Skip to content

Latest commit

 

History

History
38 lines (25 loc) · 1.16 KB

README.md

File metadata and controls

38 lines (25 loc) · 1.16 KB

Container to connect to a Ivanti/PulseSecure/Juniper VPN

You cannot use podman (even rootfull), usefull to connect against multifactor login vpn

# First build (don't forget the last dot)
sudo docker build -t vpn-openconnect .

# Start Daemon
AUTHORIZED_SSH_KEY=$(cat ~/.ssh/id_ecdsa.pub)
docker run --init --rm -e AUTHORIZED_SSH_KEY="${AUTHORIZED_SSH_KEY}" -d --name vpn-openconnect -p1111:22 --device=/dev/net/tun --cap-add=NET_ADMIN --cap-add=DAC_READ_SEARCH  --cap-add=CAP_SYS_CHROOT  vpn-ike

# Start VPN container
sudo docker run --init --rm -e AUTHORIZED_SSH_KEY="${AUTHORIZED_SSH_KEY}" -d --name vpn-openconnect -p1111:22 --device=/dev/net/tun --cap-add=NET_ADMIN --cap-add=DAC_READ_SEARCH  --cap-add=CAP_SYS_CHROOT  vpn-openconnect

# launch VPN container

ssh -XC -p1111 -lroot localhost openconnect-pulse-gui --insecure https://vpnssl.mydomain.com/MYVPN/ 

# Stop Daemon

sudo docker stop vpn-openconnect


There are some helper script in `contrib` folder

1. Launch Vpn Container ( kill container at every launch)

```shell
bash contrib/run_container.sh
  1. Initiate vpn Login
bash contrib/launch_vpn.sh https://vpnssl.mydomain.com/MYVPN/