SSL VPN: Anyconnect client fails to install

Unanswered Question
Dec 4th, 2007


I have a 2801 with 12.4(15)T1 advanced IP servcies image installed.

I can download the Anyconnect client from the WebVPN portal however the isntall fails. The debug from the 2801 gives me the following:

001211: *Dec 4 07:31:26.899 UTC: WV-TUNL: Tunnel CSTP Version recv use 1

001212: *Dec 4 07:31:26.899 UTC: WV-TUNL: Allocating tunl_info

001213: *Dec 4 07:31:26.899 UTC: WV-TUNL: Allocating stc_config

001214: *Dec 4 07:31:26.899 UTC: WV-TUNL: Allocating address from local pool

001215: *Dec 4 07:31:26.899 UTC: WV-TUNL: Cannot find IDB for IP address in table 0

001216: *Dec 4 07:31:26.899 UTC: WV-TUNL: Returning address to pool

001217: *Dec 4 07:31:26.899 UTC: WV-TUNL: Failed to config IP addr ( to VRF Table (0)

001218: *Dec 4 07:31:26.899 UTC: HTTP/1.1 401 Unauthorized

Can anyone shed some insight into what this debug means?

It's mentioning VRF but I do not have VRF configured and I'm strugglign to understand why I'd need it.



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Scott Cannon Tue, 12/04/2007 - 22:16

Hi All,

Further to this, I've attempted circumventing this issue by downloading the Anyconnect client and installing it manually on the remote machine.

Now when the machine attempts a conenction (and fails) I see the following debug on the router:

000090: *Dec 5 06:58:17.067 UTC: %SSLVPN-5-HTTP_REQUEST_NOT_AUTHORIZED: vw_ctx: default_context vw_gw: WEBVPNGATE remot

e_ip: status: HTTP request without login cookie resource: /

Now what the heck is that telling me? I thought the authentication cookies were only used when authenticated via the webportal (ie. clientless mode)?




This Discussion