Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-staff ,  itfaq-editors-lite ,  mpsg-mpsg-helpdesk ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:
Individual Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can EDIT the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can ADMINISTER the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 

Versions Compared

Old Version 29

changes.mady.by.user David Huynh

Saved on

compared with

New Version Current

changes.mady.by.user Tap L

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Purpose of Knowledge Article:

  • Provide instruction on how to install Cisco VPN.

    Tip

    To log in to VPN, you must use your LDAP credential. Not your AD credential.

Resolution

Excerpt
MacCentos

How to install VPN on Android

 

Most modern Android phones support VPN through the Cisco AnyConnect client.

To connect to LBL-VPN using AnyConnect

1. Download and install the AnyConnect client software from the Google Play Store (or equivalent)
2. Launch the AnyConnect application.
3. Select 'add new VPN connection.'
4. In the server address field, type vpn1.lbl.gov.
5. Return to main AnyConnect screen and select the newly created profile to connect.
6. A new profile (LBNL-VPN-v2.4) will be downloaded to your device upon establishing the VPN connection for the first time. You can use either of these profiles for subsequent connections to LBL-VPN.
Deck of Cards
startHiddenfalse
idVPN install
tabLocationleft
Open a web browser and go to https://
Card
labelWindows

How to install VPN on Windows

 

 (This is based on Windows 10)

HTML
<iframe src="https://drive.google.com/file/d/1_S2Xmw7VuVz4JGqMEfD-mjZd8MEjo_ec/preview" width="640" height="480"></iframe>
1

Got to

software.lbl.gov

  • Login with your LDAP name and password

  • Click on IT Supported Downloads on the left

  • Scroll down and click on Cisco VPN
                         Image Removed

  • Under Cisco VPN AnyConnect 4.x.xxxxx, click on Download
                            Image Removed

                 

  • Save the file

  • Open the downloaded file, LBL-Anyconnect-VPN-win-4.x.xxxxx-pre-deploy-k9.exe

  • Go through the prompts and click Install at the last window
  • Click Yes at the User Account Control window

    •   and download the latest version of Cisco VPN on available for Windows version you are using under the Current Releases section


    Image Added

    2

    Launch the installer file you just downloaded and follow the on screen instruction to install Cisco VPN

    Note: Be sure to answer Yes to the software agreement and answer Yes to allow the installer to make change to the computer

    Image Added

    3
    Click Finish
                               Image Removed

    Start the application by going to Windows logo-> All apps-> Cisco-> Cisco AnyConnect Secure Mobility Client


    Image Added

    4Enter your LDAP
    name
    username and password to connect
                

    Image Modified

    Card
    label
    		Open a web browser and go to https://
    Catalina and Older

    How to install VPN on Mac

     

     (This is based on Sierra)

    HTML
    <iframe src="https://drive.google.com/file/d/1YSSf0PO9nVkvftR89B5BaN0uUSA-H8P_/preview" width="640" height="480"></iframe>
    1

    Got to

    software.lbl.gov

  • Login with your LDAP name and password

  • Click on IT Supported Downloads on the left

  • Scroll down and click on Cisco VPN
    Image Removed

  • Under Cisco VPN AnyConnect 4.x.xxxxx, click on Download

    Image Removed

  • Click on the downloaded file, anyconnect-macosx-i386-4.x.xxxxx-k9-LBL.dmg

  • Double-click on AnyConnect.pkg

    Image Removed

  • Go through the prompts and click Install at the last window

    •   and download the latest version of Cisco VPN on available for macOS version you are using under the Current Releases section

    Image Added

    2

    Launch the installer file you just downloaded and double-click on AnyConnect.pkg

    Warning

    WARNING: If you get a prompt from the Mac Gatekeeper that looks like this:

    Image Added

    If you do, click ok and right click or control button + mouse click on AnyConnect.pkg. Select "Open With" and then "Installer (default)":

    Image Added

    Click Open and continue with the instruction:

    Image Added

    Image Added

    3

    Follow the on-screen instructions to install Cisco VPN. When prompted for credentials, enter

    Enter

    your Mac login name and password and click Install Software

    Close the window

    Note: Be sure to answer Yes to the software agreement

    Image Modified

    4Go to Launchpad or Application Folder and click on the Cisco logo to start the application

