主页 / computer / 问题 / 1709293
Accepted
Alexander Presber
Asked: 2022-03-12 01:39:52 +0800 CST

无头 Cisco AnyConnect 客户端的“远程用户已禁用”

  • 772

在 linux 机器上，我们尝试使用 Cisco AnyConnect 版本建立 VPN 连接，anyconnect-linux64-4.10.05085-predeploy-k9如下所示：

printf '<user>\n<password>\ny' | /opt/cisco/anyconnect/bin/vpn -s connect <host>

我们得到这个错误：

  >> state: Connecting
  >> notice: Establishing VPN session...
The AnyConnect Downloader is analyzing this computer. Please wait...
Initializing the AnyConnect Downloader...
The AnyConnect Downloader is performing update checks...
The AnyConnect Downloader updates have been completed.
  >> notice: The AnyConnect Downloader is performing update checks...
  >> notice: Checking for profile updates...
  >> notice: Checking for customization updates...
  >> notice: Performing any required updates...
  >> notice: The AnyConnect Downloader updates have been completed.
Please wait while the VPN connection is established...
  >> state: Connecting
  >> notice: Establishing VPN session...
  >> notice: Establishing VPN - Initiating connection...
  >> state: Disconnecting
  >> notice: Disconnect in progress, please wait...
  >> error: VPN establishment capability for a remote user is disabled.  A VPN connection will not be established.
  >> state: Disconnected

根据互联网上的评论，我们尝试添加/opt/cisco/anyconnect/profile/Profile.xml具有以下内容的配置文件：

<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd">
  <ClientInitialization>
    <LinuxVPNEstablishment>AllowRemoteUsers</LinuxVPNEstablishment>
  </ClientInitialization>
</AnyConnectProfile>

但无济于事。

允许远程用户进行 VPN 连接的正确方法是什么？

vpn cisco-vpn-client

1 个回答

  1. Best Answer

    所以事实证明，AllowRemoteUser设置必须在服务器端完成，而不是客户端。

    添加

    <LinuxVPNEstablishment>AllowRemoteUsers</LinuxVPNEstablishment>

    在 VPN 服务器上的某些.xml文件中，错误消失了。

    知道会很有趣

    • 为什么 AnyConnect 首先区分 Windows 和 Linux 客户端
    • 为什么通过 AnyConnct macOS 二进制文件从 macOS 客户端建立的连接确实有效- 它们是否被视为 Windows / 根本不受限制？
    • 1

相关问题