VPN Connection to Sandbox fails using AnyConnect for Linux

[txo]

When I reserve the PxGrid 2.0 on ISE 3.0 sandbox I can connect properly using AnyConnect for Windows but I am trying to connect from connect from Linux and I get the following error:

Cisco AnyConnect Secure Mobility Client (version 4.9.06037) .

Copyright (c) 2004 - 2021 Cisco Systems, Inc.  All Rights Reserved.

  >> state: Disconnected

  >> state: Disconnected

  >> notice: Ready to connect.

  >> registered with local VPN subsystem.

VPN> connect devnetsandbox-usw1-reservation.cisco.com:20200

  >> contacting host (devnetsandbox-usw1-reservation.cisco.com:20200) for login information...

  >> notice: Contacting devnetsandbox-usw1-reservation.cisco.com:20200.

  >> Please enter your username and password.

Group: SSLClient

Username: [***********] T**********

Password:

  >> state: Connecting

  >> notice: Establishing VPN session...

The AnyConnect Downloader is analyzing this computer. Please wait...

Initializing the AnyConnect Downloader...

The AnyConnect Downloader is performing update checks...

  >> notice: The AnyConnect Downloader is performing update checks...

The AnyConnect Downloader updates have been completed.

Please wait while the VPN connection is established...

  >> notice: Checking for profile updates...

  >> notice: Checking for product updates...

  >> notice: Checking for customization updates...

  >> notice: Performing any required updates...

  >> notice: The AnyConnect Downloader updates have been completed.

  >> state: Connecting

  >> notice: Establishing VPN session...

  >> notice: Establishing VPN - Initiating connection...

  >> state: Disconnecting

  >> notice: Disconnect in progress, please wait...

  >> error: VPN establishment capability for a remote user is disabled.  A VPN connection will not be established.

  >> state: Disconnected

  >> notice: Ready to connect.

VPN> goodbye...

It seems that the VPN does not accept connections from Linux Clients. 

Please, could you enable linux connections?

[bigevilbeard · Accepted solution]

As far as i am aware, there is no restriction on VPN in the sandbox when connecting. Have you tried Open Connect for Linux? https://developer.cisco.com/docs/openconect-sandbox/

Hope this helps.

[txo]

Open Connect is working fine!

Thanks for your help

[bigevilbeard]

Awesome!

[AkashDodake68649]

I have reserve Cisco SD-WAN 19.2 lab and while trying to connect from Linux using AnyConnect, getting below error 

Cisco AnyConnect Secure Mobility Client (version 4.9.05042) .

Copyright (c) 2004 - 2020 Cisco Systems, Inc. All Rights Reserved.

>> state: Disconnected
>> state: Disconnected
>> notice: Ready to connect.
>> registered with local VPN subsystem.
>> contacting host (devnetsandbox-usw1-reservation.cisco.com:20374) for login information...
>> notice: Contacting devnetsandbox-usw1-reservation.cisco.com:20374.

>> Please enter your username and password.
Group: SSLClient

Username: ********
*******
Password: ********
>> state: Connecting
>> notice: Establishing VPN session...
The AnyConnect Downloader is analyzing this computer. Please wait...
Initializing the AnyConnect Downloader...
The AnyConnect Downloader is performing update checks...
>> notice: The AnyConnect Downloader is performing update checks...
>> notice: Checking for profile updates...
The AnyConnect Downloader updates have been completed.
Please wait while the VPN connection is established...
>> notice: Checking for product updates...
>> state: Connecting
>> notice: Checking for customization updates...
>> notice: Performing any required updates...
>> notice: The AnyConnect Downloader updates have been completed.
>> notice: Establishing VPN session...
>> notice: Establishing VPN - Initiating connection...
>> state: Disconnecting
>> notice: Disconnect in progress, please wait...
>> error: VPN establishment capability for a remote user is disabled. A VPN connection will not be established.
>> state: Disconnected
>> notice: Ready to connect.
VPN>

could you please help to resolve this,

cant use OpenConnect because of risk mentioned in below note,

Please Note: While this works well in most cases, we can't officially support the OpenConnect method at this time. Please use at your own risk.

Thanks,