Anyconnect ssl VPN with android ICS

[Charlie Dick]

I have installed the Cisco app from Google and everything seems to work but I fail to connect. The installation and configuration following the documentations was a piece of cake but VPN connections "will not be established".  The error message --

System configuration settings could not be applied.  A VPN connection will not be established.

The VPN requires username and password plus client certificate for authentication.  Installing the certificate was no problem.

Additional information:

Profile details "There are no profiles currently on your device."

Anyone got an idea of the problem or how to progress from here.  I am using ICS (Android 4) on a Scroll Extreme.  The device is not rooted as this was not required for the client.

Thank you

Tearlach

[Jose L. Berlanga V.]

Can you put the show ver of your ASA???

Saludos,
Jose Luis B.
No te olvides de calificar si te sirvio la ayuda.
Please do rate if the given information helps.

[Charlie Dick]

Certainly,

ASA Version 8.4(2)

Tearlach

[Jose L. Berlanga V.]

Try to verify if you have AnyConnect for Mobile enable

Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 100            perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Active  perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

Security Contexts                 : 2              perpetual

GTP/GPRS                          : Disabled       perpetual

AnyConnect Premium Peers          : 50             perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 250            perpetual

Total VPN Peers                   : 250            perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual

Saludos,
Jose Luis B.
No te olvides de calificar si te sirvio la ayuda.
Please do rate if the given information helps.

[Javier Portuguez]

Hi,

So you basically installed the AnyConnect client for Android correct?

On the phone you need to add a new VPN connection which requires a description and a server address.

On the ASA you probably followed the correct steps since you found the configuration guide.

Are you able to connect from a computer?

Does it work without certificate authentication?

Are you using group-alias, group-url or certificate-mapping to find the correct tunnel-group?

Thanks in advance.

[Jose L. Berlanga V.]

Basically you just need create the profile in the android with the ip add of your asa, for your computer it's the same kind of config, you should use the ip and not the url like vpn.mycompany.com cause you need the certificate.

check this step in order to create the certificate and the vpn with anyconnect, it's easier with ASDM

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808efbd2.shtml

Saludos,
Jose Luis B.
No te olvides de calificar si te sirvio la ayuda.
Please do rate if the given information helps.

[Javier Portuguez]

I agree with Jose.

Please check the link that he provided and test from a computer, just to isolate any phone issue.

As mentioned above, for initial configurations the ASDM is a powerful tool.

Keep us posted.

[Charlie Dick]

Appologes for being slow in replying -- I have just moved house over the weekend.  Anyhow to answer your questions:

1: The portal profile is selected by URL i;e. portal.mycompany.com/portal12

2: The certificate is used for client authentication.  I have installed the certiicate on the tablet.

3: Using a computer and the anyconnect client I can successfully connect.

The problem is specific to the tablet.

Thanks

Tearlach

[Jose L. Berlanga V.]

But do you have the AnyConnect for Mobile option enable??? issue the show ver

Saludos,
Jose Luis B.
No te olvides de calificar si te sirvio la ayuda.
Please do rate if the given information helps.

[Charlie Dick]

Mobile is enabled.  My collegues Nextus tablets works.  What I need is a method to debug my scroll extreme tablet with ICS.

Tearlach

[tonywsmith]

It didn't work on my Samsung Alpha phone until I downloaded the Cisco Anyconnect ICS+ app.