前言

Cisco AnyConnect 为思科推出的 VPN 客户端,当前已有 Windows、Android、iOS、OS X、Ubuntu、WebOS 等操作系统的客户端。AnyConnect 主要作用是方便员工在任何设备上安全地办公。

Cisco AnyConnect 客户端安装配置和默认地址修改技巧

更新历史

2019 年 05 月 24 日 - 初稿

阅读原文 - https://wsgzao.github.io/post/cisco-anyconnect/

扩展阅读

Cisco AnyConnect Secure Mobility Client


Cisco AnyConnect 简介

无需介绍

Cisco AnyConnect 配置

  1. macOS 系统安装只安装 VPN 组件 , 其他功能都不需要安装
  2. macOS 和 Windows 都建议取消勾选 Block Connections to untrusted servers


Cisco AnyConnect 修改默认链接地址

Change Local Policy Parameters Manually

Step 1
Retrieve a copy of the AnyConnect Local Policy file (AnyConnectLocalPolicy.xml) from a client installation.

Table 1. Operating System and AnyConnect Local Policy File Installation Path
Operating System

Operating System Installation Path
Windows C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client
Linux /opt/cisco/anyconnect
macOS /opt/cisco/anyconnect

Step 2
Edit the parameter settings. You can either edit the AnyConnectLocalPolicy file manually, or use the VPN Local Policy editor, which is distributed with the AnyConnect Profile Editor installer.

Step 3
Save the file as AnyConnectLocalPolicy.xml and deploy the file to remote computers using a corporate software deployment system.

Step 4
Reboot the remote computers so that the changes to the local policy file take effect.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/anyconnect-profile-editor.html

macOS

注意修改 中文备注

vim /opt/cisco/anyconnect/profile/Profile.xml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">
<ServerList>
<HostEntry>
<User> 用户名称 </User>
<HostName> 自定义显示名称 </HostName>
<HostAddress> 服务器地址 </HostAddress>
</HostEntry>
<HostEntry>
<User> 用户名称 </User>
<HostName> 自定义显示名称 </HostName>
<HostAddress> 服务器地址 </HostAddress>
</HostEntry>
</ServerList>
</AnyConnectProfile>

Windows

注意修改 中文备注

C:\Users \ 你的用户名 \ AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client 目录下的 preferences.xml 文件

比如

C:\Users\wangao\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectPreferences>
<DefaultUser> 默认用户名 </DefaultUser>
<DefaultSecondUser/>
<ClientCertificateThumbprint/>
<ServerCertificateThumbprint/>
<DefaultHostName> 默认 VPN 地址 </DefaultHostName>
<DefaultHostAddress/>
<DefaultGroup> 默认组 </DefaultGroup>
<ProxyHost/>
<ProxyPort/>
<SDITokenType/>
<ControllablePreferences>
<EnableAutomaticServerSelection>false</EnableAutomaticServerSelection>
<LocalLanAccess>false</LocalLanAccess>
<BlockUntrustedServers>false</BlockUntrustedServers>
</ControllablePreferences>
</AnyConnectPreferences>
文章目录
  1. 1. 前言
  2. 2. 更新历史
  3. 3. Cisco AnyConnect 简介
  4. 4. Cisco AnyConnect 配置
  5. 5. Cisco AnyConnect 修改默认链接地址
    1. 5.1. macOS
    2. 5.2. Windows