The following works for me. Run these after connecting to the Cisco VPN. (I'm using OS X's built-in Cisco client, not the Cisco branded client.) sudo route -nv add -net 10 -interface utun0 sudo route change default 192.168.0.1 Replace 10 in the first command with the network that's on the other side of the tunnel. Replace 192.168.0.1 with your local network's gateway. I put it into a bash script, like this: $ cat vpn.sh #!/bin/bash if $EUID -ne 0 ; then echo 'Run this as root' exit 1 fi route -nv add -net 10 -interface utun0 route change default 192.168.0.1 I also found an explanation on how to when you connect the VPN, but it's late on Friday and I don't feel like trying it:) Edit: I have since left the job where I was using the Cisco VPN, so this is from memory.

Cisco Anyconnect On Mac

The 10 in the first command is the network that you want to route over the VPN. 10 is short hand for 10.0.0.0/8. In it looks like the network is 192.168.5.0/24. As for which gateway to specify in the second command, it should be your local gateway.

When you log into a VPN that prevents split-tunneling, it is enforcing that policy by changing your routing tables so that all packets are routed on the virtual interface. So you want to change your default route back to what it was prior to getting on the VPN. The easiest way to figure out the gateway is to run netstat -rn before logging into the VPN, and look at the IP address to the right of the 'default' destination. For example, here's what it looks like on my box right now: Internet: Destination Gateway Flags Refs Use Netif Expire default 10.0.1.1 UGSc 29 0 en1 10.0.1/24 link#5 UCS 3 0 en1 10.0.1.1 0:1e:52:xx:xx:xx UHLWIi 55 520896 en1 481 10.0.1.51 7c:c5:37:xx:xx:xx UHLWIi 0 1083 en1 350 10.0.1.52 127.0.0.1 UHS 0 0 lo0 My gateway is 10.0.1.1 — it is to the right of the 'default' destination. Using the I wrote a Python script that really simplifies this process on the Mac.

When you run it, the script will save your firewall info, launch the AnyConnect client, wait for login, then fix the routes and firewall. Just run the script from 'terminal'. #!/usr/bin/python # The Cisco AnyConnect VPN Client is often configured on the server to block # all other Internet traffic. So you can be on the VPN OR you can have # access to Google, etc. # # This script will fix that problem by repairing your routing table and # firewall after you connect. # # The script does require admin (super user) access.

If you are prompted for # a password at the start of the script, just enter your normal Mac login # password. # # The only thing you should need to configure is the vpnipnetwork.

I had the same issue and got this working thanks to @mehaase After creating the /vpn.sh as answered by @mehaase you can put this into a runnable application automator script using these steps:. Using Automator create a new Application. Add 'Run an AppleScript' under Library Utilities. Enter: do shell script 'sudo /vpn.sh' with administrator privileges. Save You may also need to run chmod 700 /vpn.sh from Terminal to give the script execute privileges.

After connecting to the VPN you can simply run this application script. Enter your admin password and click ok - Done.:).

Says 'AnyConnect 3.1.04072 may not operate reliably on Mac OS X 10.9 / Mavericks, as described in defect CSCuh73010. There are intermittent disconnects with wireless connections. Wired connections may also disconnect, but not as frequently. Cisco is working with Apple to resolve this problem. ' Elsewhere it says ' Mac OS X Support: AnyConnect now supports Mac OS X v10.9 (x86 32-bit and x64 64-bit). However mine (v3.0.10055) Never Works under Mavericks.

What version of AnyConnect are you running? It there a way to do an online upgrade of AnyConnect?? I have been able to get a solid, stable VPN connection using the standalone install package ' anyconnect-macosx-i386-3.1.04072-k9.dmg' - when installing, I only installed the VPN module - I did not install the posture module or any of that other stuff. I've had zero problems with it since then.

The download files for this version of AnyConnect are available here: The particular one that worked for me was 'Standalone DMG package for Mac OS X 'Intel' Platforms' You need a Cisco login to download the package but you should be able to register a username and download it without a problem. No need to worry about uninstalling your current AnyConnect version. Just download and install this one. See updates and work-arounds here quote: 'Folks, I have heard 3 work-arounds: (1) Hardware VPN.

Tag Cisco Anyconnect Vpn Client For Mac Os X

This is a thingie that plugs to your home Ethernet, and has an Ethernet port that you can plug your Mac into. Good if your company supports it.

(2) Use Mac's built-in VPN client. See, but you may have to coax your IT department to give you the 'shared secret' key. (3) Use OpenConnect, which is part of mac ports. I have not tried any of these yet. Looks like (3) is the easiest one to get started.' Message was edited by: Tomei Ningen. Apple Footer.

This site contains user submitted content, comments and opinions and is for informational purposes only. Apple may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Apple can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the.