    Image Modified

    5Enter your LDAP name and password to connect

    Image Modified

    Card
    label
    BigSur and newer macOS Apple silicon (M-series Chip)

    How to install VPN on

    Centos

     

     (This is based on Centos 7)

    BigSur M1 Chip


    HTML
    <iframe src="https://drive.google.com/file/d/1Z4ucSV1RrEIIRRuheE6pg4uqHcXu9cPJ/preview" width="640" height="480"></iframe>

    1

    Login

    Open a web browser and go

    to https://software.lbl.

    gov

  • Login with your LDAP name and password

  • Click on IT Supported Downloads on the left

  • Scroll down and click on Cisco VPN
                         Image Removed

  • Under Cisco VPN AnyConnect 4.x.xxxxx for Linux 64-bit, click on Download
                            

                  Image Removed

  • Save the file

  • Click on the downloaded file, anyconnect-predeploy-linux-64-4.x.xxxxx-k9-LBL.tar.gz

  • Click the Extract button
                                     Image Removed

    • gov with your Berkeley Lab Identity

    Image Added

    2

    Using the search box on the left column, search for VPN and click on the result Cisco VPN

    Image Added

    3Under the Current Releases section, look for Cisco VPN for macOS and download it

    Image Added

    4

    Double click on the downloaded file and follow the onscreen instruction to install Cisco VPN

    Warning

    WARNING: If you get a prompt from the Mac Gatekeeper that looks similar to this:

    Image Added


    1. Click OK and right click or control button on keyboard + mouse click on AnyConnect.pkg. Select Open With and then Installer (default):
      Image Added

    2. Click Open on the next popup and continue with the instruction:
      Image Added

    Image AddedImage Added

    5

    Continue to follow the onscreen instruction. Be sure to Agree to the license agreement. Enter the computer password when prompt, and then click Install software


    Image AddedImage Added

    6

    You will see the Attention Required popup window, click Open Preferences and select Security & Privacy.

    Click on the padlock icon on the bottom left corner and enter your computer password and then click Unlock to unlock it.


    Image AddedImage Added

    7

    Under the General tab, towards the bottom, you should see System software form application "Cisco AnyConnect Socket Filter" was blocked from loading and an Allow button to the right. Click Allow


    Image Added

    8

    Select Allow to next popup you see

    You may see two popups, select Allow to them both





    Image Added

    9Select allow on the notification

    Image Added

    10

    Close the window and then click Move to trash

    Image Added

    11

    You should now see Cisco VPN in your Application folder on your computer. Launch it and enter your LBL LDAP credential connect to the Lab's network

    Image Added

    Card
    labelBigSur and newer macOS Intel Chip

    How to install VPN on BigSur Intel Chip


    HTML
    <iframe src="https://drive.google.com/file/d/14wqqi9M7kHD3EKqNrv4y5mTIorY77khc/preview" width="640" height="480"></iframe>

    1

    Login to https://software.lbl.gov with your Berkeley Lab Identity

    Image Added

    2

    Using the search box on the left column, search for VPN and click on the result Cisco VPN

    Image Added

    3Under the Current Releases section, look for Cisco VPN for macOS and download it

    Image Added

    4

    Double click on the downloaded file and follow the onscreen instruction to install Cisco VPN

    Warning

    WARNING: If you get a prompt from the Mac Gatekeeper that looks similar to this:

    Image Added


    1. Click OK and right click or control button on keyboard + mouse click on AnyConnect.pkg. Select Open With and then Installer (default):
      Image Added

    2. Click Open on the next popup and continue with the instruction:
      Image Added

    Image AddedImage Added

    5

    Continue to follow the onscreen instruction. Be sure to Agree to the license agreement. Enter the computer password when prompt, and then click Install software


    Image AddedImage Added

    6

    You will see the Attention Required popup window, click Open Preferences and select Security & Privacy.

    Click on the padlock icon on the bottom left corner and enter your computer password and then click Unlock to unlock it.


