42
Apple Script provides a good solution:
on idle
tell application "System Events"
tell current location of network preferences
set myConnection to the service "VPN University"
if myConnection is not null then
if current configuration of myConnection is not connected then
connect ...
29
Add this to your ~/.bash_profile:
export PATH=$(brew --prefix openvpn)/sbin:$PATH
26
Technically - the process is called trilateration and operates by cross checking all BSSID - the unique identifier / MAC address for each wireless base station that your Mac can detect while it listens periodically or is actively searching to join a WiFi channel.
How does Maps on Mac OS determine the computer's location
You can run this scan manually ...
26
The FlowVPN client is free (and works with any provider).
It supports PPTP and OpenVPN on macOS Sierra and High Sierra:
https://www.flowvpn.com/download-mac/
Just overwrite the FlowVPN server address with any server and it connects.
16
No.
As of Sept 2012 (and Mountain Lion), macOS does not support OpenVPN in the built-in "Network Manager".
Out-of-the-box macOS only supports:
L2TP over IPSec
PPTP (not recommended)
Cisco IPSec
However, you can use the following third-party OpenVPN clients in macOS:
Shimo
Viscosity
Tunnelblick (open source, free)
pritunl client (open source, free)
I ...
16
I think I just figured it out.
From the BIG-IP f5 application log, you can only find this from the icon in the menu bar. I saw this line:
2018-06-15, 23:30:54:000, 1274, 1274, edge, 1, (0xfffffffe)
EXCEPTION - TunnelService, TunnelServer already launched, pid, 1514
I went into my terminal and found this.
ps alx | grep 1514
0 1514 1 0 ...
14
At the terminal type:
echo $PATH
That's your default search path for executables. Looks like the openvpn executable was installed someplace not in your search path.
First, you'll need to find the openvpn executable:
sudo find / -type f -name "openvpn"
Then add the directory containing the openvpn executable to your default search path by adding this ...
14
I had the exact same issue. Basically, this happens only if you enable the checkbox "Save Settings" at the username/password prompt in Junos Pulse. If you do not enable this checkbox, it should not freeze at the next connection attempt.
Pulsesecure have released the software version 5.1R5.1 build 61437, where this issue has been fixed (I tested it today and ...
13
Yes, it does involve authentication by certificate. From this article from Apple:
iOS supports VPN On Demand for networks that use certificated-based authentication. You specify which domains require a VPN connection by using a configuration profile.
The VPN connection is made whenever the device tries to connect to certain domains. Specific apps don't ...
12
I guess you are using anyconnect to connect to the Cisco VPN server. AnyConnect can also be used from Terminal. This works on macOS Sierra and AnyConnect 3.1.14018. Create a bash script with the following command:
/opt/cisco/anyconnect/bin/vpn connect your-vpn.server.here -s <.credentials
And put the login details in the file .credentials with the ...
11
I guess not all VPN connections of the build-in VPN client in Mac have that option.
The PPTP and L2TP do offer the option: Open your network settings:
Select your VPN connection and click on the advanced button.
A new window will pop up with three check-boxes under the heading "Session options".
The last one of these checkboxes is the one you want: "...
10
Figured it out. First downgrade JAVA to Apple 1.6 as mentioned by Joe L. Farina above.
That actually does work in some situations, but if your VPN provider only supports an old version of Network Connect then it will continue to hang.
To fix that, on the terminal run the following, then restart your computer:
sudo nvram boot-args="kext-dev-mode=1"
For ...
10
In short, no. Both are instances of VPN configurations profiles.
By default, the “VPN Configurations” pane should be the only one that exists if you are installing a VPN configuration profile under the natively supported protocols (PPTP, L2TP/IPSEC).
The “Personal VPN” option appears only after installing certain software, such as Unlimited Free VPN by ...
10
So it would seem that if you only install the VPN client AnyConnect will not autostart.
I uninstalled AnyConnect (version 4.x) then reinstalled doing a custom install. I only installed VPN, I did not install:
Web Security
AMP Enabler
Diagnostics and Reporting Tool
Posture
ISE Posture
Now AnyConnect no longer auto starts (yeah!)
Makes sense I suppose as ...
9
You could use the following AppleScript, save it as an application and set it to be a agent (no dock icon).
