OpenConnect is a client for Cisco's AnyConnect SSL VPN, which is

Cisco's implementation of the DTLS protocol unfortunately does not

supported by IOS 12.4(9)T or later on Cisco SR500, 870, 880,

comply with the relevant standards, and the OpenSSL in FreeBSD's

1800, 2800, 3800, 7200 Series and Cisco 7301 Routers.

base requires a patch to provide full interoperability.  You will

still be able to establish a tunnel, but all traffic will be

transmitted via an HTTPS connection.  This means that any packet

loss on your link will result in a significant detriment to the

speed of your VPN connection.

Like vpnc, OpenConnect is not officially supported by, or

Note that versions of FreeBSD older than 8.0 will require a small

associated in any way with, Cisco Systems. It just happens to

number of additional patches, due to the older version of OpenSSL

interoperate with their equipment.

included in their base.

WWW: http://www.infradead.org/openconnect.html

More information is included in README.DTLS.

comply with the relevant standards.  OpenSSL must be patched to

comply with the relevant standards, and the OpenSSL in FreeBSD's

provide full compliance with their implementation, and due to the

base requires a patch to provide full interoperability.  You will

older release of OpenSSL in the FreeBSD base, there are additional

still be able to establish a tunnel, but all traffic will be

patches that must be applied to achieve the same goal.  Though

transmitted via an HTTPS connection.  This means that any packet

OpenConnect will still function, all traffic will be passed over

loss on your link will result in a significant detriment to the

an HTTPS connection.  Should there be any packet loss on your

speed of your VPN connection.

link, your VPN connection will suffer greatly.