Issue of Cisco AnyConnect VPN access

We have configured a Cisco ASA 5505 with access AnyConnect.  It works very well.  However, these users can't ping on the private network devices.  We have configured all devices on the network with an address 10.10.10.0/24 space.  The inside interface of the ASA I 10.10.10.1/24 and the VPN return addresses are 10.10.10.50 - 10.10.10.65/24.

They users can use SSH and Oracle or MySQL calls but can't ping.   Obviously, I'm looking for something.

Thank you.

Dwane

Hi Sylvie,.

Most likely, your ASA missing no. - nat between inside the interface and remote vpn-pool address range.

Quick Trobule shooting, thanks for posting your config and do not forget to remove the config security information.

What version of your ASA?

Thank you

Rizwan James

Tags: Cisco Security

Similar Questions

  • Cisco AnyConnect VPN Client maintains reconnection

    Hello

    We have recently installed an ASA5505 and activated the VPN access.

    Two of my colleagues have no problems connecting to the VPN using Cisco AnyConnect VPN Client, but I do.

    I am still disconnected after a few seconds with the message:

    "A VPN reconnect gave rise to different configuration settings. VPN network interface is to be reset. Applications using the private network may be required to restart. »

    Cisco AnyConnect VPN Client Version 2.5.2019

    I work with Windows 7 but the same thing happens when I try to connect using my computer that is running Windows Vista.

    My colleagues also using Win7

    I also tried to disable the Windows Firewall.

    Any help would be appreciated.

    Best regards

    Peter

    TAC has been able to solve the problem.   For webvpn mtu changed default from 1406 to 1200.

    Not sure why 2 other ASAs we work very well otherwise though!

    WebVPN
    SVC mtu 1200

  • Cisco AnyConnect VPN connection has not changed my public IP address on Windows 7 64 bit

    Hello

    I installed a customer Cisco AnyConnect VPN from my school, so that I can access school of my Windows 7 laptop at home network. I was able to connect, but when I used http://www.whatismyip.com/, it still shows the IP address assigned by my ISP.  The "network and sharing Center", I have my original LAN and LAN VPN upward but access to LAN VPN type is 'without Internet access. The VPN connection seems to have activities based on evolution bytes sent and received.

    I searched the Web for solutions and changed something like adding the entry door. But it did not help.

    Thanks for your help.

    Split tunnel is probably configured so that traffic destined to school networks pass through the VPN tunnel, and traffic destined to the Internet goes outward through your local ISP. That's why whatismyip show your public IP address from ISP.

  • CISCO ANYCONNECT VPN CISCO VPN CLIENT

    Hi, I was in the process of configuring cisco anyconnect vpn for ip phones to our local obtained the license for them either, the question that I get is that I already have remote configured cisco connect via the old cisco vpn client.

    now, if I activate the anyconnect ssl on the same outside the interface both can exist without conflict or maybe I need to migrate users to install the end customer for anyconnect system software to connect.

    I also need help with authentication of certification.

    concerning

    You can run both VPN at the same time without problems.

    However, you should try and migrate everyone to the latest technology Anyconnect SSL anyway.

  • Cisco AnyConnect VPN Client (connection attempt failed because the network or pc problem cisco)

    Hi all

    I am trying to connect to my Cisco AnyConnect VPN Client but everytime I try, I get an error (connection attempt failed because the network or pc problem cisco)

    Can anyone help me please with this.

    Thank you

    Zia

    What is the local firewall on your computer?

  • BlackBerry 10 BB10 actually supported Cisco AnyConnect VPN?

    I am confused when I click Cisco AnyConnect VPN gateway Type list, and then turned to BlackBerry World looking for Cisco AnyConnect. But he has not named any application. BB10 really takes it? or it is my mistake to miss. Help, please... Thank you.

    Hello

    Maybe you can check it out here:
    http://supportforums.BlackBerry.com/T5/BlackBerry-10-OS-device-software/Cisco-AnyConnect-VPN/m-p/303...

  • Cisco Anyconnect VPN client cannot establish a connection.

    Hello

    I am trying to connect to my server license from the University. I use 'Cisco Anyconnect VPN', but when it is goinh to initialize the connection it gives me the error "unable to establish a connection to the VPN client. At this point, the network of my Cisco anyconnect adapter gets disable automatically.

