Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-staff ,  itfaq-editors-lite ,  mpsg-mpsg-helpdesk ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:
Individual Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can EDIT the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can ADMINISTER the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 

Versions Compared

Old Version 80

changes.mady.by.user Tap L

Saved on

compared with

New Version 81

changes.mady.by.user Tap L

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Tip

You can test VPN connectivity by going to fms.lbl.gov. If you see a log-in, you have successfully connected!To login to VPN, you must use your LDAP credential. Not your AD credential.

Deck of Cards
startHiddenfalse
idVPN install
Card
labelWindows

How to install VPN on Windows

HTML
<iframe src="https://drive.google.com/file/d/1_S2Xmw7VuVz4JGqMEfD-mjZd8MEjo_ec/preview" width="640" height="480"></iframe>
1

Got to software.lbl.gov  and download the latest version of Cisco VPN on available for Windows version you are using under the Current Releases section


2

Launch the installer file you just downloaded and follow the on screen instruction to install Cisco VPN

Note: Be sure to answer Yes to the software agreement and answer Yes to allow the installer to make change to the computer

3

Start the application by going to Windows logo-> All apps-> Cisco-> Cisco AnyConnect Secure Mobility Client


4Enter your LDAP username and password to connect

Card
labelCatalina

How to install VPN on Mac

HTML
<iframe src="https://drive.google.com/file/d/1YSSf0PO9nVkvftR89B5BaN0uUSA-H8P_/preview" width="640" height="480"></iframe>
1

Got to software.lbl.gov  and download the latest version of Cisco VPN on available for macOS version you are using under the Current Releases section

2

Launch the installer file you just downloaded and double-click on AnyConnect.pkg

Note

If you get a prompt from the Mac Gatekeeper that looks like this:

If you do, click ok and right click or control button + mouse click on AnyConnect.pkg. Select "Open With" and then "Installer (default)":

Click Open and continue with the instruction:

3

Follow the on screen instruction to install Cisco VPN. When prompted for credential, enter your Mac login name and password and click Install Software

Note: Be sure to answer Yes to the software agreement

4Go to Launchpad or Application Folder and click on the Cisco logo to start the application

5Enter your LDAP name and password to connect

Card
labelBigSur M1 Chip

How to install VPN on BigSur M1 Chip


HTML
<iframe src="https://drive.google.com/file/d/1Z4ucSV1RrEIIRRuheE6pg4uqHcXu9cPJ/preview" width="640" height="480"></iframe>

1

  • Open a new browser and type software.lbl.gov

  • Login using your credentials

  • Enter the MFA token using google authenticator or a YubiKey

2

  • Search for VPN

  • Click on Cisco VPN

  • Scroll down to Evaluation releases

  • Download Cisco VPN 4.9.05042

  • Click save

3

  • Double click on the downloaded file to begin installing

  • Right click or control button + mouse click on the package icon to click open

  • And click open on the pop-up window

4

  • Follow the instructions by clicking continue, agree to the license agreement and then install

  • Enter the user admin password, and then click install software

  • Please wait for the installation to complete

5

  • On the next screen click open preferences

  • Then click open security preferences

  • Click on the padlock to unlock it, enter user admin password and then click unlock

  • Allow Cisco any connect socket filter

  • Select allow on the popup

  • Select allow on the notification



6

Close the window and then click move to trash

7

You should now find Cisco any connect on your computer

Enter your LBL username and password to connect to the Lab's network

Card
labelBigSur Intel Chip

How to install VPN on BigSur Intel Chip


HTML
<iframe src="https://drive.google.com/file/d/14wqqi9M7kHD3EKqNrv4y5mTIorY77khc/preview" width="640" height="480"></iframe>

1

  • Open a new browser and type software.lbl.gov

  • Login using your credentials

  • Enter the MFA token using google authenticator or a YubiKey

2

  • Search for VPN

  • Click on Cisco VPN

  • Scroll down to Evaluation releases

  • Download Cisco VPN 4.9.05042

  • Click save

3

  • Double click on the downloaded file to begin installing

  • Right click or control button + mouse click on the package icon to click open

  • And click open on the pop-up window

4

  • Follow the instructions by clicking continue, agree to the license agreement and then install

  • Enter the user admin password, and then click install software



5

  • On the next screen click open preferences

  • Then click open security preferences

  • Click on the padlock to unlock it, enter user admin password and then click unlock

