This article covers Cisco SSL VPN AnyConnect Secure Mobility Client (webvpn) configuration for Cisco IOS Routers. Learn how to configure your Cisco router to support Cisco AnyConnect for Windows workstations, iPhone, iPads and Android mobile phones (AnyConnect Secure Mobility Client). We provide all necessary commands, installation files and necessary SSLVPN license information to ensure an.

Depending on how your company configured Duo authentication, you may or may not see a “Passcode” field when using the Cisco AnyConnect client.

  1. Cisco AnyConnect provides reliable and easy-to-deploy encrypted network connectivity from any Apple iOS by delivering persistent corporate access for users on the go. Whether providing access to business email, a virtual desktop session, or most other iOS applications, AnyConnect enables business-critical application connectivity.
  2. See full list on its.gmu.edu.
  3. AnyConnect version 4.4 is compatible with these operating systems and requirements: Windows, Mac, Android and iPhone. Is there a better alternative? Cisco AnyConnect is an unbeatable provider of cybersecurity. But, creating your best work often needs strong, reliable and fast WiFI. With IPVanish, you can get the best of both worlds.

Single Password with Automatic Push

If AnyConnect only prompts for a password, like so:

After you submit your login information, an authentication request is automatically sent to you via push to the Duo Mobile app or as a phone call.

Alternatively, you can add a comma (“,”) to the end of your password, followed by a Duo passcode or the name of a Duo factor. Here's how:

Cisco
Type...To...
password,passcodeLog in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.
Examples: 'mypass123,123456' or 'mypass123,1456789'
password,pushPush a login request to your phone (if you have Duo Mobile installed and activated on your iOS, Android, or Windows Phone device). Just review the request and tap 'Approve' to log in.
password,phoneAuthenticate via phone callback.
password,smsGet a new batch of SMS passcodes.
Your login attempt will fail — log in again with one of your new passcodes.

You can also add a number to the end of these factor names if you have more than one device registered. For example, push2 will send a login request to your second phone, phone3 will call your third phone, etc.

Examples

To use Duo Push if your password is 'hunter2', type:

To use the passcode '123456' if your password is 'hunter2', type:

hunter2,123456

To send new SMS passcodes to your second phone if your password is 'hunter2', type:

The comma is Duo's default separator character between your password and the Duo factor. Your administrator may have changed this to a different character. Be sure to follow the instructions sent to you by your organization if they differ from what's shown here.

Second Password for Factor Selection

If AnyConnect shows a 'Second Password' input field (note that your AnyConnect administrator may have changed the 'Second Password' label to something else):

Use the 'Second Password' field to tell Duo how you want to authenticate. Here's how:

Type...To...
A passcodeLog in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.
Examples: '123456' or '1456789'
pushPush a login request to your phone (if you have Duo Mobile installed and activated on your iOS, Android, or Windows Phone device). Just review the request and tap 'Approve' to log in.
phoneAuthenticate via phone callback.
smsGet a new batch of SMS passcodes.
Your login attempt will fail — log in again with one of your new passcodes.

You can also add a number to the end of these factor names if you have more than one device registered. For example, push2 will send a login request to your second phone, phone3 will call your third phone, etc.

Examples

To send a Duo Push request to your primary phone, type:

push

To send a Duo Push request to your secondary phone, type:

To use the passcode '123456', type:

123456

To send new SMS passcodes to your second phone, type:

Depending on how your company configured Duo authentication, you may or may not see a “Passcode” field when using the Cisco AnyConnect client.

Single Password with Automatic Push

If AnyConnect only prompts for a password, like so:

Cisco Anyconnect Iphone Certificate

After you submit your login information, an authentication request is automatically sent to you via push to the Duo Mobile app or as a phone call.

Alternatively, you can add a comma (“,”) to the end of your password, followed by a Duo passcode or the name of a Duo factor. Here's how:

Type...To...
password,passcodeLog in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.
Examples: 'mypass123,123456' or 'mypass123,1456789'
password,pushPush a login request to your phone (if you have Duo Mobile installed and activated on your iOS, Android, or Windows Phone device). Just review the request and tap 'Approve' to log in.
password,phoneAuthenticate via phone callback.
password,smsGet a new batch of SMS passcodes.
Your login attempt will fail — log in again with one of your new passcodes.

You can also add a number to the end of these factor names if you have more than one device registered. For example, push2 will send a login request to your second phone, phone3 will call your third phone, etc.

Examples

To use Duo Push if your password is 'hunter2', type:

To use the passcode '123456' if your password is 'hunter2', type:

hunter2,123456

To send new SMS passcodes to your second phone if your password is 'hunter2', type:

The comma is Duo's default separator character between your password and the Duo factor. Your administrator may have changed this to a different character. Be sure to follow the instructions sent to you by your organization if they differ from what's shown here.

Second Password for Factor Selection

Cisco Anyconnect Apple M1

If AnyConnect shows a 'Second Password' input field (note that your AnyConnect administrator may have changed the 'Second Password' label to something else):

Use the 'Second Password' field to tell Duo how you want to authenticate. Here's how:

Type...To...
A passcodeLog in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.
Examples: '123456' or '1456789'
pushPush a login request to your phone (if you have Duo Mobile installed and activated on your iOS, Android, or Windows Phone device). Just review the request and tap 'Approve' to log in.
phoneAuthenticate via phone callback.
smsGet a new batch of SMS passcodes.
Your login attempt will fail — log in again with one of your new passcodes.

You can also add a number to the end of these factor names if you have more than one device registered. For example, push2 will send a login request to your second phone, phone3 will call your third phone, etc.

Examples

To send a Duo Push request to your primary phone, type:

push

Cisco Anyconnect 4.5 Download

To send a Duo Push request to your secondary phone, type:

To use the passcode '123456', type:

123456

To send new SMS passcodes to your second phone, type: