Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-staff ,  itfaq-editors-lite ,  mpsg-mpsg-helpdesk ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:
Individual Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can EDIT the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can ADMINISTER the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 

Versions Compared

Old Version 90

changes.mady.by.user Tap L

Saved on

compared with

New Version Current

changes.mady.by.user Tap L

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Purpose of Knowledge Article:

  • Provide instruction on how to install Cisco VPN.

    Tip

    To

...

  • log in to VPN, you must use your LDAP credential. Not your AD credential.

Resolution

Excerpt
M1 Chip
Deck of Cards
startHiddenfalse
idVPN install
tabLocationleft
Card
labelWindows

How to install VPN on Windows

HTML
<iframe src="https://drive.google.com/file/d/1_S2Xmw7VuVz4JGqMEfD-mjZd8MEjo_ec/preview" width="640" height="480"></iframe>
1

Got to software.lbl.gov  and download the latest version of Cisco VPN on available for Windows version you are using under the Current Releases section


Image Modified

2

Launch the installer file you just downloaded and follow the on screen instruction to install Cisco VPN

Note: Be sure to answer Yes to the software agreement and answer Yes to allow the installer to make change to the computer

Image Modified

3

Start the application by going to Windows logo-> All apps-> Cisco-> Cisco AnyConnect Secure Mobility Client


Image Modified

4Enter your LDAP username and password to connect

Image Modified

Card
labelCatalina and Older

How to install VPN on Mac

HTML
<iframe src="https://drive.google.com/file/d/1YSSf0PO9nVkvftR89B5BaN0uUSA-H8P_/preview" width="640" height="480"></iframe>
1

Got to software.lbl.gov  and download the latest version of Cisco VPN on available for macOS version you are using under the Current Releases section

Image Modified

2

Launch the installer file you just downloaded and double-click on AnyConnect.pkg

Warning

WARNING: If you get a prompt from the Mac Gatekeeper that looks like this:

Image Modified

If you do, click ok and right click or control button + mouse click on AnyConnect.pkg. Select "Open With" and then "Installer (default)":

Image Modified

Click Open and continue with the instruction:

Image Modified

Image Modified

3

Follow the on-screen

instruction

instructions to install Cisco VPN. When prompted for

credential

credentials, enter your Mac login name and password and click Install Software

Note: Be sure to answer Yes to the software agreement

Image Modified

4Go to Launchpad or Application Folder and click on the Cisco logo to start the application

Image Modified

5Enter your LDAP name and password to connect

Image Modified

Card
labelBigSur
and newer macOS Apple silicon (M-series Chip)

How to install VPN on BigSur M1 Chip


HTML
<iframe src="https://drive.google.com/file/d/1Z4ucSV1RrEIIRRuheE6pg4uqHcXu9cPJ/preview" width="640" height="480"></iframe>

1

Login to https://software.lbl.gov with your Berkeley Lab Identity

Image Modified

2

Using the search box on the left column, search for VPN and click on the result Cisco VPN

Image Modified

3Under the Current Releases section, look for Cisco VPN for macOS and download it

Image Modified

4

Double click on the downloaded file and follow the onscreen instruction to install Cisco VPN

Warning

WARNING: If you get a prompt from the Mac Gatekeeper that looks similar to this:

Image Modified


  1. Click OK and right click or control button on keyboard + mouse click on AnyConnect.pkg. Select Open With and then Installer (default):
    Image Modified

  2. Click Open on the next popup and continue with the instruction:
    Image Modified

Image ModifiedImage Modified

5

Continue to follow the onscreen instruction. Be sure to Agree to the license agreement. Enter the computer password when prompt, and then click Install software


Image ModifiedImage Modified

6

You will see the Attention Required popup window, click Open Preferences and select Security & Privacy.

Click on the padlock icon on the bottom left corner and enter your computer password and then click Unlock to unlock it.


