Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-11
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring AnyConnect VPN Client Connections
Configuring AnyConnect Connections
• Enabling IPv6 VPN Access, page 1-23
Configuring the ASA to Web-Deploy the Client
The section describes the steps to configure the ASA to web-deploy the AnyConnect client.
Prerequisites
Copy the client image package to the ASA using TFTP or another method.
Detailed Steps
Command Purpose
Step 1
anyconnect image filename order
Example:
hostname(config-webvpn)#anyconnect image
anyconnect-win-2.3.0254-k9.pkg 1
hostname(config-webvpn)#anyconnect image
anyconnect-macosx-i386-2.3.0254-k9.pkg 2
hostname(config-webvpn)#anyconnect image
anyconnect-linux-2.3.0254-k9.pkg 3
Identifies a file on flash as an AnyConnect client package file.
The ASA expands the file in cache memory for downloading to
remote PCs. If you have multiple clients, assign an order to the
client images with the order argument.
The ASA downloads portions of each client in the order you
specify until it matches the operating system of the remote PC.
Therefore, assign the lowest number to the image used by the
most commonly-encountered operating system.
Note You must issue the anyconnect enable command after
configuring the AnyConnect images with the anyconnect
image xyz command. If you do not enable the anyconnect
enable command, AnyConnect will not operate as
expected, and show webvpn anyconnect considers the
SSL VPN client as not enabled rather than listing the
installed AnyConnect packages.
Step 2
enable interface
Example:
hostname(config)# webvpn
hostname(config-webvpn)# enable outside
Enables SSL on an interface for clientless or AnyConnect SSL
connections.
Step 3
anyconnect enable
Without issuing this command, AnyConnect does not function as
expected, and a show webvpn anyconnect command returns that
the “SSL VPN is not enabled,” instead of listing the installed
AnyConnect packages.
Step 4
ip local pool poolname startaddr-endaddr
mask mask
Example:
hostname(config)# ip local pool vpn_users
209.165.200.225-209.165.200.254
mask 255.255.255.224
(Optional) Creates an address pool. You can use another method
of address assignment, such as DHCP and/or user-assigned
addressing.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English