Need help on: Login Denied, unauthorized connection mechanism, contact your administrator

[adriancgreen]

Hi folks,

Seem to be having an issue trying to get Anyconnect work with SSL, it seems to work fine with IPsec but not SSL. The error message I am getting from the Anyconnect software is "Login Denied, unauthorized connection mechanism, contact your administrator"

DAP debug messages:

 DAP_TRACE: DAP_open: AE007F40
DAP_TRACE: Username: adrian, DAP_add_SCEP: scep required = [FALSE]
DAP_TRACE: Username: adrian, DAP_add_AC:
endpoint.anyconnect.clientversion="4.2.06014";
endpoint.anyconnect.platform="win";

DAP_TRACE: aaa["cisco"]["grouppolicy"] = "GroupPolicy_VPNSSL"
DAP_TRACE: aaa["cisco"]["username"] = "adrian"
DAP_TRACE: aaa["cisco"]["username1"] = "adrian"
DAP_TRACE: aaa["cisco"]["username2"] = ""
DAP_TRACE: aaa["cisco"]["tunnelgroup"] = "VPNSSL"
DAP_TRACE: aaa["cisco"]["sceprequired"] = "false"
DAP_TRACE: endpoint["application"]["clienttype"] = "AnyConnect"
DAP_TRACE: endpoint.anyconnect.clientversion = "4.2.06014"
DAP_TRACE: endpoint.anyconnect.platform = "win"
DAP_TRACE: Username: adrian, Selected DAPs: ,VPNSSL
DAP_TRACE: dap_process_selected_daps: selected 1 records
DAP_TRACE: Username: adrian, dap_aggregate_attr: rec_count = 1
SESS_Mgmt_FreeSessionFileLineFunc: unable to delete session from tree!
DAP_TRACE: Username: adrian, DAP_close: AE007F40

Any help or pointers would be appreciated.

Thanks

[JP Miranda Z]

Hi adriancgreen,

Check the DAP and make sure you have the Access Method setup as Both-Default-Web-Portal.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100597-technote-anyconnect-00.html#anc41

Error: "Login Denied , unauthorized connection mechanism , contact your administrator"

AnyConnect clients fail to connect to a Cisco ASA. The error in the AnyConnect window is "Login Denied , unauthorized connection mechanism , contact your administrator".

Solution

This error message occurs mostly because of configuration issues that are improper or an incomplete configuration. Check the configuration and make sure it is as required to resolve the issue.

Hope this info helps!!

Rate if helps you!! 

-JP-

[adriancgreen]

Hi JP Miranda Z,

Thanks for the reply, I'll try out your suggestion.

Adrian

[Mohammed al Baqari]

Get the output of debug webvpn anyconnect 127