topic Re: AnyConnect no IP in Network Security https://community.cisco.com/t5/network-security/anyconnect-no-ip/m-p/1052879#M895241 <HTML><HEAD></HEAD><BODY><P>This isnt quite the fix but here is what I found out so far. During the setup wizard I created a connection profile called SSLvpn and made changes to that profile. </P><P></P><P>What I come to find out is that the system is actually strictly using the DfltGrpPolicy settings.</P><P></P><P>even if you look at the config above you will see Im trying to use the SSLvpn connection not the defaultgrppolicy. </P><P></P><P></P></BODY></HTML> Fri, 10 Oct 2008 18:28:00 GMT jstabl 2008-10-10T18:28:00Z AnyConnect no IP https://community.cisco.com/t5/network-security/anyconnect-no-ip/m-p/1052878#M895240 <P>I am trying to configure AnyConnect and I used ASDM to configure it the first time. </P><P>My error is when AnyConnect tries to establish VPN it comes back with an error "No Assigned Address"</P><P></P><P>I pointed the Policy Group to the IP Pool and everything appears right in the config. ASA 5510 with version 8.03 and AnyConnect version 2.2</P><P></P><P>webvpn</P><P> enable outside</P><P> svc image disk0:/anyconnect-win-2.2.0140-k9.pkg 1</P><P> svc enable</P><P>group-policy default internal</P><P>group-policy default attributes</P><P> wins-server value 10.1.1.25 10.1.1.21</P><P> dns-server value 10.1.1.25 10.1.1.21</P><P> vpn-tunnel-protocol IPSec</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value default_splitTunnelAcl</P><P> default-domain value legalplans.com</P><P> split-dns value legalplans.com</P><P>group-policy DfltGrpPolicy attributes</P><P> webvpn</P><P> svc ask enable default webvpn timeout 10</P><P> file-entry disable</P><P> file-browsing disable</P><P>group-policy RemoteSSLGrp internal</P><P>group-policy RemoteSSLGrp attributes</P><P> wins-server value 10.1.1.25 10.1.1.21</P><P> dns-server value 10.1.1.25 10.1.1.21</P><P> vpn-tunnel-protocol svc webvpn</P><P> split-tunnel-policy tunnelspecified</P><P> split-tunnel-network-list value default_splitTunnelAcl</P><P> default-domain value legalplans.com</P><P> split-dns value legalplans.com</P><P> webvpn</P><P> url-list value Hyatt_Legal_Resources</P><P> svc dtls enable</P><P> svc ask enable default svc</P><P>username cisco password rSR3HnWu8SCJ8g2s encrypted privilege 15</P><P>tunnel-group DefaultRAGroup general-attributes</P><P> authentication-server-group RADIUS</P><P>tunnel-group DefaultWEBVPNGroup general-attributes</P><P> authentication-server-group RADIUS</P><P>tunnel-group default type remote-access</P><P>tunnel-group default general-attributes</P><P> address-pool ras</P><P> authentication-server-group RADIUS</P><P> default-group-policy default</P><P>tunnel-group default ipsec-attributes</P><P> pre-shared-key *</P><P>tunnel-group SSLvpn type remote-access</P><P>tunnel-group SSLvpn general-attributes</P><P> address-pool ras</P><P> authentication-server-group RADIUS</P><P> default-group-policy RemoteSSLGrp</P><P></P><P></P> Mon, 11 Mar 2019 13:56:09 GMT https://community.cisco.com/t5/network-security/anyconnect-no-ip/m-p/1052878#M895240 jstabl 2019-03-11T13:56:09Z Re: AnyConnect no IP https://community.cisco.com/t5/network-security/anyconnect-no-ip/m-p/1052879#M895241 <HTML><HEAD></HEAD><BODY><P>This isnt quite the fix but here is what I found out so far. During the setup wizard I created a connection profile called SSLvpn and made changes to that profile. </P><P></P><P>What I come to find out is that the system is actually strictly using the DfltGrpPolicy settings.</P><P></P><P>even if you look at the config above you will see Im trying to use the SSLvpn connection not the defaultgrppolicy. </P><P></P><P></P></BODY></HTML> Fri, 10 Oct 2008 18:28:00 GMT https://community.cisco.com/t5/network-security/anyconnect-no-ip/m-p/1052879#M895241 jstabl 2008-10-10T18:28:00Z Re: AnyConnect no IP https://community.cisco.com/t5/network-security/anyconnect-no-ip/m-p/1052880#M895244 <HTML><HEAD></HEAD><BODY><P>How are the users selecting the group to login? You need to define a way, group-url, tunnel drop down etc. Have a look at this:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808bd83d.shtml" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808bd83d.shtml</A></P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Sat, 11 Oct 2008 10:30:19 GMT https://community.cisco.com/t5/network-security/anyconnect-no-ip/m-p/1052880#M895244 Farrukh Haroon 2008-10-11T10:30:19Z