Yosemite, iPhone Hotspot and Cisco AnyConnect

Question

Yosemite, iPhone Hotspot and Cisco AnyConnect

We seem to have an issue with Cisco Anyconnect, Yosemite and iPhone hotspots, only when you add them all together.

Using the iPhone as a hotspot, works fine. As soon as you connect the VPN, using Cisco Anyconnect Mobility Client, all network traffic stops, you cant ping anything, local or on the web.

Now, if we connect to a android phone as a hotspot, or a different wireless network, and use Cisco Anyconnect, it works fine, no issues.

This has only started to happen when we updated to Yosemite. When we use the iPhone as a hotspot and have VPN connected etc/resolv.conf cant be found. Disconnect the VPN, or use an android phone, any other network connection and it can be found!

The iPhone is up to date, Yosemite is up todate and so is the Cisco client.

Any ideas?

Posted on Nov 12, 2014 1:47 AM

Reply

Answer 1

Nov 18, 2014 3:59 AM in response to gavinfromdurham

Even after the updates for iPhone and OS X we are still having problems.

Reply

Answer 2

jbillen

Level 1

0 points

Nov 21, 2014 9:23 AM in response to gavinfromdurham

Same issue here. I find it disappointing that I must run Windows on my Mac in order to achieve this functionality.

Reply

Answer 3

Dec 8, 2014 1:39 AM in response to jbillen

Even after the updates to iPhone, yosemite and Annyconnect we still have the same issues.

Reply

Answer 4

Jan 7, 2015 5:17 AM in response to gavinfromdurham

Still nothing from Apple?

Reply

Answer 5

Jan 12, 2015 12:35 PM in response to gavinfromdurham

All - I have a solution for this problem.

In your AnyConnect Group Policy, go to Advanced > Split Tunneling

for "DNS Names" uncheck "inherit" and manually define your LAN's internal DNS domain name.

for "Send All DNS Lookups Through Tunnel" uncheck "inherit" and manually select "no".

For reasons I've not yet figured out, Yosemite does not like tunneling all DNS lookups through the tunnel.

If this is a sticking point for your environment, you may need to define a separate Group Policy for your OS X users until Cisco/Apple figure out their bug.

Good luck!

-Tim

Reply

Answer 6

Jan 27, 2015 12:42 PM in response to gavinfromdurham

Here's the fix: You need to disable IPV6 on the mac.

open a terminal

type this on one line:

networksetup -setv6off Wi-Fi

That will disable IPV6. Now it works.

This is a Verizon problem only. AT&T doesn't give IPV6 addresses to the tethered computer. But Verizon does.

Eric

Reply

Answer 7

Feb 6, 2015 12:50 AM in response to quadrinary

so, you are talking about setting up Cisco ASDM server machine, which serves client's AnyConnect? Its better to find out way to solve it on client side, because server side is not available to set up

Reply

Answer 8

Feb 6, 2015 12:56 AM in response to Rosebud-YT

this way does not work for me, everything like it was before. as i understand the problem is about whole yosemite series and iphone hotspot, and lots of operators around the world

Reply

Answer 9

Mar 6, 2015 3:14 PM in response to gavinfromdurham

Same Problem ...

iPhone5S iOS 8.1.3 on AT&T + Hotspot + Mac Book Pro running Yosemite 10.10.2 + AnyConnect 3.1.04072, using split tunneling. Does not work through iPhone's Hotspot.

Reply

Answer 10

Mar 12, 2015 6:44 AM in response to gavinfromdurham

I think tethering + AnyConnect is working for me again with the recent iOS 8.2 update!

Reply

Answer 11

Apr 14, 2015 3:24 AM in response to gavinfromdurham

Hi,

I just wondered if anyone had found a solution to this issue? I have macbook pro with Yosemite and iphone which I use as a hotspot and i really need to be able to vpn to work for out of hours support work, this issue is making it impossible though atm.

Andy.

Reply

Answer 12

Apr 15, 2015 8:02 AM in response to andyh_1983

Not from me. A possible Cisco ASA update may resolve the problem, but thats very expensive and time consuming.

I think its all down to apple maybe forcing the iPhone to use ipv6. On the Cisco ASA, (depending on the version your network has) It will just drop any ipv6 traffic. Unless you specify it to allow it through.

I haven't tested this, but on the Cisco forums, people are saying its worked for them.

We are looking at alternative VPNs.

Reply

Answer 13

Oct 22, 2015 7:11 AM in response to Rosebud-YT

> networksetup -setv6off Wi-Fi

This fix worked for me. Note that my iPhone is on AT&T.

AnyConnect 3.1

osx 10.11

iOS 7.1.2

Reply