cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1945
Views
5
Helpful
6
Replies

SSL VPN service groups

choclateer
Level 3
Level 3

                   Does anybody know how to change the order of the groups that are displayed at the SSL VPN sign in page? I am using an ASA-5520. Right now the anyconnect client group displays above the clientless SSL intranet group and I want it reversed.

1 Accepted Solution

Accepted Solutions

The elements in the drop-down-list are alphabetically sorted. If you prepend a number in front of your aliases, you can change the order:

tunnel-group MARKETING webvpn-attributes

  group-alias 2-MARKETING enable

...

tunnel-group SALES webvpn-attributes

  group-alias 1-SALES enable

Here "Sales" will be above "Marketing" because of the prefix in the alias. It's not very elegant, but it works.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

View solution in original post

6 Replies 6

choclateer
Level 3
Level 3

Cisco TAC said no you cannot adjust the order.

I used prefixes for the alias to control the order. Not that elegant, but it works.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

I am interested in any way it can be done. Tell me how please.

The elements in the drop-down-list are alphabetically sorted. If you prepend a number in front of your aliases, you can change the order:

tunnel-group MARKETING webvpn-attributes

  group-alias 2-MARKETING enable

...

tunnel-group SALES webvpn-attributes

  group-alias 1-SALES enable

Here "Sales" will be above "Marketing" because of the prefix in the alias. It's not very elegant, but it works.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

Thanks, that worked!

Hi,

Great answer Karsten

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking for a $25 gift card