    Image AddedImage Added

    7

    Under the General tab, towards the bottom, you should see System software form application "Cisco AnyConnect Socket Filter" was blocked from loading and an Allow button to the right. Click Allow


    Image Added

    8

    Select Allow to next popup you see

    You may see two popups, select Allow to them both





    Image Added

    9Select allow on the notification

    Image Added

    10

    Close the window and then click Move to trash

    Image Added

    11

    You should now see Cisco VPN in your Application folder on your computer. Launch it and enter your LBL LDAP credential connect to the Lab's network

    Image Added



    Card
    labelChromeOS

    How to install VPN on Chromebook

    HTML
    <iframe src="https://drive.google.com/file/d/1nPScg8xX1yZSsiAQIvfyVP3WFGOPRhmm/preview" width="640" height="480"></iframe>
    1

    Sign in to your Chromebook, and click the Launcher


    The launcher looks like this in your taskbar:Image Added

    2

    Click on Web Store (click All Appsif Web Store does not show)

    Image Added

    3Type anyconnect in the search box

    Image Added

    4Cisco AnyConnect will appear under Apps. Click Add To Chrome

    Image Added

    5Review the requested permissions, and Click Add app

    Image Added

    6

    Visit Cisco VPN on software.lbl.gov

    Download the Cisco VPN AnyConnect - LBNL Profile Only.

    Save it in your Downloads folder

    Image Added

    7Go to Launcher-> AnyConnect

    Image Added

    8Click on Settings tab-> Import Profile

    Image Added

    9Select LBNLprofilev24.xml and click Open

    Image Added

    10Click on Connections tab and there should be LBL-VPN-v2.4 under Connections

    Image Added

    11Click on Status Area at bottom right and VPN disconnected should be on the list

    Image Added

    12
    1. Click on VPN disconnected to open the list of available VPN connections
    2. Select LBL-VPN-v2.4

    Image Added

    13Enter your LDAP name and password to connect

    Image Added

    Card
    labeliOS

    How to install VPN on iPhone

    1

    Get the AnyConnect client software from the Apple Store:

    https://apps.apple.com/us/app/cisco-anyconnect/id1135064690

    Image Added

    2Click Install:

    Image Added

    3Click Allow:

    Image Added

    4
    1. Click Connections
    2. Click Add VPN Connection...

    Image Added

    5Add mfavpn.lbl.gov as the server address:

    Image Added

    6Allow AnyConnect to Add VPN Configurations:

    Image Added

    7Click the mfavpn.lbl.gov connection:

    Image Added

    8Click the On/Off radio button to the right of AnyConnect VPN:

    Image Added

    9Enter your LDAP(Berkeley Lab ID) username and password:

    Image Added

    10Accept the Banner:

    Image Added

    11Click OK on the verification that security policies were applied:

    Image Added

    12The VPN connection can now also be managed using the Settings app, under VPN
    Card
    labelAndroid

    How to install VPN on Android

    1Download and Install the AnyConnect client software from the Google Play Store (or equivalent).

    Image Added

    2Launch the AnyConnect application by pressing Open.

    Image Added

    3Read and accept the End User Licence Agreement (IMPORTANT:READ CAREFULLY) by scrolling through and pressing OK

    Image Added

    4Press Add New VPN Connection.

    Image Added

    5In the server address field, type vpn1.lbl.gov then press OK

    Image Added

    6Return to main AnyConnect screen and select the newly created profile to connect.

    Image Added

    7

    Log in using your LDAP username and password then press Connect.

    Image Added

    8Please Respond to Banner by pressing Accept.

    Image Added

    9AnyConnect status will show as On and vpn1.lbl.gov will show under Connections. (Description name might show instead if you used the optional description name).

    Image Added



    Card
    labelCentos

    How to install VPN on Centos

    1

    Download and open the Linux version of Cisco VPN on software.lbl.gov


    Image Added

    2

    Click the Extract button

    An Extract window appears. Select where you want the extracted folder to go and click OK

    Close the window in Step 8

    Image Added

    3

    Open Konsole (under Applications→ System) or another terminal emulator.

