AnyConnect 3.0 User Guide

Download as pdf or txt
Download as pdf or txt
You are on page 1of 8

User Guide for new AnyConnect* VPN Secure Mobility Client 3.

Provided by Intel IT

What has changed?


New version
Icon & Name
Cisco AnyConnect Secure Mobility Client

Previous version
Cisco AnyConnect VPN Client

How to launch AnyConnect?


Go to Start All Programs Cisco Cisco AnyConnect Secure Mobility Client Cisco AnyConnect Secure Mobility Client (as shown in the table under Cisco folder).

Cisco folder

Go to the system tray, left-click on Show hidden icons. Locate the new AnyConnect icon (as shown in the table under System tray icon).

Useful tips:
System tray icon

How make the AnyConnect icon appear in the system tray:


In the system tray click Customize, find the Cisco AnyConnect user interface and choose from the drop box: Show icon and notification.

Cant find the password dialog box?


If you have any documents open while youre launching AnyConnect, the password windows will remain hidden in the back, Cisco AnyConnect notification balloon will appear, clicking on it will pop up the password window.

Login screen

Try AnyConnect VPN Health Check tool


If AnyConnect VPN failed to connect, use the AnyConnect Health Check tool to troubleshoot. To activate the tool go to:

Inserting password

Start All Programs Cisco AnyConnect VPN Health Check

A helpful user guide is also located in the same Cisco folder. Select AnyConnect Health Check User Guide

For more information view next pages


* Intel and the Intel logo are registered trademarks of Intel Corporation. Other names and brands may be the property of others.

How to use AnyConnect* VPN 3.0


The AnyConnect VPN Secure Mobility Client* product consists of two building blocks: 1) Cisco AnyConnect VPN client 2) Certificate-based user authentication with Remote Access password The AnyConnect VPN client and certificate-based user authentication will work only from the public Internet (not from inside Intel campus or from Intel guest Internet access) and only after a valid IP is acquired by the LAN\WLAN network adapters.

Launch AnyConnect VPN


Double-click the Cisco AnyConnect Secure Mobility Client icon on your desktop, or select from Start All programs Cisco Cisco AnyConnect Secure Mobility Client.

How to connect
After launching, AnyConnect will try to connect to the same tunnel as the last successful connection. (After installation the default tunnel is Intel Network). IT recommends always using the default Intel Network tunnel because it load balances and connect you to the best tunnel location available from your location. When prompted for your remote access password, type it in the password field. Make sure your full Intel email address is listed in the Username field and click OK.

If you are using the Intel Network tunnel, you can see the location to which you are connected in the connection status window. To manually connect to a specific location: o Disconnect by clicking the Disconnect button. o Wait a couple of seconds for a proper tunnel closure. o Select the location you want to connect from in the drop-down box. o Click Connect.

The duration of an AnyConnect session is set to a few days. During that time your VPN connection will be maintained. When the session expires, you will need to reconnect and re-authenticate using your password. While connecting, AnyConnect* VPN will check for any updates. If new VPN client software or profiles are released, they will be installed automatically to keep your PC up to date.

How to disconnect
To disconnect, right-click on the AnyConnect icon on your system tray and select Disconnect. AnyConnect switches to auto-reconnect mode when an abrupt disconnect occurs. For example, the PC enters suspend mode while the VPN is connected. Auto-reconnect allows you to reconnect automatically to Intel once a public IP is identified. In this mode AnyConnect tries to resume a connection indefinitely. Once a public IP is identified, the VPN connection will be resumed.

Icon states

Natural

Connected

Attention

Error

Transitioning

Troubleshooting
AnyConnect VPN Health Check tool
The tool helps you troubleshoot various VPN-related issues. Use it in these situations: 1. You experience problems connecting with AnyConnect VPN. 2. You want to test your AnyConnect VPN password. 3. When you test an AnyConnect VPN tunnel. To activate the tool go to Start All Programs Cisco AnyConnect VPN Health Check

To view the User Guide for this tool go to: Start All Programs Cisco AnyConnect VPN Health Check User Guide

Error messages:

Connection attempt has failed (timeout) or "Connection attempt has failed: Host is unreachable"
Important: AnyConnect* VPN will not work from within an Intel campus (LAN or WLAN) or on the Guest Internet Access (GIA) network. Only use AnyConnect* VPN from a public Internet. Connections will fail, and youll receive the Connection attempt has failed (timeout) or "Connection attempt has failed: Host is unreachable" error messages, in the following situations: Failure to connect the internet from public Internet (home, hotel, cafe, etc.) Trying to connect from within an Intel campus Trying to connect from Intel guest network

Follow the steps below to resolve connectivity issues: Step 1 2 3 Task Activate the VPN Health Check Tool as described above. If the tool doesnt solve the issue, go to step 2. Validate that you are not connected from within Intel campus (including the Guest network) and that you have Internet connectivity. Do this by opening a web browser and trying to reach http://www.intel.com. While connected to the Internet, validate that you are able to resolve DNS names. 1. Click Start -> Run -> type cmd -> press Enter. 2. Type nslookup scsfm.intel.com -> press Enter. 3. Validate that you are getting the following resolution 192.55.54.19 If Step 3 fails, you may not have a valid Internet connection. If you have a valid Internet connection: Manually choose the closest Intel site to where you are located (e.g. - AMR Folsom CA) from the Connect List and dont use the Intel Network tunnel.

How to change your password


You can change your remote access password while you are at an Intel campus or connected remotely over VPN. The new password will be valid from your next connection. Step 1 2 Task Browse to https://vpnpass.intel.com. Login with username (email address) and old remote access password.

Create a new password and click Submit.

What happens if you forget your remote access password?


Remote access password reset requires reset of the password on the backend by ISD. You will need to contact the Service Desk (ISD) for assistance. While on Intel campus Step 1 Go to: https://reset.intel.com/resetphase2/default.aspx Task

Remotely - While away from an Intel campus Step Task Call TAC and indentify yourself by answering the BIO questions. 1 2 3 4 TAC resets the remote access password and provides you with a temporary password. Browse to https://vpnpass.intel.com. Log in with your username (email address) and the temporary password.

Create a new password and click Submit.

How to resolve remote access issues while away from an Intel campus
Certificate corrupted
Step 1 2 3 4 5 6 7 8 Task Activate the VPN Health Check tool. If the tool didnt solve the issue, proceed to step 2. Call TAC and indentify yourself by answering the BIO questions. TAC grants you remote access remediation permissions. Youll need to wait ~10min for full replication. Login to remediation tunnel with AnyConnect client. Browse to http://pki.intel.com. Download a certificate by selecting Request a certificate Intel Remote Access 3. TAC removes your remote access remediation permissions. Connect to Intel network tunnel.

VPN client corrupted


Step 1 Task Activate the AnyConnect VPN Health Check Tool: Once activated go to Advanced mode Repair Misc Repair AnyConnect. To view Health Check user guide go to: Start All Programs Cisco AnyConnect VPN Health Check User Guide.

If the tool didnt solve the issue, proceed to step 2. 2 3 Browse to http://www.intel.com/emergency/it/VPN.htm and download AnyConnect VPN client. Connect to the Intel Network tunnel.

IIEG-LM-Qaan-Dec9 2011

You might also like