Image ModifiedImage Modified

7

Under the General tab, towards the bottom, you should see System software form application "Cisco AnyConnect Socket Filter" was blocked from loading and an Allow button to the right. Click Allow


Image Modified

8

Select Allow to next popup you see

You may see two popups, select Allow to them both





Image Modified

9Select allow on the notification

Image Modified

10

Close the window and then click Move to trash

Image Modified

11

You should now see Cisco VPN in your Application folder on your computer. Launch it and enter your LBL LDAP credential connect to the Lab's network

Image Modified

Card
labelBigSur and newer macOS Intel Chip

How to install VPN on BigSur Intel Chip


HTML
<iframe src="https://drive.google.com/file/d/14wqqi9M7kHD3EKqNrv4y5mTIorY77khc/preview" width="640" height="480"></iframe>

1

Login to https://software.lbl.gov with your Berkeley Lab Identity

Image Modified

2

Using the search box on the left column, search for VPN and click on the result Cisco VPN

Image Modified

3Under the Current Releases section, look for Cisco VPN for macOS and download it

Image Modified

4

Double click on the downloaded file and follow the onscreen instruction to install Cisco VPN

Warning

WARNING: If you get a prompt from the Mac Gatekeeper that looks similar to this:

Image Modified


  1. Click OK and right click or control button on keyboard + mouse click on AnyConnect.pkg. Select Open With and then Installer (default):
    Image Modified

  2. Click Open on the next popup and continue with the instruction:
    Image Modified

Image ModifiedImage Modified

5

Continue to follow the onscreen instruction. Be sure to Agree to the license agreement. Enter the computer password when prompt, and then click Install software


Image ModifiedImage Modified

6

You will see the Attention Required popup window, click Open Preferences and select Security & Privacy.

Click on the padlock icon on the bottom left corner and enter your computer password and then click Unlock to unlock it.


Image ModifiedImage Modified

7

Under the General tab, towards the bottom, you should see System software form application "Cisco AnyConnect Socket Filter" was blocked from loading and an Allow button to the right. Click Allow


Image Modified

8

Select Allow to next popup you see

You may see two popups, select Allow to them both





Image Modified

9Select allow on the notification

Image Modified

10

Close the window and then click Move to trash

Image Modified

11

You should now see Cisco VPN in your Application folder on your computer. Launch it and enter your LBL LDAP credential connect to the Lab's network

Image Modified



Card
labelChromeOS

How to install VPN on Chromebook

HTML
<iframe src="https://drive.google.com/file/d/1nPScg8xX1yZSsiAQIvfyVP3WFGOPRhmm/preview" width="640" height="480"></iframe>
1

Sign in to your Chromebook, and click the Launcher


The launcher looks like this in your taskbar:Image Modified

2

Click on Web Store (click All Appsif Web Store does not show)

Image Modified

3Type anyconnect in the search box

Image Modified

4Cisco AnyConnect will appear under Apps. Click Add To Chrome

Image Modified

5Review the requested permissions, and Click Add app

Image Modified

6

Visit Cisco VPN on software.lbl.gov

Download the Cisco VPN AnyConnect - LBNL Profile Only.

Save it in your Downloads folder

Image Modified

7Go to Launcher-> AnyConnect

Image Modified

8Click on Settings tab-> Import Profile

Image Modified

9Select LBNLprofilev24.xml and click Open

Image Modified

10Click on Connections tab and there should be LBL-VPN-v2.4 under Connections

Image Modified

11Click on Status Area at bottom right and VPN disconnected should be on the list

Image Modified

12
  1. Click on VPN disconnected to open the list of available VPN connections
  2. Select LBL-VPN-v2.4

Image Modified

13Enter your LDAP name and password to connect

Image Modified

Card
labeliOS

How to install VPN on iPhone

1

Get the AnyConnect client software from the Apple Store:

https://apps.apple.com/us/app/cisco-anyconnect/id1135064690

Image Modified

2Click Install:

Image Modified

3Click Allow:

Image Modified

4
  1. Click Connections
  2. Click Add VPN Connection...

