XEAN Cisco AnyConnect Setup for Linux Ubuntu Operating System

November 2014

i

©2014 Xerox Corporation. All rights reserved. Xerox® and Xerox and Design

® are

trademarks of Xerox Corporation in the United States and/or other countries.

Other company trademarks are also acknowledged.

Document Version: 1.0 (Nov 2014).

Table of Contents

1 XEAN Cisco AnyConnect for Linux Ubuntu ........................ 3

Before You Begin ........................................................................................ 3

Installing the Software ................................................................................. 4

Using Cisco AnyConnect .......................................................................... 13

Things to Remember ................................................................................ 13

Help & Support ......................................................................................... 14

3

1 XEAN Cisco AnyConnect for Linux Ubuntu

Before You Begin If you use Windows or Macintosh, please stop and use these instructions: Windows | Macintosh The service we use to remotely access the Xerox network for Linux and Mac clients was NetConnect (net-c). NetConnect will be disabled December 19, 2014 for Linux and Mac users. It has been replaced with a new product called Cisco AnyConnect.

When working remotely, you do not need to use XEAN to connect to applications like email, The Hub, ePay, WebEx, Office Communicator Instant Messaging, eDocuShare, Global Careers@Xerox and Yammer. You just need your S3 username and password. Review this FAQ for more details. Please note: If you are not on the Xerox network, you will be asked to sign in to IT Support@Xerox using your domain\S3 user ID and S3 password. For example, XRXNA\USS31234.

Your domain in the Western hemisphere is XRXNA. In the Eastern hemisphere, it is XRXEU.

If you use an S3 grid card today, you will continue to use your existing S3 grid card. If you need one, you can request it on the S3 site.

The Linux operating system is not supported by IT Support@Xerox.

The versions below were tested with AnyConnect. If you use another version of Ubuntu, it has not been tested. The AnyConnect client will not be provided for the Redhat operating system.

The 32 bit VPN client will not work on the 64 bit Linux OS without making manual changes. This combination will not be tested.

OS OS Type VPN client Client Type

Linux Ubuntu 12.04 LTS 32 3.1.05182 32

Linux Ubuntu 14.04 LTS 32 3.1.05182 32

Linux Ubuntu 12.04 LTS 64 3.1.05182 64

Linux Ubuntu 14.04 LTS 64 3.1.05182 64

Installing the Software Make sure you are connected to the internet to download the software (either

remotely or in the office).

When you’re ready, download the software by clicking the appropriate link:

32 bit version: http://www.xerox.com/downloads/usa/en/a/anyconnect-linux32.zip

64 bit version: http://www.xerox.com/downloads/usa/en/a/anyconnect-linux64.zip

The following instructions outline the process to install the standalone version of the AnyConnect VPN client. Instructions below assume that both files are located under “home/userprofile/Downloads”

Both files will be required in order to install and operate the AnyConnect VPN client. 1. Unzip the anyconnect-predeploy—linux-3.1.05182-k9.tar.gz file

2. Extract tar file anyconnect-predeploy—linux-3.1.05182-k9.tar

3. Perform the following commands to install the VPN client in the directory structure a. “cd anyconnet-3.1.05182” b. “cd vpn” c. “sudo ./vpn_install.sh”

4. Accept the terms in the license agreement by typing “y” at the prompt.

5. Perform the following commands to install the certificate chain d. “cd ../../” e. “unzip Root\ and\ Intermediate\ Comodo.zip” f. “sudo mv *.pem /opt/.cisco/certificates/ca”

6. Perform the following commands to locate the VPN client executable g. “cd /opt/cisco/anyconnect/bin” this command will point you to the executable h. “./vpnui” - this is the executable

The first time you connect you will need to enter the server location nearest to your location. Please pick the location closest to you: xean01.corp.xerox.com – North America XEAN East xean02.corp.xerox.com – North America XEAN West xean03.corp.xerox.com – Europe GW1 xean04.corp.xerox.com – Europe GW2

Then you will be prompted for your Grid Card coordinates:

Using Cisco AnyConnect Once the Cisco AnyConnect software is loaded on your client, see step 6 above to locate your VPN executable. Your VPN location from the install will be retained in the “connect to” line: In the pull down menu, choose the location closest to you.

Europe GW 1 Europe GW 2 North America XEAN – East North America XEAN – West

The next time you login only the four locations above will appear in your pull down menu.

Things to Remember

When you are connected to the Xerox network using the Cisco AnyConnect service, all of your internet “traffic” will be routed through the Xerox network (which means it will be filtered according to Xerox policy). This is an added security measure intended to keep Xerox information safe and keep the network running smoothly.

If you use a softphone from home, you must have a XEAN connection. Wait a minute or two once you are connected to XEAN before starting softphone to ensure your softphone has registered.

Help & Support The use of AnyConnect with Linux is on a self-support basis. Review the frequently

asked questions on IT Support.