diff --git a/net/openconnect/Makefile b/net/openconnect/Makefile
index 6ce0c20c73..4fe4627c9e 100644
--- a/net/openconnect/Makefile
+++ b/net/openconnect/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openconnect
 PKG_VERSION:=9.12
-PKG_RELEASE:=6
+PKG_RELEASE:=7
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://www.infradead.org/openconnect/download
diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh
index ae8408b19e..6ec8b66296 100755
--- a/net/openconnect/files/openconnect.sh
+++ b/net/openconnect/files/openconnect.sh
@@ -23,6 +23,7 @@ proto_openconnect_init_config() {
 	proto_config_add_string "vpn_protocol"
 	proto_config_add_boolean "pfs"
 	proto_config_add_boolean "no_dtls"
+	proto_config_add_boolean "no_external_auth"
 	proto_config_add_string "interface"
 	proto_config_add_string "username"
 	proto_config_add_string "serverhash"
@@ -58,6 +59,7 @@ proto_openconnect_setup() {
 		juniper \
 		vpn_protocol \
 		mtu \
+		no_external_auth \
 		no_dtls \
 		os \
 		password \
@@ -107,6 +109,7 @@ proto_openconnect_setup() {
 	[ -n "$script" ] && append_args --script "$script"
 	[ "$pfs" = 1 ] && append_args --pfs
 	[ "$no_dtls" = 1 ] && append_args --no-dtls
+	[ "$no_external_auth" = 1 ] && append_args "--no-external-auth"
 	[ -n "$mtu" ] && append_args --mtu "$mtu"
 
 	# migrate to standard config files