Odd Cisco Anyconnect Issue

[skinnyl]

Hi all!

Hope this finds you well.

I've got a headscratcher on my work laptop.. it goes like this..

We have a vpn to an external service provider - this uses Cisco Anyconnect. It's always worked, but before Xmas it stopped working, saying it failed to connect. Looking into the Anyconnect logs I've found this error: 'no valid certificates available for authentication'. Went though troubleshooting with the external provider - all is fine their end. I have discovered the following..

• It won't work if I use my main wifi (192.168.1.x) or hardwire to my switch (with wifi off)
• It will work if I use my wifi guest network, same router (192.168.3.x)
• It will work if I tether to my mobile
• It will work on a totally different wifi network at a friends
• It will work on wifi/hardwire on my personal laptop

I've tried the Windows 10 network reset and the below cmds, various router reboots

At the command prompt (decline restarting your machine until you have entered the final command):

1. Type ipconfig /release and press Enter.
2. Type ipconfig /flushdns and press Enter.
3. Type ipconfig /renew and press Enter. (This will stall for a moment.)
4. Type netsh int ip reset and press Enter. (Don’t restart yet.)
5. Type netsh winsock reset and press Enter. (then restart)

Still a big no.

I feel there is something hanging over it that I just can't find it.

Before I resign to a reinstall, I don't suppose anyone has any leads!?

Cheers.

 

[ChrisD.]

• It won't work if I use my main wifi (192.168.1.x) or hardwire to my switch (with wifi off)

Guess here that your work network is also using this range (which is dumb). If you change the address range to 192.168.10.x/24 as an example, does it work?

 

[Deleted member 77746]

Does your work have a network address scheme of 192.168.1.x ?

 

[skinnyl]

So, the external provider uses 10.x.x.x. So I don't think it's a subnet thing - plus as mentioned, my home laptop connects to this vpn fine on the same network (192.168.1.x) as the work laptop. It seems isolated to the work laptop, but only on one network. IPs are different for wifi/hardwire on the work laptop, have tried new DNS too since I posted..