Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to setup AnyConnect VPN Client with Cisco ISR G2 IOS Router?

Hello


I have been veryfing for AnyConnect VPN client with Cisco 2911 IOS Router which
configred in SSL-VPN. I have already installed the following AnyConnect VPN client in Test PC.

-------------------------------------------------------------------------

anyconnect-win-3.1.05170-pre-deploy-k9.msi

-------------------------------------------------------------------------

And I have also configured SSL-VPN in Cisco 2911 Router and installed pkg file below.

-------------------------------------------------------------------------

anyconnect-win-3.1.05170-k9.pkg

-------------------------------------------------------------------------

However if I checked with Firefox SSL3.0 support browser then it shows the Server html file
but if I check with AnyConnect VPN client application tool then it can not be successful.

I appreciate if there is any related information, here is the topology, configuration and
verification result.

[Toplogy]

-----------------------------------------------------------------------------------------------------------------

PC with AnyConnect VPN Client ----- Gi0/1 Cisco 2911 Gi0/0 ----------- Server
                       .1  10.0.20.0/24                192.168.1.0/24  .1 

IOS Ver : 15.3(3)M with SEC license

-----------------------------------------------------------------------------------------------------------------

[Config summary]

aaa new-model
aaa authentication login default local
username TEST password 0 sslvpn
!
interface GigabitEthernet0/1
 description ##### SSL connection #####
 ip address 10.0.20.254 255.255.255.0
!
interface GigabitEthernet0/0
 description ##### Server connection #####
 ip address 192.168.1.254 255.255.255.0
!
webvpn gateway SSL-VPN
 ip address 10.0.20.254 port 443
 ssl trustpoint TP-self-signed-2787629943
 inservice
 !
webvpn context SSL-VPN
 gateway SSL-VPN
 !
 ssl authenticate verify all
 !
 url-list "InternalWebserver"
   url-text "Web" url-value "192.168.1.1"
 inservice
 !
 policy group default
   url-list "InternalWebserver"
 default-group-policy default

-----------------------------------------------------------------------------------------------------------------

[package installation]

C2911#sh flash
-#- --length-- -----date/time------ path
1     95701228 Jul 15 2014 11:38:42 +00:00 c2900-universalk9-mz.SPA.153-3.M.bin
2     35380792 Jul 15 2014 11:40:16 +00:00 anyconnect-win-3.1.05170-k9.pkg

2911#conf t
C2911(config)#webvpn install svc flash:anyconnect-win-3.1.05170-k9.pkg
SSLVPN Package SSL-VPN-Client (seq:1): installed successfully

C2911(config)#

C2911#sh run | be crypto vpn
crypto vpn anyconnect flash0:/webvpn/anyconnect-win-3.1.05170-k9.pkg sequence 1

C2911#sh flash:
-#- --length-- -----date/time------ path
1     95701228 Jul 15 2014 11:38:42 +00:00 c2900-universalk9-mz.SPA.153-3.M.bin
2     35380792 Jul 15 2014 11:40:16 +00:00 anyconnect-win-3.1.05170-k9.pkg
3            0 Jul 15 2014 11:53:54 +00:00 webvpn
4     35380792 Jul 15 2014 11:54:24 +00:00 webvpn/anyconnect-win-3.1.05170-k9.pkg

-----------------------------------------------------------------------------------------------------------------

[Connect from AnyConnect PC to https://10.0.20.254 using Firefox SSL3.0 Browser]

The result : Connection is OK and can see the server html file.

-----------------------------------------------------------------------------------------------------------------

[Connect from AnyConnect PC to https://10.0.20.254 using AnyConnect Secure Mobility Client]

The result : Connection is not OK, please see the attached file.

The message : The AnyConnect package on the secure gateway could not be located. You may be experencing network connectivity issues. Please try connecting again.

Any information is very appreciated. Thank you very much.

Best Regards,

Masanobu Hiyoshi

 

Everyone's tags (1)
1083
Views
0
Helpful
0
Replies