topic Enabling DTLS with AnyConnect (SSL) Connection in Network Security

Enabling DTLS with AnyConnect (SSL) Connection

rachelau_2005 — Mon, 11 Mar 2019 15:56:05 GMT

I am trying to enabling DTLS for specific groups on ASA 5510.

however, when i type this :

asa-A(config)# webvpn

asa-A(config-webvpn)# svc ?

webvpn mode commands/options:

enable Enable SSL VPN Client

image SSL VPN Client package file path

profiles AC profiles package filepath.

it doesnt seem to support the command svc dtls enable

any idea?

Thanks

Rachel

mchin345 — Thu, 23 Jul 2009 21:46:52 GMT

To enable DTLS globally for a particular port, use the dtls port command:

[no] dtls port port_number

To enable DTLS for specific groups or users, use the svc dtls enable command in group policy webvpn or username webvpn configuration mode:

[no] svc dtls enable

lbarraza — Fri, 25 Sep 2020 16:32:59 GMT

For ASA 5545-x the command that we used were:

ASA(config)# group-policy <Connection Profile name> attributes

You can use the "sh run group-policy" command to verify what group policy attributes you want to enable dtls.

in our case we used.

ASA(config)# group-policy sslvpn attri

ASA(config-group-policy)#webvpn

ASA(config-group-webvpn)#anyconnect ssl dtls enable
To verify dtls is enabled

ASA(config-group-webvpn)# do sh run group-policy <connection profile>