AnyConnect 3.0 User Guide
AnyConnect 3.0 User Guide
AnyConnect 3.0 User Guide
Provided by Intel IT
Previous version
Cisco AnyConnect VPN Client
Cisco folder
Go to the system tray, left-click on Show hidden icons. Locate the new AnyConnect icon (as shown in the table under System tray icon).
Useful tips:
System tray icon
Login screen
Inserting password
A helpful user guide is also located in the same Cisco folder. Select AnyConnect Health Check User Guide
How to connect
After launching, AnyConnect will try to connect to the same tunnel as the last successful connection. (After installation the default tunnel is Intel Network). IT recommends always using the default Intel Network tunnel because it load balances and connect you to the best tunnel location available from your location. When prompted for your remote access password, type it in the password field. Make sure your full Intel email address is listed in the Username field and click OK.
If you are using the Intel Network tunnel, you can see the location to which you are connected in the connection status window. To manually connect to a specific location: o Disconnect by clicking the Disconnect button. o Wait a couple of seconds for a proper tunnel closure. o Select the location you want to connect from in the drop-down box. o Click Connect.
The duration of an AnyConnect session is set to a few days. During that time your VPN connection will be maintained. When the session expires, you will need to reconnect and re-authenticate using your password. While connecting, AnyConnect* VPN will check for any updates. If new VPN client software or profiles are released, they will be installed automatically to keep your PC up to date.
How to disconnect
To disconnect, right-click on the AnyConnect icon on your system tray and select Disconnect. AnyConnect switches to auto-reconnect mode when an abrupt disconnect occurs. For example, the PC enters suspend mode while the VPN is connected. Auto-reconnect allows you to reconnect automatically to Intel once a public IP is identified. In this mode AnyConnect tries to resume a connection indefinitely. Once a public IP is identified, the VPN connection will be resumed.
Icon states
Natural
Connected
Attention
Error
Transitioning
Troubleshooting
AnyConnect VPN Health Check tool
The tool helps you troubleshoot various VPN-related issues. Use it in these situations: 1. You experience problems connecting with AnyConnect VPN. 2. You want to test your AnyConnect VPN password. 3. When you test an AnyConnect VPN tunnel. To activate the tool go to Start All Programs Cisco AnyConnect VPN Health Check
To view the User Guide for this tool go to: Start All Programs Cisco AnyConnect VPN Health Check User Guide
Error messages:
Connection attempt has failed (timeout) or "Connection attempt has failed: Host is unreachable"
Important: AnyConnect* VPN will not work from within an Intel campus (LAN or WLAN) or on the Guest Internet Access (GIA) network. Only use AnyConnect* VPN from a public Internet. Connections will fail, and youll receive the Connection attempt has failed (timeout) or "Connection attempt has failed: Host is unreachable" error messages, in the following situations: Failure to connect the internet from public Internet (home, hotel, cafe, etc.) Trying to connect from within an Intel campus Trying to connect from Intel guest network
Follow the steps below to resolve connectivity issues: Step 1 2 3 Task Activate the VPN Health Check Tool as described above. If the tool doesnt solve the issue, go to step 2. Validate that you are not connected from within Intel campus (including the Guest network) and that you have Internet connectivity. Do this by opening a web browser and trying to reach http://www.intel.com. While connected to the Internet, validate that you are able to resolve DNS names. 1. Click Start -> Run -> type cmd -> press Enter. 2. Type nslookup scsfm.intel.com -> press Enter. 3. Validate that you are getting the following resolution 192.55.54.19 If Step 3 fails, you may not have a valid Internet connection. If you have a valid Internet connection: Manually choose the closest Intel site to where you are located (e.g. - AMR Folsom CA) from the Connect List and dont use the Intel Network tunnel.
Remotely - While away from an Intel campus Step Task Call TAC and indentify yourself by answering the BIO questions. 1 2 3 4 TAC resets the remote access password and provides you with a temporary password. Browse to https://vpnpass.intel.com. Log in with your username (email address) and the temporary password.
How to resolve remote access issues while away from an Intel campus
Certificate corrupted
Step 1 2 3 4 5 6 7 8 Task Activate the VPN Health Check tool. If the tool didnt solve the issue, proceed to step 2. Call TAC and indentify yourself by answering the BIO questions. TAC grants you remote access remediation permissions. Youll need to wait ~10min for full replication. Login to remediation tunnel with AnyConnect client. Browse to http://pki.intel.com. Download a certificate by selecting Request a certificate Intel Remote Access 3. TAC removes your remote access remediation permissions. Connect to Intel network tunnel.
If the tool didnt solve the issue, proceed to step 2. 2 3 Browse to http://www.intel.com/emergency/it/VPN.htm and download AnyConnect VPN client. Connect to the Intel Network tunnel.
IIEG-LM-Qaan-Dec9 2011