have a small company with ASA5505 8.3.2/ASDM 6.4 - they would like to access their server files remotely, etc - so VPN... (right?)
(I went to school for networking but we just kinda flew through VPN configurations and specifics "because there are too many to try to teach, so you'll just learn it on the job." Now on the job, time to learn.)
Anyway, what's the best way to configure the VPN - SSL? IPSec? They want to connect windows 7 and 8 machines as well as iphones/ipads/android devices. Do you have to pay for the AnyConnect client software? There isn't a Cisco service contract for this account. What are my options? Can someone please help a guy setting up his first VPN? Thanks in advance...
No service contract hurts yo in a case like this - Smartnet on a 5505 is very inexpensive and entitles you to 24x7 Cisco TAC support.
That said, there is a VPN wizard in ASDM that does the heavy lifting for you. The type you want is SSL VPN. That will use the AnyConnect client. There isn't any cost for that software but to get the latest versions you need service contract. They update it quite regularly. A new major release (4.0) will be out later in November.
For mobile devices (iOS and Android) you will have to have the AnyConnect for Mobile license added. That runs about $100 list. Check the output of "show activation-key" to see if you have it already.
Maybe you can have them purchase both the mobile license and Smartnet support if it's needed. The license is permanent and Smartnet on a 5505 is only about US$100-200 per year depending on the current license type (i.e 10 user or unlimited). One troubleshooting session with the TAC is worth that cost.
So, I can still get the AnyConnect client software without a service contract, but it just won't be current version? I can't find it. When I go here to download the AnyConnect there is v5.x and v4.x and v4.x is for Linux/Mac and for v5.x it says I need service contract with login. Where do I find the older windows client download?
You are looking at the legacy and deprecated Cisco VPN client when you look at the version 4 and 5 software. It is used only for IKEv1 IPsec VPNs. The Windows client is still available for download (even though the End-of-Life announcement says it shouldn't be):
I'm still not getting anywhere. I guess I'm just not understanding so thanks for the patience. When I go to the link you provided and try to download I'm unable to. I get this message: (see attachement(s)).
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :