Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-staff ,  itfaq-editors-lite ,  mpsg-mpsg-helpdesk ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:
Individual Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can EDIT the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can ADMINISTER the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 

Versions Compared

Old Version 67

changes.mady.by.user Kahefe Haseen Fatima

Saved on

compared with

New Version Current

changes.mady.by.user Tap L

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Purpose of Knowledge Article:

  • Provide instruction on how to install Cisco VPN.

    Tip

    To log in to VPN, you must use your LDAP credential. Not your AD credential.

Resolution

You can test VPN connectivity by going to fms.lbl.gov. If you see a log-in, you have successfully connected!MacDouble
Excerpt
Tip
Deck of Cards
startHiddenfalse
idVPN install
tabLocationleft
Cisco VPN on
Card
labelWindows

How to install VPN on Windows

HTML
<iframe src="https://drive.google.com/file/d/1_S2Xmw7VuVz4JGqMEfD-mjZd8MEjo_ec/preview" width="640" height="480"></iframe>
Download 
1
Got to 
software.lbl.gov  and 
 open the Windows version of AnyConnect.
Image Removed
  1. Go through the prompts and click Install at the last window
  2. Click Yes at the User Account Control window
  3. Click Finish
download the latest version of Cisco VPN on available for Windows version you are using under the Current Releases section

Image Added
2
Launch the installer file you just downloaded and follow the on screen instruction to install Cisco VPN
Note: Be sure to answer Yes to the software agreement and answer Yes to allow the installer to make change to the computer
Image Added
3
Image Removed
Start the application by going to Windows logo-> All apps-> Cisco-> Cisco AnyConnect Secure Mobility Client

Image Added
4Enter your LDAP 
 name 
username and password to connect
Image Modified
 Card
label
Cisco VPN on 
Catalina and Older
How to install VPN on Mac
 HTML
<iframe src="https://drive.google.com/file/d/1YSSf0PO9nVkvftR89B5BaN0uUSA-H8P_/preview" width="640" height="480"></iframe>
Download 
1
Got to 
software.lbl.gov
 and open the Mac version of AnyConnect.
  and download the latest version of Cisco VPN on available for macOS version you are using under the Current Releases section
Image Added
2
Launch the installer file you just downloaded and double
Image Removed
-click on AnyConnect.pkg
Image Removed
Go through the prompts and click Install at the last window
 Warning
WARNING: If you get a prompt from the Mac Gatekeeper that looks like this:
Image Added
If you do, click ok and right click or control button + mouse click on AnyConnect.pkg. Select "Open With" and then "Installer (default)":
Image Added
Click Open and continue with the instruction:
Image Added
Image Added
3
Follow the on-screen instructions to install Cisco VPN. When prompted for credentials, enter your Mac login name and password and click Install Software
Note: Be sure to answer Yes to the software agreement
Image Modified
4Go to Launchpad or Application Folder and click on the Cisco logo to start the application
Image Modified
5Enter your LDAP name and password to connect
Image Modified
 Card
labelBigSur 
 M1 Chip
and newer macOS Apple silicon (M-series Chip)
How to install VPN on BigSur M1 Chip

 HTML
<iframe src="https://drive.google.com/file/d/
1vQRYD1i33uMm6_BNCyOKlc3ABRbkMZtg
1Z4ucSV1RrEIIRRuheE6pg4uqHcXu9cPJ/preview" width="640" height="480"></iframe>
1
Open a new browser and type 
Login to https://software.lbl.
gov
  • Login using your credentials
  • Enter the MFA token using google authenticator or a YubiKey
    • Image RemovedImage RemovedImage Removed
    2
    • Search for VPN
    • Click on Cisco VPN
    • Scroll down to Evaluation releases
    • Download Cisco VPN 4.9.05042
    • Click save
    Image RemovedImage RemovedImage Removed
    3
    • Double click on the downloaded file to begin installing
    • Right click on the package icon to click open
    • And click open on the pop-up window
    Image RemovedImage RemovedImage Removed
    4
    • Follow the instructions by clicking continue, agree to the license agreement and then install
    • Enter the user admin password, and then click install software
    • Please wait for the installation to complete
    Image RemovedImage RemovedImage RemovedImage Removed
    gov with your Berkeley Lab Identity
    Image Added
    2
    Using the search box on the left column, search for VPN and click on the result Cisco VPN
    Image Added
    3Under the Current Releases section, look for Cisco VPN for macOS and download it
    Image Added
    4
    Double click on the downloaded file and follow the onscreen instruction to install Cisco VPN
     Warning
    WARNING: If you get a prompt from the Mac Gatekeeper that looks similar to this:
    Image Added

    1. Click OK and right click or control button on keyboard + mouse click on AnyConnect.pkg. Select Open With and then Installer (default):
      Image Added

    2. Click Open on the next popup and continue with the instruction:
      Image Added
    Image AddedImage Added
    5
    Continue to follow the onscreen instruction. Be sure to Agree to the license agreement. Enter the computer password when prompt, and then click Install software

    Image AddedImage Added
    6
    You will see the Attention Required popup window, click Open Preferences and select Security & Privacy. 
    Click on the padlock icon on the bottom left corner and enter your computer password and then click Unlock to unlock it.

