VPN: Download the Linux VPN Profile

The instructions below are for Ubuntu Linux distribution. Instructions should be similar for other distributions.

Note:

  • ITS provides support for the latest versions of Ubuntu and Redhat only. While the software may function on other distributions, we cannot guarantee support for all of them.
  • Sponsored affiliates are able to use the VPN if they are issued a University of Michigan ID (UMID) number with their sponsorship credentials.
  • If you need help connecting to the VPN on a managed device, please contact the ITS Service Center. This page provides VPN configurations for unmanaged devices (e.g., research users, BYOD users).

Download and Extract the Cisco AnyConnect VPN Client

  1. Download the appropriate VPN client for your university role:
  2. When prompted, authenticate using your uniqname and UMICH password.
  3. Extract the VPN files:
    1. In a terminal, enter $ cd~/Downloads.
    2. For faculty, staff, students, and sponsored affiliates: Enter $ tar zxvf UMVPN-linux.tar.gz to extract the files.
  4. Change into the AnyConnect VPN Directory and run the installer.
    • Enter $ cd anyconnect-linux/vpn.
  5. Next, enter $ sudo ./vpn_install.sh.
  6. You are notified that you have accepted the license agreement while the Cisco AnyConnect Secure Mobility Client is installed.

Start the VPN Client

Important You must have a network connection to connect via the VPN.

  1. Launch the Cisco AnyConnect Secure Mobility client.
  2. Select UMVPN - All Traffic or UMVPN - Only U-M Traffic from the profile drop-down list.
  3. Click Connect.
  4. When prompted, authenticate using your uniqname and UMICH password.
  5. Complete Duo Two-Factor authentication.

For Faculty, Staff, and Students: Start the VPN Client in CLI With Duo Append

UMVPN - Only U-M Traffic:

  1. Enter $/opt/cisco/anyconnect/bin/vpn connect umvpn.umnet.umich.edu/umvpn-split-tunnel-alt in the terminal.
  2. Authenticate using your uniqname and UMICH password when prompted.
  3. You will be sent an automatic push, and you will need to use Duo two-factor authentication to accept. (There is no notification on the machine from where the Duo push was sent.)If you want to connect using a different Duo method, refer to Duo and Append Mode.

Note: Enter $/opt/cisco/anyconnect/bin/vpn disconnect in the terminal to disconnect.

UMVPN - All Traffic:

  1. Enter $/opt/cisco/anyconnect/bin/vpn connect umvpn.umnet.umich.edu/umvpn-all-traffic-alt in the terminal.
  2. Authenticate using your uniqname and UMICH password when prompted.
  3. You will be sent an automatic push, and you will need to use Duo two-factor authentication to accept. (There is no notification on the machine from where the Duo push was sent.) If you want to connect using a different Duo method, refer to Duo and Append Mode.

Note: Enter $/opt/cisco/anyconnect/bin/vpn disconnect in the terminal to disconnect.

Troubleshooting

If you receive an error message, confirm you have the following Requirements.

Requirements​:

  • Using VPN CLI without GUI sessions (for example SSH) is not supported
  • The Snap version of Firefox is not supported by AnyConnect on Linux
  • Administrator privileges are required for installation
  • x86 instruction set
  • 64-bit processor
  • 100 MB hard disk space
  • tun support in Linux Kernel
  • libstdc++ 6.0.19 (GLIBCXX_3.4.19) or later
  • iptables 1.4.21 or later
  • NetworkManager 1.0.6 or later
  • zlib - to support SSL deflate compression
  • glib 2.36 and later
  • polkit 0.105 or later
  • gtk 3.8 or later
  • systemd
  • webkitgtk+ 2.10 or later, required only if you are using the AnyConnect embedded browser app
  • libnm (libnm.so or libnm-glib.so), required only if you are using Network Visibility Module.

Additional information can be found in the Cisco Release Notes for AnyConnect Client.

Note: In order for AnyConnect to trust the VPN server certificates and work properly, you must have Firefox installed on your system and run at least once.
Tags: 
VPN
Last Updated: 
Thursday, January 18, 2024