Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

Tunnel-group-preference group-url - Issue

Hi,

We got Certificate to Connection profile Maps because iOS VPN configuration doesn't specify tunnel group.

So if certificate issuer is our Enterprise CA, connection is mapped to Connection Profile "iOS". It works great.

Now, we want an other connection profile for Windows 7 with AnyConnect: "Windows"

On "Windows" Connection profile, I configured a group URL : https://vpn.mycompany.com/Windows

I used the command "Tunnel-group-preference group-url" to let groupe URL take precedence if groupe URL and certificate map match different connection profiles.

On AnyConnect, I tried to connect to : "vpn.mycompany.com/Windows"

Certificates on Windows 7 are still issued by our Enterprise CA.

AnyConnect with Windows 7 is mapped to "iOS" Connection Profile.

Why is it not mapped to "Windows" following the group-url?

Cisco ASA version is 8.4.2.

Thanks for your help,

Patrick

1 REPLY
New Member

Hello, I also have the same

Hello,

 

I also have the same problem. I have configured a profile with url groups but when trying to connect using them with IPsec and certificates, the session is mapped to the default tunnel-group. 

 

Cisco ASA version 9.3, Anyconnect version 4.x 

 

Thank you,

George

 

723
Views
0
Helpful
1
Replies
CreatePlease to create content