    Image AddedImage Added
    7
    Under the General tab, towards the bottom, you should see System software form application "Cisco AnyConnect Socket Filter" was blocked from loading and an Allow button to the right. Click Allow

    Image Added
    8
    Select Allow to next popup you see
    You may see two popups, select Allow to them both




    Image Added
    9Select allow on the notification
    Image Added
    10
    Close the window and then click Move to trash
    Image Added
    11
    You should now see Cisco VPN in your Application folder on your computer. Launch it and enter your LBL LDAP credential connect to the Lab's network
    Image Added
     Card
    labelBigSur and newer macOS Intel Chip
    How to install VPN on BigSur Intel Chip

     HTML
    <iframe src="https://drive.google.com/file/d/14wqqi9M7kHD3EKqNrv4y5mTIorY77khc/preview" width="640" height="480"></iframe>
    1
    Login to https://software.lbl.gov with your Berkeley Lab Identity
    Image Added
    2
    Using the search box on the left column, search for VPN and click on the result Cisco VPN
    Image Added
    3Under the Current Releases section, look for Cisco VPN for macOS and download it
    Image Added
    4
    Double click on the downloaded file and follow the onscreen instruction to install Cisco VPN
     Warning
    WARNING: If you get a prompt from the Mac Gatekeeper that looks similar to this:
    Image Added

    1. Click OK and right click or control button on keyboard + mouse click on AnyConnect.pkg. Select Open With and then Installer (default):
      Image Added

    2. Click Open on the next popup and continue with the instruction:
      Image Added
    Image AddedImage Added
    5
    Continue to follow the onscreen instruction. Be sure to Agree to the license agreement. Enter the computer password when prompt, and then click Install software

    Image AddedImage Added
    6
    You will see the Attention Required popup window, click Open Preferences and select Security & Privacy. 
    Click on the padlock icon on the bottom left corner and enter your computer password and then click Unlock to unlock it.

    Image AddedImage Added
    7
    Under the General tab, towards the bottom, you should see System software form application "Cisco AnyConnect Socket Filter" was blocked from loading and an Allow button to the right. Click Allow

    Image Added
    8
    Select Allow to next popup you see
    You may see two popups, select Allow to them both




    Image Added
    9Select allow on the notification
    Image Added
    10
    5
    Close the window and then click 
     move 
     Move to trash
    Image Modified
    6
    11
    You should now 
     find Cisco any connect 
    see Cisco VPN in your Application folder on your computer
    Enter 
    . Launch it and enter your LBL 
     username and password to 
    LDAP credential connect to the Lab's network
    Image Modified


     Card
    labelChromeOS
    How to install VPN on Chromebook
     HTML
    <iframe src="https://drive.google.com/file/d/1nPScg8xX1yZSsiAQIvfyVP3WFGOPRhmm/preview" width="640" height="480"></iframe>
    1
    Sign in to your Chromebook, and click the Launcher

