The instructions below are for Ubuntu Linux distribution. Instructions should be similar for other distributions.
Note:
- ITS provides support for the latest versions of Ubuntu and Redhat only. While the software may function on other distributions, we cannot guarantee support for all of them.
- Sponsored affiliates are able to use the VPN if they are issued a University of Michigan ID (UMID) number with their sponsorship credentials.
- If you need help connecting to the VPN on a managed device, please contact the ITS Service Center. This page provides VPN configurations for unmanaged devices (e.g., research users, BYOD users).
Download and Extract the Cisco Secure VPN Client
- Download the VPN client: UMVPN-Linux
- When prompted, authenticate using your uniqname and UMICH password.
- Extract the VPN files:
- In a terminal, enter $ cd~/Downloads.
- For faculty, staff, students, and sponsored affiliates: Enter $ tar zxvf UMVPN-linux.tar.gz to extract the files.
- Change into the AnyConnect VPN Directory and run the installer.
- Enter $ cd UMVPN-linux/vpn.
- Next, enter $ sudo ./vpn_install.sh.
- You are notified that you have accepted the license agreement while the Cisco Secure Client is installed.
Start the VPN Client
Important You must have a network connection to connect via the VPN.
- Launch the Cisco Secure Client.
- Select UMVPN - All Traffic or UMVPN - Only U-M Traffic from the profile drop-down list.
- Click Connect.
- When prompted, authenticate using your uniqname and UMICH password.
- Complete Duo Two-Factor authentication.
Start the VPN Client in CLI With Duo Append
UMVPN - Only U-M Traffic:
- Enter $/opt/cisco/secureclient/bin/vpn connect umvpn.umnet.umich.edu/umvpn-split-tunnel-alt in the terminal.
- Authenticate using your uniqname and UMICH password when prompted.
- You will be sent an automatic push, and you will need to use Duo two-factor authentication to accept. (There is no notification on the machine from where the Duo push was sent.)If you want to connect using a different Duo method, refer to Duo and Append Mode.
Note: Enter $/opt/cisco/secureclient/bin/vpn disconnect in the terminal to disconnect.
UMVPN - All Traffic:
- Enter $/opt/cisco/secureclient/bin/vpn connect umvpn.umnet.umich.edu/umvpn-all-traffic-alt in the terminal.
- Authenticate using your uniqname and UMICH password when prompted.
- You will be sent an automatic push, and you will need to use Duo two-factor authentication to accept. (There is no notification on the machine from where the Duo push was sent.) If you want to connect using a different Duo method, refer to Duo and Append Mode.
Note: Enter $/opt/cisco/secureclient/bin/vpn disconnect in the terminal to disconnect.
Troubleshooting
If you receive an error message, confirm you have the following Requirements.
Requirements​:
- Using VPN CLI without GUI sessions (for example SSH) is not supported
- The Snap version of Firefox is not supported by AnyConnect on Linux
- Administrator privileges are required for installation
- x86 instruction set
- 64-bit processor
- 100 MB hard disk space
- tun support in Linux Kernel
- libstdc++ 6.0.19 (GLIBCXX_3.4.19) or later
- iptables 1.4.21 or later
- NetworkManager 1.0.6 or later
- zlib - to support SSL deflate compression
- glib 2.36 and later
- polkit 0.105 or later
- gtk 3.8 or later
- systemd
- webkitgtk+ 2.10 or later, required only if you are using the AnyConnect embedded browser app
- libnm (libnm.so or libnm-glib.so), required only if you are using Network Visibility Module.
Additional information can be found in the Cisco Release Notes for AnyConnect Client.
Note: In order for AnyConnect to trust the VPN server certificates and work properly, you must have Firefox installed on your system and run at least once.
Last Updated:
Friday, July 19, 2024