Anyconnect Linux Client

  



  1. Cisco Anyconnect Client Linux Command Line
  2. Install Anyconnect Linux Client
  3. Linux Client For Windows
Anyconnect

NVIDIA Anyconnect VPN Clients: Windows Mac Linux (x64) Install Guide NOTE: Android/iOS clients can be downloaded from their respective app stores. AnyConnect Support for Linux. Cisco AnyConnect Secure Mobility Client 4.0 supports the following versions of Linux operating system: - Red Hat 6 (64-bit) - Ubuntu 12.x (64-bit).The AnyConnect GUI is not supported on all Linux distributions.

by Jeff Stern.

Note: There is also a more official method of installing UC Irvine's VPN support by using the proprietary Cisco VPN Linux client software provided by UCI. The below details an alternative method though, should you prefer not to use the Cisco VPN client software, but to use the open-source software. It is also more automatic. I personally prefer this method.

Introduction

U.C. Irvine's Office of Information Technology (OIT) has a good generalVPN-Linux support page to help you get connected to the campus VPN if you have a Fedora-based Linux box. Mostly, that page is oriented toward supporting the installation of the Cisco company's proprietary 'anyconnect' software so you can connect to the campus VPN servers using your Linux box.

However down at the bottom of that page, there is a separate section ('Linux OpenConnect Client') which gives information on setting up a connection to the campus VPN using an alternate method that uses only the native and non-proprietary 'openvpn' and 'openconnect' vpn drivers developed by the Linux open-source community, and is easily installable via its own package system, without using Cisco's software.

Anyconnect

But that section of instructions is oriented more toward those of us who use the Fedora distribution of Linux and its 'yum'-based package management system.

So I set up these instructions for those with Debian and Ubuntu systems. However, I know it also works with OpenSUSE and Fedora (albeit with different package names). Please let me know if you get it going on any other distro's, or if modifications are needed for them.

I find this method slightly easier to set up than Cisco's. It may not involve a fancy windowing interface or system-tray icons, but it is simple and works. Also, it is scriptable -- meaning that you can set it up so that you do not need to type in your username and password every time.

Keep in mind that this method is not supported by OIT. And I'm pretty busy. Especially if you are not from UCI.

But if it has worked for you, or if you have a brief suggestion, please do write me. I'd love to hear that it helped someone and/or any improvements that could be added.

Best free pdf editing software for mac. Thanks to several for the help getting here.

Installation

  1. Install necessary packages (for Debian and Ubuntu)
  2. Now download the below 2 scripts to your Linux system.
    (Remove the '.txt' endings during or after downloading, of course.)
    Dump them into your home bin dir ($HOME/bin , i.e. ~/bin) or to some other location on your $PATH you have access to.
  3. Edit the top sections of both scripts so as to set the variables correctly for your system, and save.
  4. Make these scripts executable:
  5. Again, make sure your ~/bin directory (or wherever you dumped these) is on your $PATH.
    I leave this to you, but maybe edit your ~/.bashrc or ~/.bash_profile initialization script(s).

Usage

  • Connecting: It will ask you for your user password if you haven't sudo'd recently.
    (You must be on the sudoer list on your machine.)
  • Disconnecting: You may again be asked to provide your password for sudo.
  • Testing:
    You can check how your IP address appears.
    • .to servers outside UCI: whatismyipaddress.com or Google
    • .to servers inside UCI: here (my own page).
  • Debugging:
    Ideally, the scripts are silent, but feedback is still helpful when debugging.
    Check the output in the log file location (OCLOG var, which you specified when editing the ucivpn* scripts).

Acknowledgements

Thanks to:

  1. Mike Iglesias and Sylvia Bass at UCI's OIT for putting a link to this page from their VPN-Linux page.
  2. Daniel Schneider for his Using Cisco AnyConnect VPN with openconnect page on GitHub, which I adapted originally for these instructions.
  3. Tom Distler, for the Tux/Cisco image at the top of this page, which I mooched from his page, How to connect Linux to a Cisco VPN using a PCF file.
  4. Professor Leo Simon at UC Berkeley, for asking me to make an automated version of the ucivpn connect script (up in Installation, Step 2).
  5. Mats Faugli for the heads-up that net-tools package now needs to be explicitly added in Ubuntu18, since that package is no longer included in the distribution by default (8/8/2018)
  6. Gediminas (5/27/18) for several corrections to the scripts which fixed the DNS resolv problem (bug) after shutting down, and which correctly remove the tun1 tun. He also suggested that it is possible to edit these scripts 'a step further and [so that] the 'up' script supports inputting user/pass/group/hostname from the stdin [which would make it] both secure and universal.' If I get a copy of that part from him, I will add in as well.

Contact / Feedback

Please email me to let me know how this process went for you, and/or with any suggestions for improvement on this page itself. Thanks.

<<<Last updated December 13, 2018>>>

Skip to end of metadataGo to start of metadata

Cisco Anyconnect Client Linux Command Line

AnyConnect Support for Linux

Cisco AnyConnect Secure Mobility Client 4.0 supports the following versions of Linux operating system:

- Red Hat 6 (64-bit)

Install Anyconnect Linux Client

- Ubuntu 12.x (64-bit)

Linux Client For Windows

***The AnyConnect GUI is not supported on all Linux distributions. When the GUI is supported, it's appearance is the same as the AnyConnect version 2.5 GUI.

Linux Requirements

  • x86 instruction set.
  • 64-bit processor.
  • 32 MB RAM.
  • 20 MB hard disk space.
  • Superuser privileges are required for installation.
  • libstdc++ users must have libstdc++.so.6(GLIBCXX_3.4) or higher, but below version 4.
  • Java 5 (1.5) or later. The only version that works for web installation is Sun Java. You must install Sun Java and configure your browser to use that instead of the default package.
  • zlib - to support SSL deflate compression
  • xterm - only required if you're doing initial deployment of AnyConnect via Weblaunch from ASA clientless portal.
  • gtk 2.0.0. .
  • gdk 2.0.0.
  • libpango 1.0.
  • iptables 1.2.7a or later.
  • tun module supplied with kernel 2.4.21 or 2.6.

AnyConnect Installation Instructions for Linux

  1. Go to https://ramsvpn.vcu.edu and login using your VCU eID and password, and preferred DUO two factor authentication method.
  2. Click the AnyConnect VPN link to download the installer file.
  3. Save the AnyConnect installer package to your local computer.
  4. Find the file downloaded named vpnsetup.sh.

  5. To run the shell executable file named vpnsetup.sh: Open a terminal window and change directories to the directory where vpnsetup.sh is saved, and then type:

    Download disk speed test mac. sudo sh vpnsetup.sh

  6. Open AnyConnect. Enter ramsvpn.vcu.edu in the connection bar. Enter your eID and password. Second Password depends on your preferred 2nd factor authentication option (see Authentication Options). Click “Connect”.
  7. Click “Accept”.

ATTENTION:

There are known issues with the Cisco AnyConnect client on various Linux distros. For this reason, we suggest using OpenConnect for Linux. OpenConnect is free and open source SSL VPN client software initially created to support Cisco's AnyConnect SSL VPN.