    The launcher looks like this in your taskbar:Image Modified
    2
    Click on Web Store (click All Appsif Web Store does not show)
    Image Modified
    3Type anyconnect in the search box
    Image Modified
    4Cisco AnyConnect will appear under Apps. Click Add To Chrome
    Image Modified
    5Review the requested permissions, and Click Add app
    Image Modified
    6
    Visit Cisco VPN on software.lbl.gov
    Download the Cisco VPN AnyConnect - LBNL Profile Only.
    Save it in your Downloads folder
    Image Modified
    7Go to Launcher-> AnyConnect
    Image Modified
    8Click on Settings tab-> Import Profile
    Image Modified
    9Select LBNLprofilev24.xml and click Open
    Image Modified
    10Click on Connections tab and there should be LBL-VPN-v2.4 under Connections
    Image Modified
    11Click on Status Area at bottom right and VPN disconnected should be on the list
    Image Modified
    12
    1. Click on VPN disconnected to open the list of available VPN connections
    2. Select LBL-VPN-v2.4
    Image Modified
    13Enter your LDAP name and password to connect
    Image Modified
     Card
    labeliOS
    How to install VPN on iPhone
    1
    Get the AnyConnect client software from the Apple Store:
    https://apps.apple.com/us/app/cisco-anyconnect/id1135064690
    Image Modified
    2Click Install:
    Image Modified
    3Click Allow:
    Image Modified
    4
    1. Click Connections
    2. Click Add VPN Connection...
    Image Modified
    5Add 
    vpn1
     mfavpn.lbl.gov as the server address:
    Image Modified
    6Allow AnyConnect to Add VPN Configurations:
    Image Modified
    7Click the 
    vpn1
     mfavpn.lbl.gov connection:
    Image Modified
    8Click the On/Off radio button to the right of AnyConnect VPN:
    Image Modified
    9Enter your LDAP(Berkeley Lab ID) username and password:
    Image Modified
    10Accept the Banner:
    Image Modified
    11Click OK on the verification that security policies were applied:
    Image Modified
    12The VPN connection can now also be managed using the Settings app, under VPN
     Card
    labelAndroid
    How to install VPN on Android
    1Download and Install the AnyConnect client software from the Google Play Store (or equivalent). 
    Image Modified
    2Launch the AnyConnect application by pressing Open.
    Image Modified
    3Read and accept the End User Licence Agreement (IMPORTANT:READ CAREFULLY) by scrolling through and pressing OK
    Image Modified
    4Press Add New VPN Connection.
    Image Modified
    5In the server address field, type vpn1.lbl.gov then press OK
    Image Modified
    6Return to main AnyConnect screen and select the newly created profile to connect.
    Image Modified
    7
    Log in using your LDAP username and password then press Connect.
    Image Modified
    8Please Respond to Banner by pressing Accept.
    Image Modified
    9AnyConnect status will show as On and vpn1.lbl.gov will show under Connections. (Description name might show instead if you used the optional description name).
    Image Modified


     Card
    labelCentos
    How to install VPN on Centos
    1
    Download and open the Linux version of Cisco VPN on software.lbl.gov

    Image Modified
    2
    Click the Extract button
    An Extract window appears. Select where you want the extracted folder to go and click OK
    Image Modified
    3
    Open Konsole (under Applications→ System) or another terminal emulator.
    From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted in Step 9) and execute the installation script as root: # ./vpn_install.sh
    Accept license agreement
    After installation is done, type exit twice to close the terminal emulator
    Image Modified
    4
    Go to Applications→ Internet→ Cisco AnyConnect Secure Mobility Client→ Cisco AnyConnect Secure Mobility Client to start the client
    If the application does not start (the icon bounces for a bit and goes away), bring up a terminal emulator and install these two items:
    yum install epel-release
    yum install pangox-compat

    5Launch Cisco AnyConnect Secure Mobility Client again. Enter your LDAP name and password to connect
    Image Modified
     Card
    labelUbuntu
    How to install VPN on Ubuntu
    1
    Download and open the Linux version of Cisco VPN on software.lbl.gov               
    Image Modified
    2
    Click the Extract button
    An Extract window appears. Select where you want the extracted folder to go and click Extract
    Open Terminal or another terminal emulator
     
    Image Modified
    3
    From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted
     in Step 9
    ) and execute the installation script as root: # ./vpn_install.sh
    Accept license agreement
    After installation is done, type exit twice to close the terminal emulator
    Image Modified
    4
    Launch Cisco AnyConnect Secure Mobility Client
     Note
    If the application does not start, 
     bring 
    bring up a terminal emulator and you may need to install 
     one or both of 
     the following packages:
     apt-get install libpangox-1.0-0
     apt-get install libpangoxft-1.0-0
    sudo apt-get install -y libwebkit2gtk-4.0-37

    If the application still does not start, install the following packages:
    sudo add-apt-repository deb http://gb.archive.ubuntu.com/ubuntu jammy main
    sudo apt update
    sudo apt install libwebkit2gtk-4.0-dev


    5Enter your LDAP name and password to connect
    Image Modified
    Troubleshooting
    ProblemWhen using Ubuntu version 18.04 or 19.10, Cisco Anyconnect VPN disconnects, and you are unable to reconnect.
    ExplanationThis issue is caused when DHCP attempts to renew the lease of the IP address attached to the device that you are using.  The renew process happens every 10 to 15 minutes for wireless devices and every 11 hours for wired devices.
    Fix
    Go to Settings and the scroll down to Privacy.  Once in the Privacy section, turn off Connectivity Checking.

    Image Modified