SCS Computing
 Services and Solutions
  links to the SCS and CMU home pages Carnegie Mellon School of Computer Science Carnegie Mellon University
 » How to… 
 » Accounts & passwords 
 » AFS 
 » AV help 
 » Backups & restores 
 » Calendaring 
 » E-mail 
 » Networking 
 » Printing 
 » Purchasing 
 » Resource management 
 » Security 
 » Software licensing 
 » Support charges 
 » Support lifecycle 
 » Web publishing 
 » Mac support 
 » Linux support 
 » Windows PC support 

AnyConnect Ubuntu Readme

SCS Anyconnect Profiles

There are two SCS Anyconnect profiles:

    • This profile passes all traffic through the full tunnel.
    • SCS facilities recommends that the full tunnel profile be used when connecting to the SCS Anyconnect service from either Carnegie Mellon's wireless network or any public wireless network.
    • This profile passes all traffic through the split tunnel.
    • The split tunnel allows traffic destined to CMU and will allow users on their home network to access local printers and devices while still having access to IP restricted CMU/SCS resources.


  1. Download the .tar file from the downloads page (authentication required).
  2. In a terminal, cd to the download directory and extract the tar file (tar -xzpvf anyconnect-linux32-SCS-3.1.12020-k9.tar.gz or tar -xzpvf anyconnect-linux-64-SCS-4.2.00096-k9.tar.gz).
  3. cd to the newly-created anyconnect-4.2.00096/vpn directory or anyconnect-3.1.12020/vpn.
  4. Install the VPN software by running: sudo ./

Note: You must run the installer as root or by using sudo. The sofware package is installed in the /opt/cisco directory.

Note: With a clean install of the client on Linux, you may encounter an SSL certificate warning. To continue connecting to the VPN, choose Always Connect. In the AnyConnect Preferences windows that appears, uncheck Block connections to untrusted servers.

To run the GUI

  1. Open Terminal
  2. Type /opt/cisco/anyconnect/bin/vpnui
  3. When the client opens, choose either or from the drop-down menu.
  4. Enter username/remote and your /remote instance Kerberos password, then click Connect.
    Ubuntu AnyConnect Login Screen

Anyconnect on CLI-only Device

Follow these instructions for running the Anyconnect client from a command-line-only Linux machine.

  1. To run the VPN client, simply open a terminal and type /opt/cisco/anyconnect/bin/vpn connect or substitute to use the split tunnel.
  2. Enter your username/remote and press Enter.
  3. Enter your remote instance Kerberos password and press Enter.
  4. To disconnect type /opt/cisco/anyconnect/bin/vpn disconnect


  • /opt/cisco/anyconnect/bin/vpn state ---> Shows connection state (connected, disconected, etc.)
  • /opt/cisco/anyconnect/bin/vpn stats ---> Shows connection statistics

Support and Troubleshooting

For assistance:

  • Contact the SCS Help Desk at or call 412-268-4231 or visit GHC 4203.
  • See the AnyConnect FAQs for troubleshooting information and answers to Frequently Asked Questions.