On 11/17/19, 2:10 AM, "Nikos Mavrogiannopoulos" <n.mavrogiannopoulos@xxxxxxxxx> wrote:
> Thank you. I've tweaked it a little to be less disruptive for
> openconnect clients:
> https://gitlab.com/openconnect/ocserv/merge_requests/119
Makes sense, especially for older openconnect clients.
> Does the do anyconnect servers send the 2000::/3 route to iphone
> clients all the time?
The explicit 2000::/3 route is only needed for the iPhone anyconnect version. The Windows and MacOS version don't need it, but a split route doesn't hurt them either.
I'm not sure why yet. I did a strings over the anyconnect client and I see different verbs than ocserv supports, it may depend on some of those.
Leendert
_______________________________________________
openconnect-devel mailing list
openconnect-devel@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/openconnect-devel
