anyconnect.sh

#!/bin/bash

AUTHINFO=$(cat<<-EOM
        y
        admin
        $(security find-generic-password -ws anyconnect)
        EOM
        )

if [ "$1" == "on" ]
        then
                echo "$AUTHINFO" | /opt/cisco/anyconnect/bin/vpn connect 10.0.0.10 -s
elif [ "$1" == "off" ]
        then
                /opt/cisco/anyconnect/bin/vpn disconnect
elif [ "$1" == "status" ]
        then
                /opt/cisco/anyconnect/bin/vpn state | grep -F ">>"
else
        echo "$(basename $0) [ on | off | status ]"
fi

add auth info to keychain:
security add-generic-password -a admin -s anyconnect -w **********