Cisco Anyconnect Site To Site Vpn



Connect to Cornell's VPN using Cisco AnyConnect software.

To use Cornell's Virtual Private Network (VPN) with campus networks and services, you must use Cisco AnyConnect VPN software. See the How to Install Cisco VPN Software page for instructions.

Creating Extended ACL. Next step is to create an access-list and define the traffic we would like the router to pass through each VPN tunnel. In this example, for the first VPN tunnel it would be traffic from headquarters (10.10.10.0/24) to remote site 1 (20.20.20.0/24) and for the second VPN tunnel it will be from our headquarters (10.10.10.0/24) to remote site 2 (30.30.30.0/24). End-of-Life Announcement for the Cisco AnyConnect VPN Client 2.5 (for Desktop) EOL/EOS for the Cisco AnyConnect VPN Client 2.3 and Earlier (All Versions) and 2.4 (for Desktop) 13-Mar-2015 EOL/EOS for the Cisco Secure Desktop 3.4.x and Earlier 13-Mar-2015.

  1. To initiate the connection, we use the Cisco VPN client, available for Windows operating systems (XP, Vista, Windows 7 - 32 & 64bit), Linux, Mac OS X10.4 & 10.5 and Solaris UltraSPARC (32 & 64bit), making it widely available for most users around the globe. Cisco VPN Clients are available for download from our Cisco Downloads section.
  2. Cisco AnyConnect Client is the only software client by Cisco that should be used now. The underlying transport can be either SSL or IPSec, but in any case this configuration is done at the VPN head-end. To be more precise, let’s say that we want to provide access to the network 10.195.1.0/24 for the customers.
  3. Overview Stanford's VPN allows you to connect to Stanford's network as if you were on campus, making access to restricted services possible. To connect to the VPN from your Windows computer you need to install the Cisco AnyConnect VPN client. Two types of VPN are available: Default Stanford (split-tunnel). When using Stanford's VPN from home, we generally recommend using the.
Note: You will use Two-Step Login to connect to departmental VPNs where it is required. Using Two-Step Login allows you to better protect both your personal information and the university's services and data under your custodianship.

Connect to CU VPN with NetID Login

  1. Click Start -> All Programs -> Cisco -> Cisco AnyConnect Secure Mobility Client -> Cisco AnyConnect Secure Mobility Client.
  2. In the AnyConnect window be sure that cuvpn.cuvpn.cornell.edu is selected in the Connect To box, and then click Connect.
  3. In the Cisco AnyConnect window:
    • In the Group box, select CornellVPN to log in to CU VPN.
    • In the User Name box, enter your Cornell NetID or GuestID.
      Note: If you are connecting to a departmental VPN, enter your NetID and the name of the departmental group, for example, pqs665@departmental_group_name.
    • In the Password box, enter your NetID password.
  4. Click OK. You're now connected to the VPN.
Login Failed: If you see a message that the login failed, you may be attempting to connect to a departmental VPN where Two-Step Login is required. See Connect to CU VPN using Two-Step Login.

Connect to CU VPN with Two-Step Login

Duo Security provides documentation on how to log in to the Cisco AnyConnect client used with Cornell's VPN service. For more information, see Logging in with Cisco AnyConnect Client.

  1. Click Start -> All Programs -> Cisco -> Cisco AnyConnect Secure Mobility Client -> Cisco AnyConnect Secure Mobility Client.
  2. In the AnyConnect window be sure that cuvpn.cuvpn.cornell.edu is selected in the Connect To box, and then click Connect.
  3. In the Cisco AnyConnect window:
    • In the Group box, select Two-Step_Login. This is required for departmental VPNs with Two-Step Login enabled, but you can use it any time.
    • In the User Name box, enter your Cornell NetID or GuestID.
      Note: If you are connecting to a departmental VPN, enter your NetID and the name of the departmental group, for example, pqs665@departmental_group_name.
    • In the Password box, enter your NetID password.
    • In the DUO Passcode (push/sms/phone) box, enter the method you use to complete Two-Step Login:
      push
      phone
      SMS to receive a new set of passcodes. (You'll need to log in again.)
      An actual 7-digit passcode
  4. Click OK.
  5. If you entered push or phone, complete the Two-Step Login.
    You're now connected to the VPN.
If you don't have access to the default device you use for Two-Step Login, you can use an alternate device. In Step 3 above, enter the method you use to complete Two-Step Login followed by a number, for example push2 or phone2. To see the devices you have set up and the numbers to use for each, go to Your Two-Step Login Devices and use the number in the Device Number column.

Cisco Anyconnect Vpn Setup

Connect to Cornell's VPN using Cisco AnyConnect software.

To use Cornell's Virtual Private Network (VPN) with campus networks and services, you must use Cisco AnyConnect VPN software. See the How to Install Cisco VPN Software page for instructions.

Note: You will use Two-Step Login to connect to departmental VPNs where it is required. Using Two-Step Login allows you to better protect both your personal information and the university's services and data under your custodianship.

Connect to CU VPN with NetID Login

Cisco Anyconnect Vpn Protocol

  1. Click Start -> All Programs -> Cisco -> Cisco AnyConnect Secure Mobility Client -> Cisco AnyConnect Secure Mobility Client.
  2. In the AnyConnect window be sure that cuvpn.cuvpn.cornell.edu is selected in the Connect To box, and then click Connect.
  3. In the Cisco AnyConnect window:
    • In the Group box, select CornellVPN to log in to CU VPN.
    • In the User Name box, enter your Cornell NetID or GuestID.
      Note: If you are connecting to a departmental VPN, enter your NetID and the name of the departmental group, for example, pqs665@departmental_group_name.
    • In the Password box, enter your NetID password.
  4. Click OK. You're now connected to the VPN.
Login Failed: If you see a message that the login failed, you may be attempting to connect to a departmental VPN where Two-Step Login is required. See Connect to CU VPN using Two-Step Login.

Connect to CU VPN with Two-Step Login

Duo Security provides documentation on how to log in to the Cisco AnyConnect client used with Cornell's VPN service. For more information, see Logging in with Cisco AnyConnect Client.

  1. Click Start -> All Programs -> Cisco -> Cisco AnyConnect Secure Mobility Client -> Cisco AnyConnect Secure Mobility Client.
  2. In the AnyConnect window be sure that cuvpn.cuvpn.cornell.edu is selected in the Connect To box, and then click Connect.
  3. In the Cisco AnyConnect window:
    • In the Group box, select Two-Step_Login. This is required for departmental VPNs with Two-Step Login enabled, but you can use it any time.
    • In the User Name box, enter your Cornell NetID or GuestID.
      Note: If you are connecting to a departmental VPN, enter your NetID and the name of the departmental group, for example, pqs665@departmental_group_name.
    • In the Password box, enter your NetID password.
    • In the DUO Passcode (push/sms/phone) box, enter the method you use to complete Two-Step Login:
      push
      phone
      SMS to receive a new set of passcodes. (You'll need to log in again.)
      An actual 7-digit passcode
  4. Click OK.
  5. If you entered push or phone, complete the Two-Step Login.
    You're now connected to the VPN.
Cisco anyconnect add vpn profile
If you don't have access to the default device you use for Two-Step Login, you can use an alternate device. In Step 3 above, enter the method you use to complete Two-Step Login followed by a number, for example push2 or phone2. To see the devices you have set up and the numbers to use for each, go to Your Two-Step Login Devices and use the number in the Device Number column.