    I have no antivirus, and also it happens even when I turn off my firewall.

    Please help me solve this problem that prevents me from my all of the work!

    Thank you in advance.

    In addition to the advice of John I would also look at this document from Cisco for possible help...

    http://www.Cisco.com/image/gif/paws/100597/AnyConnect-VPN-Troubleshooting.PDF

    Cisco help as much as possible...

    http://www.Cisco.com/en/us/products/ps8411/tsd_products_support_series_home.html

    Its also possible you may have to run or reinstall the Cisco client in compatibility mode, if they do not have a version of Windows 7.

    http://Windows.Microsoft.com/en-us/Windows7/help/compatibility

    http://Windows.Microsoft.com/en-us/Windows7/open-the-program-compatibility-Troubleshooter

    http://Windows.Microsoft.com/en-us/Windows7/make-older-programs-run-in-this-version-of-Windows

    Otherwise contact your university network administrators may also be a viable option.

    MS - MVP Windows Expert - consumer
    "When all else fails try what the captain suggested before you started...". »

  • Cisco 1700 Setup as a hub for Cisco Anyconnect VPN

    The complete configuration for the router is attached. Additional configuration includes forwarding port 443 (the two tcp/udp), udp 4500, udp 500 and udp 50 to 192.168.1.20.

    Objective: Configure Cisco 1700 router as a VPN server, which a Cisco Anyconnect VPN client in. The VPN server is behind a NAT.

    Question 1: The Cisco Anyconnect client pulls its set of configuration of the router? I just need to point to the correct IP address and hit connect and it will do the rest? If not, what additional client side configuration must be done? I noticed, it tries to connect on port 443 to my router, but I don't really know why and I know that my router is not listening on this port, so I know I'm missing something:-D.

    Question 2: What are the features specifically include easy vpn server? I am confused as to exactly what it is. From what I can tell when you configure easy vpn server you simply set up a regular VPN.

    Question 3: Cisco Easy VPN remote has something to do with Cisco Anyconnect or they are completely distinct?

    Sorry for the newbie questions. It's really hard to understand the different systems and features on it and most of the examples I found dealt with the VPN router to router rather than configurations just for computers of end users, but I'll be the first to admit that I am new on this hahaha.

    Thanks for your help.

    PS: Any comment on the misconfigs are welcome. I'm still trying to understand fully exactly what each command does.

    Grant

    Grant,

    AnyConnect can do SSLVPN or IPsec (with IKEv2), ezvpn is all about IKEv1, it won't work.

    There (part 3) customers who will be able to connect to ezvpn, as well as the former customer Cisco VPN, but AC is not.

    BTW... it's not 50/UDP, this is IP protocol 50 (or sometimes 51) - ESP (or AH).

    You don't have TCP and UDP 443 for IPsec, but you may need them for SSL.

    And seriously... series of 1700? Wow, this is a 'retro' kit :-) Support ended 6 years ago.

    M.

  • Select the timeout on ASA Cisco Anyconnect VPN

    Hello world

    I use the Cisco Anyconnect VPN client with the ASA 5540 firewall. I need allow a time-out on the VPN clients, so they log off after x hours of inactivity.

    Thank you to

    Best respect

    Hello

    To my understanding of the default timeout value is 30 minutes

    You should be able to change this setting in the "username" configurations (if you use LOCAL AAA on the SAA) or under the configurations of the 'group policy' .

    The command is

    VPN-idle-timeout

    Here is the link of the commands reference

    http://www.Cisco.com/c/en/us/TD/docs/security/ASA/ASA-command-reference/...

    -Jouni

  • Deactivate the filter driver Cisco AnyConnect Network Access Manager

    I hope that it is the community just to post this in.

    I was wondering if it is possible to script disable the "Cisco AnyConnect Network Access Manager filter driver" for a LAN connection?

    By comparison to the registry before and after it is manually turned off via Control Panel control-> network and Internet-> network-> connection to the Local network connections, I came with:

    : remove the filter Cisco AnyConnect Network Access Manager driver
    : the list of filters for the LAN adapter
    reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\ {4D36E972-E325-11CE-BFC1-08002BE10318} \0007\Linkage /v FilterList/f

    : import the Cisco AnyConnect Network Access Manager filter driver
    : to the list of filters, excluding the LAN adapter
    Reg import linkage - no - lan.reg

    : remove the filter Cisco AnyConnect Network Access Manager driver
    : the network of the LAN adapter config
    reg delete HKLM\SYSTEM\CurrentControlSet\Control\Network /v /f Config

    : import the Cisco AnyConnect Network Access Manager filter driver
    : to the network with the exception of the LAN adapter config
    Reg import network - no - lan.reg

    : Remove the adapter LAN of the list of maps where the
    : Cisco AnyConnect Network Access Manager filter driver is used
    reg delete HKLM\SYSTEM\CurrentControlSet\services\acnamfd\Parameters\Adapters\ {77197E43-5875-469F-A3A5-A97F63A32E0A} /f

    This disables 'Cisco AnyConnect Network Access Manager filter driver' to connect to the local network, but it is not automatically to my wireless connection.  However, if I manually in a not checked the "Cisco AnyConnect Network Access Manager Filter Driver', the connection automatically changes my wireless.

    The end result, I'm looking for must be able to use a wireless connection and at the same time be able to use the connection to the local network, when I connect directly to some work equipment to download the firmware files.

    Any thoughts would be greatly appreciated.

    Thank you.

    Hi Paul,.

    Instead of hacking the registry, you can use nvspbind.exe for this task.  You can download the tool here.  It will be also NAM automatically mode interfaces.

    https://Gallery.technet.Microsoft.com/Hyper-V-network-VSP-bind-cf937850

    Disable: nvspbind.exe /d "Wireless network connection" csco_acnamfd

    activate: nvspbind.exe/e 'Wireless network connection' csco_acnamfd

    Thank you.

  • Unable to connect to the Internet, the error message "Cisco AnyConnect VPN agent service is not responding. Please restart this application after a minute"

    Original title: unable to connect to the internet

    Whenever I connect to my computer and get it on my desk, it goes on to say that Cisco AnyConnect VPN Service not available. How can I fix? I am not connected to the internet and I can't connect to the internet as well. He said also Cisco AnyConnect VPN service agent is not an answer. Please restart this application after a minute. Also, I can't use my firewall for some reason, if I try to allow its loading and the greenbar's going that far - then stops and says that there is an error. I forgot where I tried to activate.

    Oh thanks for the help but I fix it myself. I just did a system restore to a month before

  • Setup for use with Cisco Anyconnect VPN IPsec

    So, I had trouble setting up VPN on our ASA 5510. I would use IPsec VPN so that we don't have to worry about licensing issues, but what I have read you can do with and always use Cisco Anyconnect. My knowledge on how to set up VPN especially in iOS version 8.4 is limited, so I've been using a combination of command line and ASDM.

    I am finally able to connect from a remote location, but once I log in, nothing else works. What I've read, you can use IPsec for client-to-lan connections. I use a pre-shared for this. Documentation is limited on what should happen after have connected you? Shouldn't be able to local access on the vpn connection computers? I'm trying to implement work. If I have VPN from home, should not be able to access all of the resources at work? According to me, because I used the command-line as ASDM I confused some of the configuration. In addition, I think that some of the default policies are confused me too. So I probably need a lot of help. Here is my current setup with the changed IP address and other things that are not related to deleted VPN.

    NOTE: We are still testing this ASA and is not in production.

    Any help you can give me is greatly appreciated.

    ASA Version 8.4 (2)

    !

    ASA host name

    domain.com domain name

    !

    interface Ethernet0/0

    nameif inside

    security-level 100

    the IP 192.168.0.1 255.255.255.0

    !

    interface Ethernet0/1

    nameif outside

    security-level 0

    IP 50.1.1.225 255.255.255.0

    !

    interface Ethernet0/2

    Shutdown

    No nameif

    no level of security

    no ip address

    !

    interface Ethernet0/3

    Shutdown

    No nameif

    no level of security

    no ip address

    !

    interface Management0/0

    No nameif

    security-level 100

    IP 192.168.1.1 255.255.255.0

    !

    boot system Disk0: / asa842 - k8.bin

    passive FTP mode

    DNS domain-lookup outside

    DNS server-group DefaultDNS

    !

    permit same-security-traffic intra-interface

    !

    network of the NETWORK_OBJ_192.168.0.224_27 object

    subnet 192.168.0.224 255.255.255.224

    !

    object-group service VPN

    ESP service object

    the purpose of the tcp destination eq ssh service

    the purpose of the tcp destination eq https service

    the purpose of the service udp destination eq 443

    the destination eq isakmp udp service object

    !

    allowed IP extended ip access list a whole

    !

    mask 192.168.0.225 - 192.168.0.250 255.255.255.0 IP local pool VPNPool

    no failover

    failover time-out period - 1

    ICMP unreachable rate-limit 1 burst-size 1

    ASDM image disk0: / asdm - 645.bin

    don't allow no asdm history

    ARP timeout 14400

    NAT (inside, outside) static source any any static destination NETWORK_OBJ_192.168.0.224_27 NETWORK_OBJ_192.168.0.224_27 non-proxy-arp-search to itinerary

    !

    the object of the LAN network

    NAT dynamic interface (indoor, outdoor)

    Access-group outside_in in external interface

    Route outside 0.0.0.0 0.0.0.0 50.1.1.250 1

    Sysopt noproxyarp inside

    Sysopt noproxyarp outdoors

    Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac

    Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac

    Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac

    Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac

    Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac

    Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac

    Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac

    Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac

    Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac

    Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac

    Crypto ipsec ikev2 ipsec-proposal OF

    encryption protocol esp

    Esp integrity sha - 1, md5 Protocol

    Crypto ipsec ikev2 proposal ipsec 3DES

    Esp 3des encryption protocol

    Esp integrity sha - 1, md5 Protocol

    Crypto ipsec ikev2 ipsec-proposal AES

    Esp aes encryption protocol

    Esp integrity sha - 1, md5 Protocol

    Crypto ipsec ikev2 ipsec-proposal AES192

    Protocol esp encryption aes-192

    Esp integrity sha - 1, md5 Protocol

    Crypto ipsec ikev2 AES256 ipsec-proposal

    Protocol esp encryption aes-256

    Esp integrity sha - 1, md5 Protocol

    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set

    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF

    outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

    outside_map interface card crypto outside

    Crypto ca trustpoint ASDM_TrustPoint0

    registration auto

    name of the object CN = ASA

    Configure CRL

    crypto ca server

    Shutdown

    string encryption ca ASDM_TrustPoint0 certificates

    certificate d2c18c4e

    864886f7 0d06092a c18c4e30 308201f3 3082015c a0030201 d 020204 2 0d 010105

    0500303e 3110300e 06035504 03130741 53413535 3130312a 2 a 864886 30280609

    02161b 41 53413535 31302e64 69676974 616c 6578 7472656d 65732e63 f70d0109

    3131 31303036 31393133 31365a 17 323131 30303331 39313331 0d 170d 6f6d301e

    365a303e 3110300e 06035504 03130741 53413535 3130312a 2 a 864886 30280609

    02161b 41 53413535 31302e64 69676974 616c 6578 7472656d 65732e63 f70d0109

    6f6d3081 9f300d06 092 has 8648 86f70d01 01010500 03818d b 30818902-00-818100-2

    8acbe1f4 5aa19dc5 d3379bf0 f0e1177d 79b2b7cf cc6b4623 d1d97d4c 53c9643b

    37f32caf b13b5205 d24457f2 b5d674cb 399f86d0 e6c3335f 031d54f4 d6ca246c

    234b32b2 b3ad2bf6 e3f824c0 95bada06 f5173ad2 329c28f8 20daaccf 04c 51782

    3ca319d0 d5d415ca 36a9eaff f9a7cf9c f7d5e6cc 5f7a3412 98e71de8 37150f02

    03010001 300 d 0609 2a 864886 f70d0101 05050003 8181009d d2d4228d 381112a 1

    cfd05ec1 0f51a828 0748172e 3ff7b480 26c197f5 fd07dd49 01cd9db6 9152c4dc

    18d0f452 50f5d0f5 4a8279c4 4c1505f9 f5e691cc 59173dd1 7b86de4f 4e804ac6

    beb342d1 f2db1d1f 878bb086 981536cf f4094dbf 36c5371f e1a0db0a 75685bef

    af72e31f a1c4a892 d0acc618 888b53d1 9b 888669 70e398

