The openconnect server expects to be configured using the uci interface. To setup a server the provides access to LAN with network address 10.100.2.0/255.255.255.0 using the VPN address range 10.100.3.0/255.255.255.0 add the following to /etc/config/ocserv: ----------------------------------------------------------------- config ocserv 'config' option port '4443' option dpd '120' option max_clients '8' option max_same '2' option netmask '255.255.255.0' option ipaddr '10.100.3.0' option auth 'plain' option zone 'lan' option fwport '4443' option enable '1' config dns option ip '10.100.2.1' config routes option ip '10.100.2.0' option netmask '255.255.255.0' config ocservusers option name 'test' option password '$5$unl8uKAGNsdTh9zm$PnUHEGhDc5VHbFE2EfWwW38Bub6Y6EZ5hrFwZE1r2F1' ----------------------------------------------------------------- This configuration also adds the user "test" with password "test". The password is specified in the crypt(3) format. The server can be enabled and started using: # /etc/init.d/ocserv enable # /etc/init.d/ocserv start There is a luci plugin to allow configuring the server from the web environment, available as patch over luci at https://github.com/nmav/luci-openconnect/tree/openconnect