On 4/17/20 6:11 PM, David Woodhouse wrote:
I think you can set at least the unique ID with the
openconnect_set_mobile_info() function, which isn't exposed on the
command line. Do you want to try using that and let us know if it does
what you expect?
There was a patch at
http://lists.infradead.org/pipermail/openconnect-devel/2016-July/003808.html
which attempted to add support for it for non-mobile platforms but it
needed a little more work. We should probably revisit that.
I note modern AnyConnect also sends a 'unique-id-global' as well as the
'unique-id' field.
Hi David,
I am not a dev.
I gave in the previous post the logs from AnyConnect v10.x that were
seen into the ASA.
I would like to give a try if you say me what to do step by step, to run
on Linux.
Here are the missing logs from ASA for a openconnect client :
Apr 16 16:03:00 ip_addr_local %ASA-7-734003: DAP: User user-name, Addr
public_ip_addr_client: Session Attribute endpoint.anyconnect.devicetype =
Apr 16 16:03:00 ip_addr_local %ASA-7-734003: DAP: User user-name, Addr
public_ip_addr_client: Session Attribute
endpoint.anyconnect.platformversion =
Apr 16 16:03:00 ip_addr_local %ASA-7-734003: DAP: User user-name, Addr
public_ip_addr_client: Session Attribute
endpoint.anyconnect.deviceuniqueid =
Apr 16 16:03:00 ip_addr_local %ASA-7-734003: DAP: User user-name, Addr
public_ip_addr_client: Session Attribute
endpoint.anyconnect.macaddress["0"] =
Apr 16 16:03:00 ip_addr_local %ASA-7-734003: DAP: User user-name, Addr
public_ip_addr_client: Session Attribute
endpoint.anyconnect.publicmacaddress =
This attribute "endpoint.anyconnect.platformversion" is not necessary
since with option of "openconnect --version-string" is enough.
The last ones are "endpoint.anyconnect.macaddress["0"]" and
"endpoint.anyconnect.publicmacaddress" would be great.
But for the filter DAP of Cisco/ASA, the esential attribute
"endpoint.anyconnect.deviceuniqueid" is needed.
I put different options to correspond to a Windows client as a
AnyConnect client log.
y.
_______________________________________________
openconnect-devel mailing list
openconnect-devel@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/openconnect-devel
