how to bypass cisco anyConnect secure mobility client on windows

  1. replace anyConnect with openConnect, because anyConnect doesn’t allow lan access.

  2. testing

    • change metric

    • delete default route

    • add route directly

  3. result

    • download china_ip_list.txt from github.

    • run powershell as administrator, input:

      Get-Content .\china_ip_list.txt | ForEach-Object {route -p add $_ yourGatewayAddress}
      

      excute “route -f” in the powershell and reboot computer when you want to restore.

  4. references:

    https://superuser.com/questions/284709/how-to-allow-local-lan-access-while-connected-to-cisco-vpn https://blog.slanterns.net/Routing-Table-and-VPN-Bypassing/, his experience is similar to mine, ^。^.