topic Re: AnyConnect change Gateway in Routing and SD-WAN

AnyConnect change Gateway

gerardothink — Thu, 11 Jul 2019 20:09:52 GMT

Good Afternoon!

Can somebody please help me change the gateway for AnyConnect, I have setup AnyConnect on a ASA5506-X

I am able to connect to the Firewall

My Firewall Assigns to me the IP Address of:

IP Address: 192.168.208.156

Subnet Mask: 255.255.255.0

Gateway: 192.168.208.1

but my gateway is not 192.168.208.1 the correct gateway is 192.168.208.111 how can I change this on the running-config :S

Thank you

your help will be greatly appreciate it

Re: AnyConnect change Gateway

Alan Ng'ethe — Fri, 12 Jul 2019 03:12:38 GMT

How can I specify a default gateway for AnyConnect users with a local IP pool?

Re: AnyConnect change Gateway

Richard Burts — Fri, 12 Jul 2019 15:17:45 GMT

The value of the default gateway really does not matter to the AnyConnect client. The default gateway is significant when we deal with physical addresses and traditional IP subnets. But the AnyConnect client is dealing with a virtual interface and does not need a default gateway. The AnyConnect client is treating the VPN session very much like a point to point link, where you are not necessarily interested in the IP of the next hop. (think for example of this ip route 0.0.0.0 0.0.0.0 serial0/0. There is no need for a next hop address or a default gateway address.) The routing logic of the AnyConnect client is that all "interesting" traffic will be sent to the upstream peer using the encrypted link. That encrypted link uses the peer address and does not use any default gateway. Lots of software stacks expect an IP interface to have a default gateway and so Cisco typically will set the value of the default gateway to the first IP in the subnet of the address pool. But AnyConnect does not use that default gateway and it really does not make any significant difference whether the value of default gateway in the client matches the default gateway of the upstream peer or not.

HTH

Rick

Re: AnyConnect change Gateway

gerardothink — Fri, 12 Jul 2019 16:18:10 GMT

Thank you very much!

Re: AnyConnect change Gateway

gerardothink — Fri, 12 Jul 2019 16:18:21 GMT

Thank you very much!

Re: AnyConnect change Gateway

Richard Burts — Fri, 12 Jul 2019 18:56:25 GMT

I am glad that our suggestions have been helpful. Thank you for marking this question as solved. This will help other participants in the community to identify discussions which have helpful information. This question is about an aspect of AnyConnect that is not widely discussed and I think other participants will benefit from it. This community is an excellent place to ask questions and to learn about networking. I hope to see you continue to be active in the community.

HTH

Rick