Cisco Anyconnect Docker Linux

 



Kmgmt-785-AnyConnect-Linux-Ubuntu

Objective

The objective of this article is to guide you through installing, using, and the option of uninstalling AnyConnect VPN Client v4.9.x on Ubuntu Desktop.

AnyConnect breaks docker networks in a weird way and they stay broken even after you exit the VPN (even if you stop vpnagentd afterwards). The workaround is to stop docker, clear all its networks and bridges and only then start the AnyConnect VPN. You can start docker after the VPN session ends and it will re-create all necessary stuff. Oct 12, 2020 When I sign in to a client’s VPN (via Cisco AnyConnect), I lose connection to my local containers. I have searched far and wide for a solution, but mostly what I get are configurations of Docker networks for Linux containers (e.g. A new bridge network), and the network configuration for Windows containers seems rather limited in comparison.

Then add a connection using NetworkManager to your VPN provider and connect. (NetworkManager - Edit connections - Add. Then select Connection type to be VPN - Cisco Annyconnect) Reboot and reconnect, and now docker containers should have access to internet. Docker Installation — From Ubuntu Repository. Install Docker and Docker Compose. Sudo apt install -y docker.io docker-compose; Start docker and make sure it starts on boot. Sudo systemctl enable docker sudo systemctl start docker $ sudo systemctl status docker; Verify that docker is running and enabled.

Introduction

The Cisco AnyConnect Virtual Private Network (VPN) Mobility Client provides remote users with a secure VPN connection. It provides the benefits of a Cisco Secure Sockets Layer (SSL) VPN client and supports applications and functions unavailable to a browser-based SSL VPN connection. Commonly used by remote workers, AnyConnect VPN lets employees connect to the corporate network infrastructure as if they were physically at the office, even when they are not. This adds to the flexibility, mobility, and productivity of your workers. Cisco AnyConnect is compatible with Windows 7, 8, 8.1, and 10, Mac OS X 10.8 and later, and Linux Intel (x64).

Follow the steps in this article to install the Cisco AnyConnect VPN Mobility Client on a Ubuntu Desktop. In this article, Ubuntu version 20.04 is used.

If you are using a Windows computer, click here to view an article on how to install AnyConnect on Windows.

If you are using a Mac computer, click here to view an article on how to install AnyConnect on Mac.

AnyConnect Software Version

  • AnyConnect - v4.9.x (Download latest)

Table of Contents

Installing AnyConnect Secure Mobility Client v4.9.x

Step 1

Download the AnyConnect Pre-Deployment Package for Linux from Cisco Software Downloads.

The latest release at the time of publication was 4.9.01095.

Step 2

Open the Terminal by pressing Ctrl+Alt+T on your keyboard. To navigate to the folder where you have downloaded the AnyConnect Client Package, use the command, ‘cddirectory name’. For more information on the ‘cd’ command, click here.

In this example, the file is placed on the Desktop.

The directory may be different based on the location of the AnyConnect file download. For long filenames or paths, start typing some characters and press the tab key on your keyboard. The filename will auto-populate. If it doesn't even after you press tab twice, it indicates that you need to type more number of unique characters. Alternately, you can use the 'ls' command to list the files in your current directory.

Step 3

The initial download is a tarball archive (several files packed into one), which must be extracted. The command ‘tar xvffilename’ will extract the contents to the same directory in which the initial file is located.

For more information on the ‘tar’ command, click here.

Step 4

Once the folder is extracted, use the ‘cddirectory name’ command again to navigate into the folder.

cd [Directory Name]

Step 5

After navigating into the main folder, ‘cd’ into the vpn sub-folder.

Step 6

To run the AnyConnect install script, type ‘sudo ./vpn_install.sh’. This will begin the installation process using superuser permissions.

sudo ./vpn_install.sh

For more details on the 'sudo' command, click here.

Cisco Anyconnect Docker Linux

Step 7

Accept the terms in the license agreement to complete the installation by typing ‘y’.

The AnyConnect installation should complete, and the Terminal window can be closed.

Cisco Anyconnect Ubuntu

Using AnyConnect Secure Mobility Client v4.9.x

Step 1

To access the Anyconnect app, open the Terminal by pressing Ctrl+Alt+T on your keyboard. Use the command, ‘/opt/cisco/anyconnect/bin/vpnui’.

/opt/cisco/anyconnect/bin/vpnui

If you encounter any errors through the Terminal, you can access the app from the applications menu as shown below.

To access the applications menu using the User Interface (UI), click on the start icon (appears as nine dots on the lower left corner). Choose the Anyconnect app.

Alternatively, press Super+A (Super key is the windows icon key) on your keyboard to bring up the search bar. Start typing 'Anyconnect' and the app will appear.

Step 2

Click on the Anyconnect app.

Step 3

Enter the IP Address or Hostname of your desired server followed by the port number.

For RV340 family, the default port number is 8443.

Step 4

Some connections may not be secure using a trusted SSL certificate. By default, AnyConnect Client will block connection attempts to these servers.

Uncheck Block connections to untrusted servers to connect to these servers.

Uninstalling AnyConnect Secure Mobility Client v4.9.x

Step 1

Anyconnect

Using Terminal, navigate to the folder that contains the uninstall shell script using the ‘cd’ command.

In a default installation, these files will be located in /opt/cisco/anyconnect/bin/.

Step 2

To run the Anyconnect uninstall script, enter ‘sudo ./vpn_uninstall.sh’

This will begin the uninstall process using superuser permissions. For more information on the 'sudo' command, click here.

Step 3

At the prompt, enter the sudo password and the client software will complete uninstallation.

Conclusion

There you have it! You have now successfully learned the steps to install, use, and uninstall the Cisco AnyConnect Secure Mobility Client v4.9.x on Ubuntu Desktop.

Cisco Anyconnect Docker Linux Free

For community discussions on Site-to-Site VPN, go to the Cisco Small Business Support Community page and do a search for Site-to-Site VPN.

AnyConnect App

The Anyconnect App can be downloaded from the Google Play store or the Apple store.

Additional Resources

Started using docker at work again.

All the previous work is almost outdated and the old scripts are broken.Been getting issues all over the places.

Normally, I connect remotely over VPN using Cisco's AnyConnect Client.

Big one is not being able to connect to the docker-machine (on windows) while connected work's corporate network.`docker-compose` cannot connect to the docker containers.Error message is similar to:

This machine has been allocated an IP address, but Docker Machine could not reach it successfully.SSH for the machine should still work, but connecting to exposed ports, such as the Docker daemon port (usually <ip>:2376), may not work properly.You may need to add the route manually, or use another related workaround.This could be due to a VPN, proxy, or host file configuration issue.

Only solution I found that works is to port-forward then explicily set the DOCKER_HOST.This causes cert issues that can be overcome with env vars.

Using `docker-compose` to manage the containers, I couldn't get `–tls-verify` to do anything.

Cisco Anyconnect Docker Linux Free

VBoxManage modifyvm 'default' –natpf1 'docker,tcp,2376,2376'

$env:DOCKER_HOST='tcp://127.0.0.1:2376'

$env:DOCKER_TLS_VERIFY=';

Cisco Anyconnect Docker Linux Windows 10

docker-compose up