You can add script to .sh that does just that.
#!/bin/bash
# Ask for input
read -p "Enter VPN display name (HostName): " hostname
read -p "Enter VPN server address (HostAddress): " hostaddress
# Clean up filename
filename="${hostname// /_}.xml"
# Destination folder
profile_dir="/opt/cisco/secureclient/vpn/profile"
output_file="${profile_dir}/${filename}"
# Check and create profile directory if it doesn't exist
if [ ! -d "$profile_dir" ]; then
echo " Creating VPN profile directory: $profile_dir"
sudo mkdir -p "$profile_dir"
sudo chown root:wheel "$profile_dir"
sudo chmod 755 "$profile_dir"
fi
# Create the profile XML content
profile_content="<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<AnyConnectProfile xmlns=\"http://schemas.xmlsoap.org/encoding/\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:schemaLocation=\"http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd\">
<ClientInitialization>
<UseStartBeforeLogon UserControllable=\"true\">true</UseStartBeforeLogon>
<AutomaticCertSelection UserControllable=\"false\">true</AutomaticCertSelection>
<ShowPreConnectMessage>false</ShowPreConnectMessage>
<CertificateStore>All</CertificateStore>
<CertificateStoreMac>All</CertificateStoreMac>
<CertificateStoreLinux>All</CertificateStoreLinux>
<CertificateStoreOverride>false</CertificateStoreOverride>
<ProxySettings>Native</ProxySettings>
<AllowLocalProxyConnections>true</AllowLocalProxyConnections>
<AuthenticationTimeout>30</AuthenticationTimeout>
<AutoConnectOnStart UserControllable=\"true\">false</AutoConnectOnStart>
<MinimizeOnConnect UserControllable=\"true\">true</MinimizeOnConnect>
<LocalLanAccess UserControllable=\"true\">false</LocalLanAccess>
<DisableCaptivePortalDetection UserControllable=\"true\">false</DisableCaptivePortalDetection>
<ClearSmartcardPin UserControllable=\"false\">true</ClearSmartcardPin>
<IPProtocolSupport>IPv4,IPv6</IPProtocolSupport>
<AutoReconnect UserControllable=\"false\">true
<AutoReconnectBehavior UserControllable=\"false\">ReconnectAfterResume</AutoReconnectBehavior>
</AutoReconnect>
<SuspendOnConnectedStandby>false</SuspendOnConnectedStandby>
<AutoUpdate UserControllable=\"false\">true</AutoUpdate>
<RSASecurIDIntegration UserControllable=\"false\">Automatic</RSASecurIDIntegration>
<WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>
<LinuxLogonEnforcement>SingleLocalLogon</LinuxLogonEnforcement>
<WindowsVPNEstablishment>LocalUsersOnly</WindowsVPNEstablishment>
<LinuxVPNEstablishment>LocalUsersOnly</LinuxVPNEstablishment>
<AutomaticVPNPolicy>false</AutomaticVPNPolicy>
<PPPExclusion UserControllable=\"false\">Disable
<PPPExclusionServerIP UserControllable=\"false\"></PPPExclusionServerIP>
</PPPExclusion>
<EnableScripting UserControllable=\"false\">false</EnableScripting>
<EnableAutomaticServerSelection UserControllable=\"false\">false
<AutoServerSelectionImprovement>20</AutoServerSelectionImprovement>
<AutoServerSelectionSuspendTime>4</AutoServerSelectionSuspendTime>
</EnableAutomaticServerSelection>
<RetainVpnOnLogoff>false</RetainVpnOnLogoff>
<CaptivePortalRemediationBrowserFailover>false</CaptivePortalRemediationBrowserFailover>
<AllowManualHostInput>true</AllowManualHostInput>
</ClientInitialization>
<ServerList>
<HostEntry>
<HostName>$hostname</HostName>
<HostAddress>$hostaddress</HostAddress>
</HostEntry>
</ServerList>
</AnyConnectProfile>"
# Save the profile file with root permissions
echo " Writing VPN profile to: $output_file"
echo "$profile_content" | sudo tee "$output_file" > /dev/null
sudo chown root:wheel "$output_file"
sudo chmod 644 "$output_file"
echo " VPN profile '$hostname' created successfully in $profile_dir"