    From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted in Step 9) and execute the installation script as root: # ./vpn_install.sh

                                               Image Removed

    Accept license agreement

    After installation is done, type exit twice to close the terminal emulator

    Image Added

    4

    Go to Applications→ Internet→ Cisco AnyConnect Secure Mobility Client→ Cisco AnyConnect Secure Mobility Client to start the client

    If the application does not start (the icon bounces for a bit and goes away), bring up a terminal emulator and install these two items:

               

    yum install epel-release

    yum install pangox-compat


    5Launch Cisco AnyConnect Secure Mobility Client again. Enter your LDAP name and password to connect
                                    

    Image Modified

     

    Card
    labelUbuntu

    How to install VPN on Ubuntu

     

    (This is based on Ubuntu 16)

  • Open a web browser and go to https://software.lbl.gov

  • Login with your LDAP name and password

  • Click on IT Supported Downloads on the left

  • Scroll down and click on Cisco VPN
                         Image Removed

  • Under Cisco VPN AnyConnect 4.x.xxxxx for Linux 64-bit, click on Download
                            

                  Image Removed

  • Save the file

    • 1

    Download and open the Linux version of Cisco VPN on software.lbl.gov               

    Image Added

    2
    Click on the downloaded file, anyconnect-predeploy-linux-64-4.x.xxxxx-k9-LBL.tar.gz

    Click the Extract button


                                     Image Removed

    An Extract window appears. Select where you want the extracted folder to go and click Extract

  • Click Close and close the window in Step 8

    • Open Terminal or another terminal emulator

     

    Image Added

    3

    From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted

    in Step 9

    ) and execute the installation script as root: # ./vpn_install.sh


                                               Image Removed

    Accept license agreement

    After installation is done, type exit twice to close the terminal emulator

    Image Added

    4

    Launch Cisco AnyConnect Secure Mobility Client

    Note

    If the application does not start,

    bring

    bring up a terminal emulator and you may need to install

    one or both of

    the following packages:

    apt-get install libpangox-1.0-0

    apt-get install

    l

    libpangoxft-1.0-0

  • Enter your LDAP name and password to connect
                                     Image Removed

    • Card
    labelChromebook

    sudo apt-get install -y libwebkit2gtk-4.0-37


    If the application still does not start, install the following packages:

    sudo add-apt-repository deb http://gb.archive.ubuntu.com/ubuntu jammy main

    sudo apt update

    sudo apt install libwebkit2gtk-4.0-dev



    5

    How to install VPN on Chromebook

     

    (This is based on Chrome OS version 57)

     

    (Install app)

  • Sign in to your Chromebook

  • Click the Launcher  Image Removed

    • Click on Web Store (click All Appsif Web Store does not show)

                            Image Removed

  • Type anyconnect in the search box
                Image Removed

  • Cisco AnyConnect will appear under Apps. Click Add To Chrome
    Image Removed
  • Click Add app
                Image Removed
  • The app is installed
                   Image Removed

    •  

    (Import profile)

  • Open a web browser and go to https://software.lbl.gov

  • Login with your LDAP name and password

  • Click on IT Supported Downloads on the left

  • Scroll down and click on Cisco VPN
                         Image Removed

  • Under Cisco VPN AnyConnect - LBNL Profile Only, click on Download
       Image Removed
  • Go to Launcher-> AnyConnect
                              Image Removed
  • Click on Settings tab-> Import Profile
                Image Removed
  • Select LBNLprofilev24.xml and click Open
           Image Removed
  • Click on Connections tab and there should be LBL-VPN-v2.4 under Connections
               Image Removed
  • Close this window
  • Click on Status Area at bottom right and VPN disconnected should be on the list
                             Image Removed
    • Click on VPN disconnected then LBL-VPN-v2.4
                             Image Removed
    Enter your LDAP name and password to connect
                  Image Removed

    Image Added

     

    Troubleshooting

    Card
    labelAndroid
    ProblemWhen using Ubuntu version 18.04 or 19.10, Cisco Anyconnect VPN disconnects, and you are unable to reconnect.
    ExplanationThis issue is caused when DHCP attempts to renew the lease of the IP address attached to the device that you are using.  The renew process happens every 10 to 15 minutes for wireless devices and every 11 hours for wired devices.
    Fix

    Go to Settings and the scroll down to Privacy.  Once in the Privacy section, turn off Connectivity Checking.


    Image Added