EasyVPN client and HTTPproxy authentication on an ASA5505

kva · ‎06-07-2007

I am configuring a setup using ASA5505 at remote sites using easyvpn against a VPN3000. Futher I have to use inbound http proxy authentication for accessing a web-server on a DMZ zone on the remote ASA5505. I can get the two things to work indiviually, but not simultaniously. When I activate the easyvpn, the http proxy authentication stops working. I have searched the CCO for hours without finding any explanation.

Has anyone tried this setup?

regards

Keld Visti

bwilmoth · ‎06-13-2007

What IOS version you are running on ASA? check this bug-id:CSCsf14370

kva · ‎06-15-2007

Hi Bryan.

Thank you for your answer.

I am running 7.2.2 and I have NOT configured redirection for the authentication request. I have in the mean time found out that the real problem is that the http request actually is redirectet to https despite the fact that i have NOT configured "aaa authentication secure-http-client".

If I configure my static and access-list to allow HTTPS, the proxy auhtentication works on HTTPS.

I would expect the authentication to work on plain HTTP, but I am not able to find any bug info on this specific issue.

Keld Visti