    quit smoking

    IKEv2 crypto policy 1

    aes-256 encryption

    integrity sha

    Group 2 of 5

    FRP sha

    second life 86400

    IKEv2 crypto policy 10

    aes-192 encryption

    integrity sha

    Group 2 of 5

    FRP sha

    second life 86400

    IKEv2 crypto policy 20

    aes encryption

    integrity sha

    Group 2 of 5

    FRP sha

    second life 86400

    IKEv2 crypto policy 30

    3des encryption

    integrity sha

    Group 2 of 5

    FRP sha

    second life 86400

    IKEv2 crypto policy 40

    the Encryption

    integrity sha

    Group 2 of 5

    FRP sha

    second life 86400

    Crypto ikev2 activate out of service the customer port 443

    Crypto ikev2 access remote trustpoint ASDM_TrustPoint0

    Crypto ikev1 allow outside

    IKEv1 crypto policy 10

    preshared authentication

    3des encryption

    sha hash

    Group 2

    life 86400

    IKEv1 crypto policy 65535

    preshared authentication

    3des encryption

    sha hash

    Group 2

    life 86400

    Telnet timeout 5

    SSH timeout 10

    Console timeout 0

    management-access inside

    SSL-trust outside ASDM_TrustPoint0 point

    WebVPN

    allow outside

    AnyConnect image disk0:/anyconnect-win-2.5.2014-k9.pkg 1

    AnyConnect image disk0:/anyconnect-linux-2.5.2014-k9.pkg 2

    AnyConnect image disk0:/anyconnect-macosx-i386-2.5.2014-k9.pkg 3

    profiles of AnyConnect VPN disk0: / devpn.xml

    AnyConnect enable

    tunnel-group-list activate

    internal VPN group policy

    attributes of VPN group policy

    value of server WINS 50.1.1.17 50.1.1.18

    value of 50.1.1.17 DNS server 50.1.1.18

    Ikev1 VPN-tunnel-Protocol, l2tp ipsec ikev2 ssl-client

    digitalextremes.com value by default-field

    WebVPN

    value of AnyConnect VPN type user profiles

    always-on-vpn-profile setting

    privilege of xxxxxxxxx encrypted password username administrator 15

    VPN1 xxxxxxxxx encrypted password username

    VPN Tunnel-group type remote access

    General-attributes of VPN Tunnel-group

    address (inside) VPNPool pool

    address pool VPNPool

    LOCAL authority-server-group

    Group Policy - by default-VPN

    VPN Tunnel-group webvpn-attributes

    enable VPN group-alias

    Group-tunnel VPN ipsec-attributes

    IKEv1 pre-shared-key *.

    !

    class-map inspection_default

    match default-inspection-traffic

    class-map ips

    corresponds to the IP access list

    !

    !

    type of policy-card inspect dns preset_dns_map

    parameters

    maximum message length automatic of customer

    message-length maximum 512

    Policy-map global_policy

    class inspection_default

    inspect the preset_dns_map dns

    inspect the ftp

    inspect h323 h225

    inspect the h323 ras

    Review the ip options

    inspect the netbios

    inspect the rsh

    inspect the rtsp

    inspect the skinny

    inspect esmtp

    inspect sqlnet

    inspect sunrpc

    inspect the tftp

    inspect the sip

    inspect xdmcp

    inspect the http

    class ips

    IPS inline help

    class class by default

    Statistical accounting of user

    I would recommend buy AnyConnect Essentials. The cost of the license is nominal - list of US $150 for the 5510. (piece number L-ASA-AC-E-5510 =)

    Meawwhile you can use the Cisco VPN client inherited with IKEv1 IPSec remote access VPN using profiles *.pcf.

    I believe you can also use the client Anyconnect client SSL or DTLS transport access remotely (non-IPsec) without having to buy the license Anyconnect Essentials for your ASA focus.

    As an aside, note that if you want to use AnyConnect Mobile (e.g. for iPhone, iPad, Android, Blackberry etc.clients) you will also get the additional license for it (L-ASA-AC-M-5510 =, also price US $150)

  • Cisco Anyconnect VPN does not work in windows 7 64 bit

    Hello
    I found that the cisco anyconnect (version 3, any series) does not work in windows 7 (64-bit).
    The vpn is connected, but there is not any internet access.

