AnyConnect VPN in Cisco ASA

Web VPN Configuration:

webvpn
enable outside
anyconnect image disk0:/anyconnect-win-3.1.14018-k9.pkg 1 regex "Windows NT"
anyconnect image disk0:/anyconnect-macosx-i386-3.1.14018-k9.pkg 2 regex "Intel Mac OS X"
anyconnect image disk0:/anyconnect-linux-3.1.14018-k9.pkg 3 regex "Linux"
anyconnect image disk0:/anyconnect-linux-64-3.1.14018-k9.pkg 4 regex "Linux"
anyconnect image disk0:/anyconnect-linux64-4.4.03034-webdeploy-k9.pkg 5 regex "Linux"
anyconnect image disk0:/anyconnect-win-4.4.03034-webdeploy-k9.pkg 6 regex "Windows NT"
anyconnect image disk0:/anyconnect-macos-4.4.03034-webdeploy-k9.pkg 7
anyconnect profiles COREBTS_client_profile disk0:/COREBTS_client_profile.xml
anyconnect profiles SSL-VPN-Profile disk0:/ssl-vpn-profile.xml
anyconnect enable
tunnel-group-list enable

Split Tunnel ACL Configuration:

access-list SPLIT_TUNNEL standard permit 10.16.0.0 255.255.0.0

Group Policy Configuration:

group-policy GroupPolicy_AnyConnect_Denville internal
group-policy GroupPolicy_AnyConnect_Denville attributes
wins-server none
dns-server value 10.16.1.22
vpn-tunnel-protocol ssl-client 
split-tunnel-policy tunnelspecified
split-tunnel-network-list value SPLIT_TUNNEL
default-domain value denv.org

Pool Configuration:

ip local pool asapool 192.168.254.11-192.168.254.199 mask 255.255.255.0

Tunnel Group Configuration:

tunnel-group AnyConnect_Denville type remote-access
tunnel-group AnyConnect_Denville general-attributes
address-pool asapool
default-group-policy GroupPolicy_AnyConnect_Denville
tunnel-group AnyConnect_Denville webvpn-attributes
group-alias AnyConnect_Denville enable

No NAT Configuration:

nat (inside,outside) source static any any destination static NETWORK_OBJ_192.168.254.0_24 NETWORK_OBJ_192.168.254.0_24 no-proxy-arp route-lookup

Dir Verification:

DBOE-ASA# dir
Directory of disk0:/
147 -rwx 6487517 06:25:36 Jun 26 2015 anyconnect-macosx-i386-2.5.2014-k9.pkg
148 -rwx 6689498 06:25:38 Jun 26 2015 anyconnect-linux-2.5.2014-k9.pkg
149 -rwx 4678691 06:25:38 Jun 26 2015 anyconnect-win-2.5.2014-k9.pkg

Was this article helpful?

Related Articles

Leave A Comment?