windows - Stop Cisco AnyConnect from locking down the NIC

27
2013-10
  • Joey

    Cisco's VPN crapclients (including the AnyConnect one) have the nasty habit of clobbering all NICs on the system you're using them. The old client had a checkbox in the connection options that allowed you to use other network interfaces while being connected while the AnyConnect client doesn't have any options at all, seemingly. But they both lock down the network interface they are using to connect to the VPN.

    Since I am forced to use AnyConnect to actually have an internet connection and I like to control a second computer at home via RDP (over the same network interface so far) this doesn't quite work out. With the old client IPv6 still worked just fine, though AnyConnect seems to dislike that as well now.

    Is there any way to still use the same network interface for LAN access? I actually don't really care about any possible security implications (which might be why Cisco does this) as it's my freaking internet connection and not a secure way of working from home. The trade-off is quite different :-)

    • Answers
  • Adam

    I believe you will need to setup split tunneling with a exclude list. So you don't tunnel your local lan traffic and everything else goes out the tunnel. This has to be configured on the ASA itself. Then in AnyConnect enable the option 'Enable local LAN access (if configured)'. You can enable it manually by clicking on the "preferences" button next to the "connect to" box or via XML profile.

    Here is a link to the split tunneling information in the ASA 8.2 CLI guide http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/vpngrp.html#wp1053494


    • Related Question

    Configuring Windows VPN Connection from Cisco AnyConnect
  • Oliver Hanappi

    I don't know if it is possible but I would like to configure a Windows 7 VPN connection in a way that I can connect to a network which I normally reach by using Cisco AnyConnect VPN Client. Does Cisco use a protocol which Windows 7 understands also and where can I find the configuration details of the VPN connection?

    If you wonder why I'm trying to do this: I need to connect via VPN to several different networks from different companies/organizations/universities and each one uses its own VPN client. I don't want my computer to have 5 VPN clients installed, therefore I'm trying to replace them with simple Windows VPN connections.


    • Related Answers
  • Joey

    That greatly depends on the configuration of the server. Cisco Concentrators can speak PPTP which works on nearly every version of Windows, but it's costly in terms of performance. The number of possible connections drops to about a tenth for the server so this is rarely activated.

    Furthermore there seems to be an option to enable L2TP. The documentation states that but at least for our university here no one figured out how to enable it and set it up.

    You would have to ask the person maintaining the server whether one of the above options apply.

    For the "usual" Cisco IPSec over UDP there is no native option in Windows, unfortunately.