config t
webvpn
svc image disk0:/anyconnect-win-2.0.0343-k9.pkg 1
! this is a customerized vpn profile, if client does not needed, you can remove the following line using cisco default
! svc profiles VitalProf disk0:/vpn-vig-tdc.xml
tunnel-group-list enable
enable outside
svc enable
exit
ip local pool SSLClientPool 192.168.100.1-192.168.100.50 mask 255.255.255.0
access-list NONAT extended permit ip 192.168.5.0 255.255.255.0 192.168.100.0 255.255.255.0
access-list vpnssl-split extended permit ip 192.168.5.0 255.255.255.0 192.168.100.0 255.255.255.0
nat (inside) 0 access-list NONAT
username userA password test123
username userA attributes
service-type remote-access
exit
username userB password test12345
username userB attributes
service-type remote-access
exit
group-policy SSLCLientPolicy internal
group-policy SSLCLientPolicy attributes
dns-server value 192.168.1.51 192.168.1.61
wins-server value 192.168.1.51 192.168.1.61
address-pools value SSLClientPool
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpnssl-split
webvpn
vpn-tunnel-protocol svc
svc keep-installer installed
!svc profiles value VitalProf
exit
sysopt connection permit-vpn
tunnel-group SSLClientProfile type remote-access
tunnel-group SSLClientProfile general-attributes
default-group-policy SSLCLientPolicy
tunnel-group SSLClientProfile webvpn-attributes
group-alias SSLVPNClient enable
exit
wr mem
wr stand
debug command
sh vpn-sessiondb svc,
please be noticed, the default license for asa for web vpn or ssl vpn is only 2, you need to notify the client for this license limitation
Sunday, March 7, 2010
Cisco Anyconnect sample config
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment