On this page:

Download Anyconnect For Mac

Primer

Download Cisco AnyConnect VPN for Mac OS X, El Capitan, Sierra, High Sierra, Mojave First of all download the Cisco AnyConnect VPN client for Mac from the official website. Once downloaded find and open the file. The AnyConnect Credentials in your active session are needed to download the software and log in. Start Cisco AnyConnect on your laptop. Copy the Host URL from the AnyConnect Credentials, paste it in the URL Connection box in the AnyConnect login window, and then click Connect.

• This guide will assist with the installation of the Cisco AnyConnect VPN client for OS X 10.6 and later
• You need administrator level account access to install this software.
• Note: Some screen shots may be slightly different from what you see depending on the version of your operating system and the VPN software.

Installation

1. Download the VPN installer from MIT's download page, Cisco AnyConnect Secure Mobility Client for MAC (certificates required).
2. Find and open the downloaded file.
   
3. The file will mount a disk image. Open this disk image and launch the file named 'anyconnect-macosx-XXXXXX'.
   
4. On the following screen titled Welcome to the AnyConnect Secure Mobility Client Installer, click Continue.
   
5. When presented with the software license agreement, click Continue then click Agree on the slide-down menu.
   
6. If you are prompted 'Select a Destination...', select your primary hard drive and click Continue.
   
7. On the window titled Standard Install..., click the button labeled Install and enter your computer username and password when prompted and click Install Software.
   Note: The user must be an administrator of the machine to install.
   Result: The VPN client will begin to install itself.
   
8. When the installation has competed, click the button labeled Close.
   

Initiating a Connection to VPN and to VPN using Duo

1. Cisco AnyConnect can be found in the Cisco folder located in the Applications folder (/Applications/Cisco/).
   
2. Navigate to /Applications/Cisco/ and open 'Cisco AnyConnect Secure Mobility Client'.
3. To authenticate with Duo, enter vpn.mit.edu/duo and click the button labeled Connect.
   
4. Enter your MIT username and password then click the button labeled OK.
   With Duo authentication, you will see a field asking for a Second Password.
   In this field you may type in one of the following options:
   
   1. push - Duo will send a push notification to your registered cell phone with the Duo Security mobile app installed
   2. push2 - Duo will send a push notification to your _second registered device with the Duo Security mobile app installed_
   3. sms - Duo will send an SMS to your registered cell phone
   4. Phone -Duo will call your registered phone
   5. Phone2 -Duo will call your second registered phone
   6. Yubikey - If you are using a Yubikey for authentication, make sure the Second Password field is highlighted and use your key. For instructions on using the Yubikey, please see How do I authenticate with a YubiKey?
   7. The one time code generated by your hardware token or the Duo Security mobile app (the code changes every 60 seconds)
      In this example, I entered 'push' in the Second Password field. I will receive a push notification on my cell phone, go to the Duo app and click Approve.
      
5. When prompted at the MIT's Virtual Private Network (VPN) screen, click the button labeled Accept to connect to MIT's Virtual Private Network.
   
6. Upon successful connection, Cisco AnyConnect will minimize itself and you will see the AnyConnect logo with a small lock in your menu bar just to the left of the time.
   

See Also

Cisco AnyConnect is the recommended VPN client for Mac. The built-in VPN client for Mac is another option but is more likely to suffer from disconnects.

Overview

Stanford's VPN allows you to connect to Stanford's network as if you were on campus, making access to restricted services possible. To connect to the VPN from your Mac you need to install the Cisco AnyConnect VPN client.

Two types of VPN are available:

• Default Stanford (split-tunnel). When using Stanford's VPN from home, we generally recommend using the Default Stanford split-tunnel VPN. This routes and encrypts all traffic going to Stanford sites and systems through the Stanford network as if you were on campus. All non-Stanford traffic proceeds to its destination directly.
• Full Traffic (non-split-tunnel). This encrypts all internet traffic from your computer but may inadvertently block you from using resources on your local network, such as a networked printer at home. If you are traveling or using wi-fi in an untrusted location like a coffee shop or hotel, you may wish to encrypt all of your internet traffic through the Full Traffic non-split-tunnel VPN to provide an additional layer of security.

You can select the type of VPN you want to use each time you connect.

Install the VPN client

1. Download the Cisco AnyConnect installer for Mac.
2. Double-click the InstallAnyConnect.pkg file to start the Cisco AnyConnect Installer wizard.
3. When the Welcome window displays, click Continue.
   
4. Select your hard drive as the destination where you want to install Cisco AnyConnect and then click Continue.
   
5. Click Install to perform a standard installation of the software.
   
6. At the prompt, enter your administrator account password for the Mac and click Install Software.
   
7. When the software has finished installing, click Close.
   

Connect to the Stanford VPN

Anyconnect 64 Bit Mac

1. To launch the VPN client, open your Applications folder and navigate to Cisco > Cisco AnyConnect Secure Mobility Client.app.
2. When prompted for a VPN, enter su-vpn.stanford.edu and then click Connect.
   
3. Enter the following information and then click OK:
   • Group: select Default Stanford split- tunnel (non-Stanford traffic flows normally on an unencrypted internet connection) or Full Traffic non-split-tunnel (all internet traffic flows through the VPN connection)
   • Username: your SUNet ID
   • Password: your SUNet ID password
   
   
4. Next, the prompt for two-step authentication displays.
   • Enter a passcode or enter the number that corresponds to another option(in this example, enter 1 to authenticate using Duo Push on an iPad). You may have to scroll down the list to see all of your options. Then click Continue.
   • If your only registered authentication method is printed list, hardware token, or Google Authenticator, the menu does not display. Enter a passcode in the Answer field and click Continue.
     
5. Click Accept to connect to the Stanford Public VPN service.
   
6. Once the VPN connection is established, the Cisco AnyConnect icon with a small lock appears in the dock.
   

Disconnect from the Stanford VPN

1. Click the Cisco AnyConnect icon with a small lock.
2. At the prompt, click Disconnect.