As a good Administrator should, I have two user accounts. One as an ordinary user and one Admin Account. We have all our Services running in the Microsoft Cloud and of course I do not want to fill out my credentials every time I open my browser or do stuff in Private Browser sessions. Although tearing it down, we still have some servers Onprem and to access those I need a VPN Connection to our Cisco ASA appliance (I live on Aruba and our office sits on Curacao). It took me some trial and error to get things going…… with my Virtual Admin Machine.
@Home I have a simple Wi-Fi set up and as we all know by now, running a Virtual Admin Machine just over a Wireless Network Adapter is no great success. The proper way to set that up is as follows:
In Hyper-V Manager, create a new Internal Switch:
Assign the Network Adapter of the VM to that Internal Switch:
Go to Network and Sharing center on the Host, click properties on the Wireless Adapter and hit the Sharing Tab and share it with the Internal Switch:
At this point the Cisco AnyConnect Secure Mobility Client (3.1) on the Host refuses to connect over the Wi-Fi connection because the adapter is being shared. Bummer. There is probably a workaround for that but I want my Admin stuff not on the Host but on the VM. So this is just a note.
I installed the Cisco AnyConnect Secure Mobility client in the VM and tried to connect. Bummer……. The client refuses to connect out of a RDP Session. I used my favorite Search Engine:
- There is a client config file on the local machine -> not so
- In the ASDM Console connected to the Cisco ASA Appliance there is Node called “Client Profile Settings -> not so
- Both the ASDM Console and the ASA OS are outdated, downloading the latest version -> (Cisco) accountname + pw -> not documented…..
So, I tried starting at the other end, the VM. How come “RDP”? Am I not connected to the Console in the “Virtual Machine Connection”? My favorite Search Engine again: A “cool” feature of Windows 8.1 Hyper-V is “Enhanced Session Mode”. By default this is set to “Enabled”. It allows for RDP-like experience in the Virtual Machine, redirection of drives etc. There are three places where you should look:
And in the Virtual Machine Connection Window:
Unchecking the “Enhanced Session” in the Virtual Machine Connection did the trick. The Cisco AnyConnect Secure Mobility Client now connects through my Shared Wi-Fi Connection!
All in a days work………