This script will setup a VPN connection when there is none. Therefore, it should also reconnect shortly after your connection drops. You can change the interval to check your VPN connection, it's 120 seconds in the script.
on idle
tell ...
9
There are two premium (paid) solutions that do this well.
MacProxy ($30USD)
Proxifier ($40USD)
TSocks is an open source solution, requires some command-line foo.
9
I think the unerlying issue is that Yosemite will not load kext (kernel extensions) unless they are signed by an authorized kernel extension developer. However in 10.8 and earlier, kexts could not be signed and signed kexts for 10.9+ will not load in <10.9.
I experienced the same issue loading unsigned tuntaposx for the vpnc cisco client.
You can ...
9
Removing the following worked for me.
/Library/LaunchAgents/com.cisco.anyconnect.vpnagent.plist
/Library/LaunchDaemons/com.cisco.anyconnect.gui.plist
8
I made some changes to the provided answer, because if something is worth doing it's worth doing into the ground. I wanted to reconnect if the VPN was dropped, but NOT reconnect if the VPN was intentionally disconnected. The solution I came up with was both effective and inelegant.
First I added hooks to the pppd startup and shutdown to keep track of the ...
8
You can put extra configuration in /etc/ppp/ip-up file, which is described in man pppd, and which is a standard shell script file that will be fired when the pppd establishes a connection.
I don't use the VPN anymore and unfortunately it seems I don't have a copy of my ip-up file anymore, but the way I used to do it is something similar to below (you'll ...
8
A possibly better idea than messing around with openvpn directly (Tunnelblick is basically just a fancy GUI around it) would be to use an Applescript, something that can definitely be launched from the terminal (i.e. with osascript)
Example taken from here:
tell application "Tunnelblick"
connect "Company_VPN"
get state of first configuration where ...
8
From reading your question I get the impression that you're doing everything correctly and the Cisco VPN Server has the option to allow saving of passwords client-side set to disallow.
I know for certain that such a setting exists.
8
This worked:
sudo route -n delete default -link 8
8
TL;DR
Launch Terminal and run:
ifconfig | grep -B 6 'status: active' | head -n 1 | cut -d : -f 1
Then run (replace en0 below with the output of the command above):
cd /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources
sudo ./airport en0 prefs DisconnectOnLogout=NO
sudo pmset -a sleep 0
Long version
I am on MacOS Mojave (...
8
utun0 is created by macOS for VPN and Back to My Mac, regardless of whether these features are enabled. This is not indicative of any unwanted application being installed; utun0 is expected on macOS Sierra and later.
8
These are perfectly normal.
lo is the loopback interface
en0 and en1 are your hardware interfaces (usually Ethernet and WiFi)
p2p0 is a point to point link (usually VPN)
stf0 is a "six to four" interface (IPv6 to IPv4)
gif01 is a software interface
bridge0 is a software bridge between other interfaces
utun0 is used for "Back to My Mac"
XHC20 is a USB ...
7
I had the same problem on my Mac, and after fixing it I have figured out that it was caused by FortiClient (VPN client). Even when FortiClient was disconnected - it's DNS still appeared in the scutil.
The solution for me was:
scutil
> list ".*DNS"
This will show you a list of all DNS configs, that will look something like:
subKey [0] = State:/Network/...
7
The Personal VPN section contains VPN profiles added by applications that use the NetworkExtension.framework. These are traditional IPSEC VPNs that can use IKEv1 or IKEv2 for key exchange.
Supported authentication methods are PSK (Pre-Shared Key) in the case of IKEv1, or X.509 certificates for both IKEv1 and IKEv2. The security is equal to (or greater than,...
7
You have to add /usr/local/sbin to your path.
It was installed to /usr/local/sbin but that directory is not in your $PATH by default. Add a line like this to your ~/.bashrc or equivalent:
export PATH=/usr/local/sbin:$PATH
7
Most likely what you are seeing is the cached image of the app. Your iPhone takes picture snapshots of apps as they run, specifically so that when you go into the app switcher, you see a graphic that looks like the app. It also refreshes this image from time to time. Most likely, you're just seeing a stale picture.
Also on an unrelated note, with the way ...
Only top voted, non community-wiki answers of a minimum length are eligible
