ini cisco anyconnect ocserv.conf的路由选择，使用粗略路由。请注意，新的ocserv已经支持no route命令，因此你可以指定中国的路由不经过vpn咯（这次没有展示，下

Posted 2021-05-24

route = 23.0.0.0/255.0.0.0
route=31.13.0.0/255.255.0.0
route = 54.0.0.0/255.0.0.0
route=64.0.0.0/255.0.0.0
route=68.0.0.0/255.248.0.0
route=69.0.0.0/255.0.0.0
route = 74.0.0.0/255.0.0.0
route = 93.0.0.0/255.0.0.0
route = 96.0.0.0/255.0.0.0
#route = 100.0.0.0/248.0.0.0
route = 101.0.0.0/255.0.0.0
route = 108.0.0.0/255.0.0.0
route = 108.0.0.0/252.0.0.0
route = 172.0.0.0/252.0.0.0
route = 175.0.0.0/255.0.0.0
route = 178.0.0.0/255.0.0.0
# t66y.com 184.154.0.0
route = 184.0.0.0/255.0.0.0
route = 190.0.0.0/255.0.0.0
route = 191.0.0.0/255.0.0.0
#route = 192.0.0.0/248.0.0.0
route = 199.0.0.0/255.0.0.0
route = 195.0.0.0/255.0.0.0
route = 216.0.0.0/255.0.0.0
route = 8.8.0.0/255.255.0.0

sh 适用于OpenConnect的Cisco Anyconnect CSD包装器。

#!/bin/sh
# Cisco Anyconnect CSD wrapper for OpenConnect

CSTUB="$HOME/.cisco/hostscan/bin/cstub"


$ARCH=$(uname -m)

if [[ "$ARCH" == "x86_64" ]]
then
    ARCH="linux_x64"
else
    ARCH="linux"
fi

shift

URL=
TICKET=
STUB=
GROUP=
CERTHASH=
LANGSELEN=

while [ "$1" ]; do
    if [ "$1" == "-ticket" ];   then shift; TICKET=$1; fi
    if [ "$1" == "-stub" ];     then shift; STUB=$1; fi
    if [ "$1" == "-group" ];    then shift; GROUP=$1; fi
    if [ "$1" == "-certhash" ]; then shift; CERTHASH=$1; fi
    if [ "$1" == "-url" ];      then shift; URL=$1; fi
    if [ "$1" == "-langselen" ];then shift; LANGSELEN=$1; fi
    shift
done

ARGS="-log error -ticket $TICKET -stub $STUB -group $GROUP -host $URL -certhash $CERTHASH"

if [[ -f $CSTUB && -x $CSTUB ]]
then
    $CSTUB $ARGS
else
    wget -c "https://${CSD_HOSTNAME}/CACHE/sdesktop/hostscan/$ARCH/cstub" -O $CSTUB
    chmod +x $CSTUB
    $CSTUB $ARGS
fi