Viscosity and Cisco VPN

Got a problem with Viscosity or need help? Ask here!

tidrion

Posts: 1
Joined: Mon Nov 03, 2008 10:43 am

Post by tidrion » Mon Nov 03, 2008 10:44 am
Do these two pieces of software still combat with each other when both are installed?

James

User avatar
Posts: 1857
Joined: Thu Sep 04, 2008 9:27 pm

Post by James » Mon Nov 03, 2008 8:40 pm
Both Viscosity and the standard Cisco VPN client can be installed on the same computer. They can both be used at the same time, however it's necessary to open the Cisco VPN client before connecting an OpenVPN connection to avoid a subsystem error from the Cisco client.

The tun/tap drivers that OpenVPN requires are incompatible with the drivers bundled with the Cisco Anyconnect VPN client, so Viscosity and Cisco Anyconnent will not play nicely together. More information at: http://tuntaposx.sourceforge.net/faq.xhtml

Cheers
James
James Bekkema
Viscosity Developer

Web: http://www.sparklabs.com
Support: http://www.sparklabs.com/support
Twitter: http://twitter.com/sparklabs

XenoPhage

Posts: 4
Joined: Wed Dec 17, 2008 1:33 pm

Post by XenoPhage » Wed Dec 17, 2008 1:49 pm
James wrote:
The tun/tap drivers that OpenVPN requires are incompatible with the drivers bundled with the Cisco Anyconnect VPN client, so Viscosity and Cisco Anyconnent will not play nicely together. More information at: http://tuntaposx.sourceforge.net/faq.xhtml
This kinda sucks... a lot... Is there any workaround for this? Or am I stuck reinstalling one or the other over and over?

James

User avatar
Posts: 1857
Joined: Thu Sep 04, 2008 9:27 pm

Post by James » Thu Dec 18, 2008 11:20 pm
XenoPhage wrote:
This kinda sucks... a lot... Is there any workaround for this? Or am I stuck reinstalling one or the other over and over?
Well you should be able to save yourself rebooting/reinstalling with the following commands (run them before opening Cisco AnyConnect):

sudo kextunload /Library/Extensions/tun.kext
sudo kextunload /Library/Extensions/tap.kext

You could either type them directly into the Terminal application, or save them as a shell file which you can simply double-click on. For example save a text file with the following contents, give it a name ending in .sh (e.g. disabletuntap.sh), and set the file to open using the Terminal:

#!/bin/sh
sudo kextunload /Library/Extensions/tun.kext
sudo kextunload /Library/Extensions/tap.kext

To switch back to Viscosity, you can simply reopen it (Viscosity will ask for your username and password), or create another script:

sudo kextload /Library/Extensions/tun.kext
sudo kextload /Library/Extensions/tap.kext

Cheers
James
James Bekkema
Viscosity Developer

Web: http://www.sparklabs.com
Support: http://www.sparklabs.com/support
Twitter: http://twitter.com/sparklabs

XenoPhage

Posts: 4
Joined: Wed Dec 17, 2008 1:33 pm

Post by XenoPhage » Fri Dec 19, 2008 2:32 am
James wrote:
Well you should be able to save yourself rebooting/reinstalling with the following commands (run them before opening Cisco AnyConnect):

Cheers
James
Oh, awesome. Thanks!

Guest


Post by Guest » Tue Jan 06, 2009 1:18 pm
James wrote:
Well you should be able to save yourself rebooting/reinstalling with the following commands (run them before opening Cisco AnyConnect):

sudo kextunload /Library/Extensions/tun.kext
sudo kextunload /Library/Extensions/tap.kext
For what it's worth, apparently the anyconnect tun adapter is in /System/Library/Extensions/tun.kext ... And the tap adapter doesn't need to be messed with (or so it seems)

javellan

Posts: 1
Joined: Wed Jul 15, 2009 2:06 pm

Post by javellan » Wed Jul 15, 2009 2:10 pm
Thanks everyone, I am now unloading and loading the two different tun drivers for each client when needed via scripts. For a second I thought I was SOL cause I definitely need both to work without reboots :)
I did however spend another hour or so getting a scutil script to fix my multiple search domains suffixes, I'm using a pfsense 1.2.3RC1 for reference.
-Joaquin
7 posts Page 1 of 1