  • Allow Cisco any connect socket filter

  • Select allow on the popup

  • Select allow on the notification



6

Close the window and then click move to trash

7

You should now find Cisco any connect on your computer

Enter your LBL username and password to connect to the Lab's network



Card
labelChromeOS

How to install VPN on Chromebook

HTML
<iframe src="https://drive.google.com/file/d/1nPScg8xX1yZSsiAQIvfyVP3WFGOPRhmm/preview" width="640" height="480"></iframe>

Sign in to your Chromebook, and click the Launcher


The launcher looks like this in your taskbar:

Click on Web Store (click All Appsif Web Store does not show)

Type anyconnect in the search box

Cisco AnyConnect will appear under Apps. Click Add To Chrome

Review the requested permissions, and Click Add app

Visit Cisco VPN on software.lbl.gov

Download the Cisco VPN AnyConnect - LBNL Profile Only.

Save it in your Downloads folder

Go to Launcher-> AnyConnect

Click on Settings tab-> Import Profile

Select LBNLprofilev24.xml and click Open

Click on Connections tab and there should be LBL-VPN-v2.4 under Connections

Click on Status Area at bottom right and VPN disconnected should be on the list

  1. Click on VPN disconnected to open the list of available VPN connections
  2. Select LBL-VPN-v2.4

Enter your LDAP name and password to connect



Card
labeliOS

How to install VPN on iPhone


Get the AnyConnect client software from the Apple Store:

https://apps.apple.com/us/app/cisco-anyconnect/id1135064690

Click Install:

Click Allow:

Click Add VPN Connection...

Add vpn1.lbl.gov as the server address:

Allow AnyConnect to Add VPN Configurations:

Click the vpn1.lbl.gov connection:

Click the On/Off radio button to the right of AnyConnect VPN:

Enter your LDAP(Berkeley Lab ID) username and password:

Accept the Banner:

Click OK on the verification that security policies were applied:

The VPN connection can now also be managed using the Settings app, under VPN


Card
labelAndroid

How to install VPN on Android

Download and Install the AnyConnect client software from the Google Play Store (or equivalent).

Launch the AnyConnect application by pressing Open.

Read and accept the End User Licence Agreement (IMPORTANT:READ CAREFULLY) by scrolling through and pressing OK

Press Add New VPN Connection.

In the server address field, type vpn1.lbl.gov then press OK

Return to main AnyConnect screen and select the newly created profile to connect.

Log in using your LDAP username and password then press Connect.

Please Respond to Banner by pressing Accept.

AnyConnect status will show as On and vpn1.lbl.gov will show under Connections. (Description name might show instead if you used the optional description name).



Card
labelCentos

How to install VPN on Centos



Download and open the Linux version of Cisco VPN on software.lbl.gov


Click the Extract button

An Extract window appears. Select where you want the extracted folder to go and click OK

Open Konsole (under Applications→ System) or another terminal emulator.

From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted in Step 9) and execute the installation script as root: # ./vpn_install.sh

Accept license agreement

After installation is done, type exit twice to close the terminal emulator

Go to Applications→ Internet→ Cisco AnyConnect Secure Mobility Client→ Cisco AnyConnect Secure Mobility Client to start the client

If the application does not start (the icon bounces for a bit and goes away), bring up a terminal emulator and install these two items:

yum install epel-release

yum install pangox-compat


Launch Cisco AnyConnect Secure Mobility Client again. Enter your LDAP name and password to connect







Card
labelUbuntu

How to install VPN on Ubuntu


Download and open the Linux version of Cisco VPN on software.lbl.gov               

Click the Extract button

An Extract window appears. Select where you want the extracted folder to go and click Extract

Open Terminal or another terminal emulator


From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted in Step 9) and execute the installation script as root: # ./vpn_install.sh

Accept license agreement

After installation is done, type exit twice to close the terminal emulator

Launch Cisco AnyConnect Secure Mobility Client

If the application does not start, bring up a terminal emulator and you may need to install one or both of the following packages:

apt-get install libpangox-1.0-0

apt-get install libpangoxft-1.0-0


Enter your LDAP name and password to connect

Troubleshooting

ProblemWhen using Ubuntu version 18.04 or 19.10, Cisco Anyconnect VPN disconnects, and you are unable to reconnect.
ExplanationThis issue is caused when DHCP attempts to renew the lease of the IP address attached to the device that you are using.  The renew process happens every 10 to 15 minutes for wireless devices and every 11 hours for wired devices.
Fix

Go to Settings and the scroll down to Privacy.  Once in the Privacy section, turn off Connectivity Checking.