (yeah!)
Makes sense I suppose as ...
10
Figured it out. First downgrade JAVA to Apple 1.6 as mentioned by Joe L. Farina above.
That actually does work in some situations, but if your VPN provider only supports an old version of Network Connect then it will continue to hang.
To fix that, on the terminal run the following, then restart your computer:
sudo nvram boot-args="kext-dev-mode=1"
For ...
10
In short, no. Both are instances of VPN configurations profiles.
By default, the “VPN Configurations” pane should be the only one that exists if you are installing a VPN configuration profile under the natively supported protocols (PPTP, L2TP/IPSEC).
The “Personal VPN” option appears only after installing certain software, such as Unlimited Free VPN by ...
10
These are perfectly normal.
lo is the loopback interface
en0 and en1 are your hardware interfaces (usually Ethernet and WiFi)
p2p0 is a point to point link (usually VPN)
stf0 is a "six to four" interface (IPv6 to IPv4)
gif01 is a software interface
bridge0 is a software bridge between other interfaces
utun0 is used for "Back to My Mac"
XHC20 is a USB ...
9
You could use the following AppleScript, save it as an application and set it to be a agent (no dock icon).
This script will setup a VPN connection when there is none. Therefore, it should also reconnect shortly after your connection drops. You can change the interval to check your VPN connection, it's 120 seconds in the script.
on idle
tell ...
9
There are two premium (paid) solutions that do this well.
MacProxy ($30USD)
Proxifier ($40USD)
TSocks is an open source solution, requires some command-line foo.
9
I think the unerlying issue is that Yosemite will not load kext (kernel extensions) unless they are signed by an authorized kernel extension developer. However in 10.8 and earlier, kexts could not be signed and signed kexts for 10.9+ will not load in <10.9.
I experienced the same issue loading unsigned tuntaposx for the vpnc cisco client.
You can ...
9
From reading your question I get the impression that you're doing everything correctly and the Cisco VPN Server has the option to allow saving of passwords client-side set to disallow.
I know for certain that such a setting exists.
9
utun0 is created by macOS for VPN and Back to My Mac, regardless of whether these features are enabled. This is not indicative of any unwanted application being installed; utun0 is expected on macOS Sierra and later.
9
You can usually (but not always) remove a menulet icon by holding down the Command key and dragging it off.
8
I made some changes to the provided answer, because if something is worth doing it's worth doing into the ground. I wanted to reconnect if the VPN was dropped, but NOT reconnect if the VPN was intentionally disconnected. The solution I came up with was both effective and inelegant.
First I added hooks to the pppd startup and shutdown to keep track of the ...
8
The VPN's DNS server probably assigns hostname together with the IP address and the computer uses it instead of what you've set during setup and what appears in System Preferences -> Sharing -> Computer name.
To set a permanent hostname do
sudo scutil --set HostName DesiredHostname in Terminal.app (there are also ComputerName and LocalHostName that can be ...
8
You can put extra configuration in /etc/ppp/ip-up file, which is described in man pppd, and which is a standard shell script file that will be fired when the pppd establishes a connection.
I don't use the VPN anymore and unfortunately it seems I don't have a copy of my ip-up file anymore, but the way I used to do it is something similar to below (you'll ...
8
The Personal VPN section contains VPN profiles added by applications that use the NetworkExtension.framework. These are traditional IPSEC VPNs that can use IKEv1 or IKEv2 for key exchange.
Supported authentication methods are PSK (Pre-Shared Key) in the case of IKEv1, or X.509 certificates for both IKEv1 and IKEv2. The security is equal to (or greater than,...
8
A possibly better idea than messing around with openvpn directly (Tunnelblick is basically just a fancy GUI around it) would be to use an Applescript, something that can definitely be launched from the terminal (i.e. with osascript)
Example taken from here:
tell application "Tunnelblick"
connect "Company_VPN"
get state of first configuration where ...
8
You have to add /usr/local/sbin to your path.
It was installed to /usr/local/sbin but that directory is not in your $PATH by default. Add a line like this to your ~/.bashrc or equivalent:
export PATH=/usr/local/sbin:$PATH
8
This worked:
sudo route -n delete default -link 8
8
TL;DR
Launch Terminal and run:
ifconfig | grep -B 6 'status: active' | head -n 1 | cut -d : -f 1
Then run (replace en0 below with the output of the command above):
cd /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources
sudo ./airport en0 prefs DisconnectOnLogout=NO
sudo pmset -a sleep 0
Long version
I am on MacOS Mojave (...
7
I had the same problem on my Mac, and after fixing it I have figured out that it was caused by FortiClient (VPN client). Even when FortiClient was disconnected - it's DNS still appeared in the scutil.
The solution for me was:
scutil
> list ".*DNS"
This will show you a list of all DNS configs, that will look something like:
subKey [0] = State:/Network/...
Only top voted, non community-wiki answers of a minimum length are eligible
