cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
721
Views
5
Helpful
5
Replies

SSL VPN client error ...

dourix
Level 1
Level 1

I tried to setup a VPN SSL Client on ASA 5520 as stated in the link below:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008071c428.shtml

WebVPN works fine but the SSL VPN client refuses to install with the error: "The ssl vpn http response code received from the gateway indicates an error, contact your network administrator"

My environment:

- Cisco ASA 5520 v. 7.2(2)19,

- ASDM v. 5.2(2)

- SVC client: sslclient-win-1.1.4.179.pkg

- Desktop: Win XP

Note: I have only the sslclient-win-1.1.4.179.pkg, not the .zip file do I cannot install directly the client.

Please advise

5 Replies 5

Farrukh Haroon
VIP Alumni
VIP Alumni

Hello,Can you post the output of

debug webvpn tunnel

debug webvpn authentication

debug webvpn aaa

Regards

Farrukh

I do not have these debug options, this is what i have:

asa1# debug webvpn ?

<1-255>

chunk webvpn chunk debugging

cifs webvpn cifs debugging

citrix webvpn citrix debugging

failover webvpn failover debugging

html webvpn html debugging

javascript webvpn javascript debugging

request webvpn request debugging

response webvpn response debugging

svc webvpn svc debugging

transformation webvpn transformation debugging

url webvpn url debugging

util webvpn util debugging

xml webvpn xml debugging

asa1#

sorry those are the options for the IOS SSL VPN implementation, try the following:

debug webvpn request

debug webvpn response

debug webvpn svc

Regards

Farrukh

the problem is now resolved, I found the clue from the debug command (output attached) and from this: http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=General&topicID=.ee6b93a&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddfa59e

actually I did not put ip pool for the DefaultWebVPN tunnel, because I created another webvpn tunnel and i though the user i tested will use this tunnel.

now i have to see where to setup default gateway and dns server for svc users.

thanks for the support Farrukh

Its great that your problem is solved now. And thanks for sharing the debugs even after the problem was solved, for the benefit of all readers.

Regards

Farrukh

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: