ASDM not able to login via anyconnect.

[EdwinThoo]

Hi all,

I have done with my anyconnect vpn. but after  anyconnect vpn is connected, I can not connect to my asa5506-x using ASDM. i have added management-access inside and it was able to ping but still cannot access.

interface GigabitEthernet1/2
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/3
bridge-group 1
nameif inside-1
security-level 100
!
interface GigabitEthernet1/4
bridge-group 1
nameif inside-2
security-level 100
!
interface GigabitEthernet1/5
shutdown
bridge-group 1
nameif inside-3
security-level 100
!
interface GigabitEthernet1/6
shutdown
bridge-group 1
nameif inside-4
security-level 100
!
interface GigabitEthernet1/7
shutdown
bridge-group 1
nameif inside-5
security-level 100
!
interface GigabitEthernet1/8
shutdown
bridge-group 1
nameif inside-6
security-level 100
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
!
interface BVI1
nameif inside
security-level 100
ip address 192.168.108.1 255.255.255.0

I appreciate with your help.

Thanks.

[Rahul Govindan · Accepted solution]

There is a known limitation with BVI interfaces and management access via VPN. This is because you cannot apply the "http x.x.x.x x.x.x.x <BVI interface name>" command on the ASA. There is an open enhancement for this:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve82307/?reffering_site=dumpcr