Image Modified

5Add
vpn1
mfavpn.lbl.gov as the server address:

Image Modified

6Allow AnyConnect to Add VPN Configurations:

Image Modified

7Click the
vpn1
mfavpn.lbl.gov connection:

Image Modified

8Click the On/Off radio button to the right of AnyConnect VPN:

Image Modified

9Enter your LDAP(Berkeley Lab ID) username and password:

Image Modified

10Accept the Banner:

Image Modified

11Click OK on the verification that security policies were applied:

Image Modified

12The VPN connection can now also be managed using the Settings app, under VPN
Card
labelAndroid

How to install VPN on Android

1Download and Install the AnyConnect client software from the Google Play Store (or equivalent).

Image Modified

2Launch the AnyConnect application by pressing Open.

Image Modified

3Read and accept the End User Licence Agreement (IMPORTANT:READ CAREFULLY) by scrolling through and pressing OK

Image Modified

4Press Add New VPN Connection.

Image Modified

5In the server address field, type vpn1.lbl.gov then press OK

Image Modified

6Return to main AnyConnect screen and select the newly created profile to connect.

Image Modified

7

Log in using your LDAP username and password then press Connect.

Image Modified

8Please Respond to Banner by pressing Accept.

Image Modified

9AnyConnect status will show as On and vpn1.lbl.gov will show under Connections. (Description name might show instead if you used the optional description name).

Image Modified



Card
labelCentos

How to install VPN on Centos

1

Download and open the Linux version of Cisco VPN on software.lbl.gov


Image Modified

2

Click the Extract button

An Extract window appears. Select where you want the extracted folder to go and click OK

Image Modified

3

Open Konsole (under Applications→ System) or another terminal emulator.

From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted in Step 9) and execute the installation script as root: # ./vpn_install.sh

Accept license agreement

After installation is done, type exit twice to close the terminal emulator

Image Modified

4

Go to Applications→ Internet→ Cisco AnyConnect Secure Mobility Client→ Cisco AnyConnect Secure Mobility Client to start the client

If the application does not start (the icon bounces for a bit and goes away), bring up a terminal emulator and install these two items:

yum install epel-release

yum install pangox-compat


5Launch Cisco AnyConnect Secure Mobility Client again. Enter your LDAP name and password to connect

Image Modified

Card
labelUbuntu

How to install VPN on Ubuntu

1

Download and open the Linux version of Cisco VPN on software.lbl.gov               

Image Modified

2

Click the Extract button

An Extract window appears. Select where you want the extracted folder to go and click Extract

Open Terminal or another terminal emulator

 

Image Modified

3

From the terminal emulator, go inside the vpn directory under the anyconnect-4.x.xxxxx directory (where the folder was extracted

in Step 9

) and execute the installation script as root: # ./vpn_install.sh

Accept license agreement

After installation is done, type exit twice to close the terminal emulator

Image Modified

4

Launch Cisco AnyConnect Secure Mobility Client

Note

If the application does not start,

bring

bring up a terminal emulator and you may need to install

one or both of

the following packages:

apt-get install libpangox-1.0-0

apt-get install libpangoxft-1.0-0

sudo apt-get install -y libwebkit2gtk-4.0-37


If the application still does not start, install the following packages:

sudo add-apt-repository deb http://gb.archive.ubuntu.com/ubuntu jammy main

sudo apt update

sudo apt install libwebkit2gtk-4.0-dev



5Enter your LDAP name and password to connect

Image Modified

Troubleshooting

ProblemWhen using Ubuntu version 18.04 or 19.10, Cisco Anyconnect VPN disconnects, and you are unable to reconnect.
ExplanationThis issue is caused when DHCP attempts to renew the lease of the IP address attached to the device that you are using.  The renew process happens every 10 to 15 minutes for wireless devices and every 11 hours for wired devices.
Fix

Go to Settings and the scroll down to Privacy.  Once in the Privacy section, turn off Connectivity Checking.


Image Modified