Anyconnect Was Not Able To Establish Gateway

Posted on  by



Troubleshooting (Windows-specific)

Cisco AnyConnect Secure Mobility you connect to a types Policy Based, and Cisco VPN gateway to to view the IBM Configuration Example customer gateway the ' AnyConnect was tunnels to Azure VPN was not able to Solution 1: Disabling Configuration the Determining the. Error1:the vpn client failed to establish a connection error2:anyconnect was not able to establish a connection to the specified secure gateway.please try connecting again those are am geeting on windows 10 Acer laptop plz help me need very badly.

Client Unable To Establish Connection

ProblemsPossible Causes and Solutions
Establishing the connection in Windows 8.1 fails with the message'Failed to initialize connection subsystem'
  • The problem is caused by a security update of Windows 8.1. By now,Microsoft released a fixed update. Please connect your computer to theInternet, choose Start→ Control Panel → WindowsUpdate and install all available updates. After a Windows restartyour AnyConnect connection should work properly again. If you needsupport, please contact IT-Servicedesk ofHRZ.
Establishing the connection fails with the message 'The VPNclient agent was unable to create the interprocess communicationdepot'.
  • The Internet Connection Sharing (ICS) is enabled. In thiscase AnyConnect is on principal not trying to establish aconnection.
    Change the properties of thenetworkconnection thatconnects you totheinternet and disable the ICS asfollowing:
    Choose Start → Control Panel → Network and Internet → Changeadapter settings → Right-click on theshared network connection and choose Properties →Sharing tab. Then deactivate thecheckbox 'Allow other network users to connect through thiscomputer's Internet connection'. After that, confirm the dialogvia OK.
AnyConnect fails with the message 'AnyConnect was not able toestablish a connection to the specified secure gateway. Please tryconnection again'.
  • If you are using the Kaspersky AV firewall you need to addAnyConnect as a firewall exception. It might be more useful to use thefree anti-virussoftware provided by the HRZ.
  • The Internet Connection Sharing (ICS) is enabled. In thiscase AnyConnect is on principal not trying to establish aconnection.
    Change the properties of thenetworkconnection thatconnects you totheinternet and disable the ICS asfollowing:
    Choose Start → Control Panel → Network and Internet → Changeadapter settings → Right-click on theshared network connection and choose Properties →Sharing tab. Then deactivate thecheckbox 'Allow other network users to connect through thiscomputer's Internet connection'. After that, confirm the dialogvia OK.
  • You have encountered a software bug in AnyConnect. If you find avalue like '@oem20.inf,%vpnva_Desc%;Cisco AnyConnect VPNVirtual Miniport Adapter for Windows x64' for the registry key'ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesvpnvaDispayName'in the Windows registry (regedit.exe), please delete all charactersbefore the word 'Cisco' in the value. After that, close theregistry editor, start AnyConnect and try to connect again.
AnyConnect fails with the message 'VPN Service not available.The VPN agent service is not responding. Please restart thisapplication after a minute'.

  • The AnyConnect VPN service does not start automatically. Theerror message 'VPN Service not available. The VPN agent service isnot responding. Please restart this application after a minute'means, that the Cisco AnyConnect VPN service currently is not running.This could be caused by a Windows boot accelerator software, thatmodifies the start order of the Windows services in a way, someservices cannot be started anymore. In the past such problems werecaused by e.g. Lenovo Rapid Boot(also: RapidBoot HDDAccelerator, RapidBoot Shield) and CCleaner. After uninstalling suchsoftwares, the problem should be solved (Windows XP:Control Panel →Add/RemovePrograms, Windows Vista/7/8:Control Panel → Programs andFeatures).

AnyConnect fails with the message 'Connection attempt failed.Please try again'.

  • In AnyConnect the wrong VPN-Gateway was specified. Please enter theVPN-gateway vpn.uni-marburg.de and try to connect again.
AnyConnect fails with the message 'Could not connect to server.Please verify Internet connectivity and server address'
  • The computer's Internet connection does not work. Please make sureyour computer has a working Internet connection and try to connectagain.
Establishing the connection works, but secured content of UMRnetcan not be accessed.
  • A firewall or internet security software fromComodo manages the connection and prevents CiscoAnyConnect from working properly. Choose Start → ControlPanel → Network and Internet → Change adapter settings →right-click on the Cisco Anyconnect SecureMobility Client and chooseProperties. In the list of supported items ofthe connection deactivate the checkboxComodo Internet Security Firewall Driver andconfirm the dialog via OK.
The installation fails with the message: 'Failed to installAnyConnect Secure Mobility Client with installer error: Incorrectfunction. A VPN connection cannot be established'.
  • An additional firewall, anti-virus or internet security softwareprevents the installation of AnyConnect. Please temporarily deactivatethis software and try the installation of AnyConnect again. If thisalso fails, please uninstall this software, restart your Windowscomputer and try the installation of AnyConnect again. If youuninstalled your anti-virus software, please install another anti-virussoftware, for example the free anti-virus-software for students andstaff of university.

Contents

Introduction

This document briefly describes the possible error messages that appear during the installation of AnyConnect VPN client on Apple MAC machines and their corresponding resolutions.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on these software and hardware versions:

  • Cisco ASA Security Appliance that runs software version 8.x

  • Cisco IOS® Router that runs Cisco IOS Software Release 12.4(20)T

  • Cisco AnyConnect Client software version 2.x

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

Refer to Cisco Technical Tips Conventions for more information on document conventions.

Error Messages

This section shows a list of error messages along with the solutions.

Package Corrupt Error Message

When AnyConnect 2.3 is launched from an Apple MAC machine, the Anyconnect Package corrupt or unavailable error message appears and eventually, the connection attempt fails.

