This is a fork of @dlenski's python-vipaccess, which in turn is a fork of @cyrozap's python-vipaccess
Your VIP code side by side to when you connect to SL VPN.
- Make sure openconnect is installed in your system
$ brew install openconnect
- Make sure you have git:
$ brew install git
$ git clone https://github.com/guicaro/python-vipaccess.git
$ cd python-vipaccess
$ sudo pip install lxml oath PyCrypto requests
$ sudo pip install .
$ vipaccess provision -t SYMC
- Call Soflayer at XXX-XXX-4500 and tell them you'd like to add another credential ID from Symantec VIP, say you got a new work phone, then give them the SYMCXXXXXXXX number from step 5 (You can have up to 3 credential ID tied to your SL account).
- Make openconnect run without sudo by adding following line (it's likely that vi editor opens up, if so ask google or some vi jedi for help on how to add text to file and save)
$ sudo visudo
%admin ALL=(ALL) NOPASSWD: /usr/local/bin/openconnect
- Add connect script on your Mac:
$ cat connectsl.sh >> ~/.profile
- Make sure this newly added function is available in your current session
$ source ~/.profile
- Cool! Now, every time you want to connect to Softlayer VPN run
$ connectsl <SoftLayer_username>
If you want to know more about this try the following, very cool read:
Reverse engineering the Symantec VIP Access Provisioning Protocol
https://www.cyrozap.com/2014/09/29/reversing-the-symantec-vip-access-provisioning-protocol/
If you want to make the experience better for all of us, fork the project and add a pull request. Some ideas:
- Add an array of all SL VPN endpoints we know of
- Do some error checking, or save process to PID file for easy process kill, how about verbose mode?
- Make everything automatic, even adding SL password and the VIP pin 😊
Have fun!