06-03-2008 12:41 AM - edited 02-21-2020 03:45 PM
I tried to setup a VPN SSL Client on ASA 5520 as stated in the link below:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008071c428.shtml
WebVPN works fine but the SSL VPN client refuses to install with the error: "The ssl vpn http response code received from the gateway indicates an error, contact your network administrator"
My environment:
- Cisco ASA 5520 v. 7.2(2)19,
- ASDM v. 5.2(2)
- SVC client: sslclient-win-1.1.4.179.pkg
- Desktop: Win XP
Note: I have only the sslclient-win-1.1.4.179.pkg, not the .zip file do I cannot install directly the client.
Please advise
06-03-2008 06:43 AM
Hello,Can you post the output of
debug webvpn tunnel
debug webvpn authentication
debug webvpn aaa
Regards
Farrukh
06-03-2008 07:04 AM
I do not have these debug options, this is what i have:
asa1# debug webvpn ?
<1-255>
chunk webvpn chunk debugging
cifs webvpn cifs debugging
citrix webvpn citrix debugging
failover webvpn failover debugging
html webvpn html debugging
javascript webvpn javascript debugging
request webvpn request debugging
response webvpn response debugging
svc webvpn svc debugging
transformation webvpn transformation debugging
url webvpn url debugging
util webvpn util debugging
xml webvpn xml debugging
asa1#
06-03-2008 08:27 AM
sorry those are the options for the IOS SSL VPN implementation, try the following:
debug webvpn request
debug webvpn response
debug webvpn svc
Regards
Farrukh
06-04-2008 01:21 AM
the problem is now resolved, I found the clue from the debug command (output attached) and from this: http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=General&topicID=.ee6b93a&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddfa59e
actually I did not put ip pool for the DefaultWebVPN tunnel, because I created another webvpn tunnel and i though the user i tested will use this tunnel.
now i have to see where to setup default gateway and dns server for svc users.
thanks for the support Farrukh
06-04-2008 03:49 AM
Its great that your problem is solved now. And thanks for sharing the debugs even after the problem was solved, for the benefit of all readers.
Regards
Farrukh
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: