documentation/docs/admin-guide/configuration/basic/cisco_vpn.md

VPN with Cisco Secure Client

Installation

In Hierea you can enable it with

cisco_vpn::enable: true

Automatic Actions upon Connect

If you want to run a script after activation of the VPN connection best use the NetworkManager dispatcher service by placing into /etc/NetworkManager/dispatcher.d/ a script like

#!/usr/bin/bash

set -o errexit    # abort on nonzero exitstatus
set -o nounset    # abort on unbound variable
set -o pipefail   # do not hide errors within pipes
shopt -u failglob # abort if there is no wildcard match

INTERFACE="$1"
EVENT="$2"

if [[ $EVENT == up ]] && [[ $INTERFACE =~ ^cscotun ]]; then
    # give some time for all network configuration to happen
    sleep 5
    # security updates + Puppet run
    systemctl start dnf-automatic
fi

which will install whatever is configured for dnf-automatic (by default security updates), followed by a Puppet run.

If you want a full update independent of dnf-automatic, then do

    dnf --assumeyes update || true
    puppet agent -t

Best place this script with Hiera.