cisco AnyConnect vpn connectivity not working.

abhjha2 — Thu, 14 Dec 2023 13:27:11 GMT

Am unable to connect to the Sandbox VPN with the provided network address and credential.
The vpn connectivity works well on the laptop but not on any VMs running windows, any restriction in place ?

Lab's private VPN connection information:

Lab Network Address: devnetsandbox-usw1-reservation.cisco.com:20150
Username: xxxxx
Password: xxxxx

Re: cisco AnyConnect vpn connectivity not working.

bigevilbeard — Thu, 14 Dec 2023 15:33:59 GMT

Hello @abhjha2 this will not work by default. You need to connect direct from your laptop or look a work around such as this https://community.cisco.com/t5/vpn/cisco-anyconnect-4-7-x-on-the-cloud-s-vm-with-rdp-connection/td-p/4411476

Hope this helps,

Re: cisco AnyConnect vpn connectivity not working.

abhjha2 — Sat, 16 Dec 2023 16:53:17 GMT

Thank you @bigevilbeard for the response.

I followed the instruction as per the below link and created a profile using the VPN editor however unable to connect to the vpn. sharing code of AnyConnectProfile.xml ), Any step i missed ?

https://community.cisco.com/t5/vpn/cisco-anyconnect-4-7-x-on-the-cloud-s-vm-with-rdp-connection/td-p/4411476

<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd">
<ClientInitialization>
<UseStartBeforeLogon UserControllable="true">true</UseStartBeforeLogon>
<AutomaticCertSelection UserControllable="false">true</AutomaticCertSelection>
<ShowPreConnectMessage>false</ShowPreConnectMessage>
<CertificateStore>All</CertificateStore>
<CertificateStoreMac>All</CertificateStoreMac>
<CertificateStoreLinux>All</CertificateStoreLinux>
<CertificateStoreOverride>false</CertificateStoreOverride>
<ProxySettings>Native</ProxySettings>
<AllowLocalProxyConnections>true</AllowLocalProxyConnections>
<AuthenticationTimeout>30</AuthenticationTimeout>
<AutoConnectOnStart UserControllable="true">false</AutoConnectOnStart>
<MinimizeOnConnect UserControllable="true">true</MinimizeOnConnect>
<LocalLanAccess UserControllable="true">false</LocalLanAccess>
<DisableCaptivePortalDetection UserControllable="true">false</DisableCaptivePortalDetection>
<ClearSmartcardPin UserControllable="false">true</ClearSmartcardPin>
<IPProtocolSupport>IPv4,IPv6</IPProtocolSupport>
<AutoReconnect UserControllable="false">true
<AutoReconnectBehavior UserControllable="false">ReconnectAfterResume</AutoReconnectBehavior>
</AutoReconnect>
<SuspendOnConnectedStandby>false</SuspendOnConnectedStandby>
<AutoUpdate UserControllable="false">true</AutoUpdate>
<RSASecurIDIntegration UserControllable="false">Automatic</RSASecurIDIntegration>
<WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>
<LinuxLogonEnforcement>SingleLocalLogon</LinuxLogonEnforcement>
<WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment>
<LinuxVPNEstablishment>LocalUsersOnly</LinuxVPNEstablishment>
<AutomaticVPNPolicy>false</AutomaticVPNPolicy>
<PPPExclusion UserControllable="false">Disable
<PPPExclusionServerIP UserControllable="false"></PPPExclusionServerIP>
</PPPExclusion>
<EnableScripting UserControllable="false">false</EnableScripting>
<EnableAutomaticServerSelection UserControllable="false">false
<AutoServerSelectionImprovement>20</AutoServerSelectionImprovement>
<AutoServerSelectionSuspendTime>4</AutoServerSelectionSuspendTime>
</EnableAutomaticServerSelection>
<RetainVpnOnLogoff>false
</RetainVpnOnLogoff>
<CaptivePortalRemediationBrowserFailover>false</CaptivePortalRemediationBrowserFailover>
<AllowManualHostInput>true</AllowManualHostInput>
</ClientInitialization>
</AnyConnectProfile>

Re: cisco AnyConnect vpn connectivity not working.

bigevilbeard — Sat, 16 Dec 2023 17:42:37 GMT

You can try and change the "WindowsVPNEstablishment" setting to "AllUsers".

If you want to allow both local and remote users to connect to the VPN from Linux, you can change the "LinuxVPNEstablishment" setting to "AllUsers".

This might work, if not I am not sure this will work.

Hope this helps.

topic Re: cisco AnyConnect vpn connectivity not working. in DevNet Sandbox

cisco AnyConnect vpn connectivity not working.

Re: cisco AnyConnect vpn connectivity not working.

Re: cisco AnyConnect vpn connectivity not working.

Re: cisco AnyConnect vpn connectivity not working.