    I tried to solve the problems of:

    -Disabling the firewall.

    -disable the anti-virus etc.

    But while I tried using with 32 bit, it works very well.

    Also, I found that there is not a specific version of anyconnect vpn for only 64-bit.

    Do any body have the idea how to solve this problem, either it's a bug of cisco vpn itself?

    Certainly, you just need to install a later version of AnyConnect.  You need a Cisco, for example a SmartNet maintenance contract, to download the new versions.

  • Cisco Anyconnect VPN vs IPSec AnyConnect SSL

    Hello

    Can someone tell me what is the difference between the Anyconnect SSL VPN and Anyconnect VPN IPSec.

    When we use one and not the other?

    Thank you very much.

    Best regards.

    Hello Abdollah,

    AnyConnect based on the SSL protocol is called Anyconnect SSL VPN and if you deploy Anyconnect with the IPSec protocol, it is called IKev2.

    AnyConnect (via IKEv2 or SSLVPN) does not use a pre shared key to authenticate the user.  A certificate will be used to authenticate the user and the ASA of + pass and the certificate used to authenticate the user.  The XML profile is necessary just to use the Anyconnect IKEv2 client rather than the default of SSL when connecting to the ASA.

    Here is the doc announced some of the benefits of using Anyconnect with Ikev2 rather than SSL VPN.
    http://www.Cisco.com/en/us/docs/iOS-XML/iOS/sec_conn_ike2vpn/configuration/15-2mt/sec-cfg-IKEv2-Flex.html#GUID-6548042E-1E4C-416A-8347-00DCF96F04DF

    In essence, if you have a simple deployment, then you can go with the installation of SSL VPN and if you want to take advantage of additional features, you can use Anyconnect with IPSec.

    Kind regards
    Dinesh Moudgil

    PS Please rate helpful messages.

  • ASA 5510 Anyconnect licenses with Cisco Anyconnect VPN IP phone

    Hi, hoping someone can shed some light on what I'm just more confused over trying to get by. Not sure if this goes in the section IP Telehpony or here...

    We have an ASA 5510 with the base license. We need to install IP phones to home teleworkers, and I understand there are Cisco IP phones that have built-in VPN clients to enable a tunnel to the central private network. IT seems that you can't use Anyconnect VPN to do this, and I am trying to establish what upgrade licenses, we must apply to the ASA, as both Anyconnect licenses that you get for free on the SAA is not enough.

    This is the phone that we seek;

    http://www.Cisco.com/en/us/prod/collateral/voicesw/ps6788/phones/ps10499/ps11005/data_sheet_c78-603725.html

    I want to know is the Anyconnect Essentials license will work with these IP phones?

    When I do a version of the show,

    The devices allowed for this platform:

    The maximum physical Interfaces: unlimited

    VLAN maximum: 50

    Internal hosts: unlimited

    Failover: disabled

    VPN - A: enabled

    VPN-3DES-AES: enabled

    Security contexts: 0

    GTP/GPRS: disabled

    SSL VPN peers: 2

    The VPN peers total: 250

    Sharing license: disabled

    AnyConnect for Mobile: disabled

    AnyConnect for Linksys phone: disabled

    AnyConnect Essentials: disabled

    Assessment of Advanced endpoint: disabled

    Proxy sessions for the UC phone: 2

    Total number of Sessions of Proxy UC: 2

    Botnet traffic filter: disabled

    This platform includes a basic license.

    It shows "AnyConnect for Linksys phone: Disabled", it is the same for the Cisco IP phones? It is the kind of specific license, should I seek for Anyconnect on IP phones or will Essentials?

    Hi Leo,

    you will need 2 licenses: an Anyconnect Premium license and a permit «Anyconnect of Cisco VPN phone»

    ASA 8.2 and earlier license "for Cisco VPN Phone" has been named "for phone Linksys' it's the same.

    CFR. http://www.Cisco.com/en/us/docs/security/ASA/asa84/license/license_management/license.html#wp1487574

    HTH

    Herbert

Maybe you are looking for