Description='A simple WPA encrypted wireless connection'
Interface=wlp5s0
Connection=wireless
Security=wpa
IP=dhcp
ESSID='ASUS-WL-500W'
# Prepend hexadecimal keys with \"
# If your key starts with ", write it as '""<key>"'
# See also: the section on special quoting rules in netctl.profile(5)
Key='41599835'
# Uncomment this if your ssid is hidden
#Hidden=yes
ExecUpPost="pon Kamchatka && ip route add 10.128.134.0/24 dev ppp0"

23:25 [[email protected]]$ netctl: sudo netctl stop-all
[sudo] password for oleg:
23:27 [[email protected]]$ netctl: sudo nano wireless-wpa
23:28 [[email protected]]$ netctl: sudo netctl start wireless-wpa
Job for [email protected]\x2dwpa.service failed. See 'systemctl status [email protected]\x2dwpa.service' and 'journalctl -xn' for details.
23:28 [[email protected]]$ netctl: sudo systemctl status [email protected]
[email protected] - Networking for netctl profile wireless/wpa
   Loaded: loaded (/usr/lib/systemd/system/[email protected]; static)
   Active: inactive (dead)
     Docs: man:netctl.profile(5)
23:28 [[email protected]]$ netctl: sudo nano wireless-wpa
23:29 [[email protected]]$ netctl: sudo netctl start wireless-wpa
23:29 [[email protected]]$ netctl: ip link
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp2s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000
    link/ether 00:1d:60:30:5c:34 brd ff:ff:ff:ff:ff:ff
3: wlp5s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DORMANT qlen 1000
    link/ether 00:13:e8:a5:4b:09 brd ff:ff:ff:ff:ff:ff
23:29 [[email protected]]$ netctl: ping -c 4 ya.ru
PING ya.ru (87.250.250.3) 56(84) bytes of data.
64 bytes from www.yandex.ru (87.250.250.3): icmp_seq=1 ttl=46 time=157 ms
64 bytes from www.yandex.ru (87.250.250.3): icmp_seq=2 ttl=46 time=115 ms
64 bytes from www.yandex.ru (87.250.250.3): icmp_seq=3 ttl=46 time=134 ms
64 bytes from www.yandex.ru (87.250.250.3): icmp_seq=4 ttl=42 time=143 ms
--- ya.ru ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3004ms
rtt min/avg/max/mdev = 115.863/137.702/157.567/15.132 ms

23:17 [[email protected]]$ netctl: sudo systemctl status [email protected]\x2dwpa.service
[email protected] - Networking for netctl profile wirelessx2dwpa
   Loaded: loaded (/usr/lib/systemd/system/[email protected]; static)
   Active: inactive (dead)
     Docs: man:netctl.profile(5)

sudo nano /etc/netctl/wireless-wpa // добавил строку в конец ExecUpPost="pon Kamchatka && ip route add 10.128.134.0/24 dev ppp0"
sudo netctl disable wireless-wpa
sudo shutdown -r 0
sudo netctl enable wireless-wpa
sudo shutdown -r 0
ip link

sudo pon Kamchatka
sudo ip route add 10.128.134.0/24 dev ppp0

/etc/systemd/system/ciscovpn.service
[Unit]
Description=Cisco AnyConnect Secure Mobility Client Agent
Requires=network.target remote-fs.target
After=network.target remote-fs.target
[Service]
Type=forking
PIDFile=/var/run/vpnagentd.pid
ExecStart=/opt/cisco/anyconnect/bin/vpnagentd
ExecStop=/usr/bin/killall /opt/cisco/anyconnect/bin/vpnagentd
Restart=on-abort
[Install]
# one may want to use multi-user.target instead
WantedBy=graphical.target

sudo systemctl disable [email protected]
sudo netctl disable wireless-wpa
sudo shutdown -r 0
sudo netctl enable wireless-wpa
sudo shutdown -r 0