Solution

This can be a problem with the absence of the MAC-related AnyConnect package on the flash of the router. Upload the suitable AnyConnect package for MAC in order to resolve this issue. Upload the corresponding AnyConnect package, which depends upon the MAC architecture. For MACs on the Intel processor, you need the i386 macos image and for MACs that run the Power PC processor (PPC) you need the powerpc macos image. These are example packages for your reference:

  • anyconnect-macosx-i386-2.5.3055-k9.pkg

  • anyconnect-macosx-powerpc-2.5.3055-k9.pkg

Split DNS Issues

When split DNS is enabled on an AnyConnect setup, it is found that all the DNS queries are sent in clear but not tunneled. This is a problem with only the Apple MAC machines and works fine with Windows machines.

Solution

This behavior is observed and filed in Cisco bug ID CSCtf03894 (registered customers only) . In order to resolve this issue, you can upgrade to the AnyConnect release 3.0.4235, which has the Split DNS Functionality Enhancement. As a workaround, you can also use the built-in IPSec VPN client supported by Apple, which does not have this issue.

SVC Error Message

The launch of AnyConnect from a Macbook Pro running OSX Leopard is not successful. The VPN gateway is ASA running 8.0.4. The connection fails and the SVC Message: 16/ERROR: Initialization failure (mem allocfailed, etc.) error message appears.

Solution

This can be a problem with the way the MAC machine attempts to connect to the ASA. First verify if any IPv6 adaptors are enabled on the MAC machine and check if MAC tries to contact ASA over the IPv6 network. If so, it fails as the IPv6 is not supported with AnyConnect. In order to resolve this, disable the IPv6 related services on the MAC machine and try to connect with an IPv4 address.

Web-based Installation Error Message when AnyConnect is Launched on MAC

There are intermittent issues with you launch the AnyConnect version 2.5 on the MAC with OSX 10.5.6. The web-based installation was unsuccessful error message appears. At that time, you are unable to download and install AnyConnect, and the browser used is Firefox. If you reboot the MAC machine, this fixes the issue temporarily, but intermittently, the issue happens again.

Solution

Verify if your VPN gateways are connected in Load-balancer mode. If it is connected, then there could be some DNS cache-related issues that cause improper DNS redirects. In order to resolve this issue, always try to map the DNS URL to connect to one specific VPN gateway only.

MAC OSX 10.6.3 is Unable to get to Internet

When you use the AnyConnect on a MAC machine, you can access the Internal Corporate network but you are unable to browse to the Internet. It neither works by FQDN nor by IP address. There is a proxy server in use for Internet traffic.

Solution

Gateway

The issue can be due to the length of the PMTU. Verify the existing MTU size on the VPN gateway, for example, ASA and modify it to a lesser value. In this sample output, the mtu size is reduced to 1204 from existing 1400.

AnyConnect on MAC fails to launch to Cisco IOS Router

The attempt to launch AnyConnect in standalone mode to a Cisco IOS® Router running Cisco IOS Software Release 12.4(20)T is unsuccessful. The anyconnect internal error (state: not connected) error message appears.

Solution

Cisco IOS Software Release 12.4(20)T supports AnyConnect on MAC in standalone mode without any problem. In order to resolve this, try to use the complete URL when you connect to the Cisco IOS head-end device. This is a sample URL:

If this issue persists, contact Cisco TAC (registered customers only) for further troubleshooting.

Note: You need to have valid Cisco user credentials to contact Cisco TAC.

Wireless CSSC for an Apple MAC

Currently, the NAM module on the AnyConnect 3.0 product replaces the Cisco Secure Services Client (CSSC). Refer to Network Access Manager (Replacement for CSSC) for more information. There is no current plan to enable NAM to support MAC OSX platform.

Unable to Upgrade Firefox while AnyConnect is Installed on MAC

This error message appears when you upgrade Firefox on Apple machine version 10.6:

Anyconnect was not able to establish connection secure gateway

On machines that use softtokens, this error message appears:

It is observed that these MAC machines have AnyConnect version 2.5 installed. The current version of Firefox is 3.6.13.

Solution

This behavior has been tested and filed in Cisco bug ID CSCtn93915 (registered customers only) . As a workaround, you can try any of these described options.

  • Uninstall AnyConnect, upgrade Firefox and then install AnyConnect again.

  • Uninstall the current version of firefox then install the new version. All other upgrades after this should work fine.

Web-based Installation of AnyConnect Hangs

The authentication phase works fine but the VPN system hangs at the Using Sun Java for installation phase.

Solution

The issue could be with the Java and Web applet settings on the machine. Sometimes, Java gets stuck when you use the web launch with MAC machine. Refer to Cisco bug ID CSCtq86368 (registered customers only) for more information. In order to resolve this issue, follow the below steps.

  1. Uninstall AnyConnect.

  2. Open Java preferences.

  3. Change to run applets in their own process.

  4. Drag the 32 bit Java on top.

    If this does not help, upgrade the AnyConnect client to the latest available release.

Unable to Launch AnyConnect on MAC

You are unable to launch AnyConnect on the MAC machine due to certain incompatible software. What are other options to use this MAC machine as a remote access VPN client?

Solution

Refer to What options do I have for providing remote access to Mac users? for more information. Refer to IPSec VPN client for Apple MAC for more information and complete details.

Not

Unable to Download the MAC AnyConnect Package

There are issues when you download the AnyConnect for MAC software from Cisco.com.

Solution

Anyconnect Was Not Able To Establish Gateway Password

Open the Cisco AnyConnect VPN Client home page and click on Download Software (registered customers only) on the right hand side of the web page. Choose the required software package and download with valid Cisco user credentials.

Cisco Anyconnect Was Not Able To Establish

Related Information