I ran into the same issue. It seems that the new version no longer supports these features. Version 15.x seems to work.

Hi, I have managed to resolve the issue with the certificate, I always use the domain name (in both side configuration) and it matches the domain name in the certificate.Now the anyconnect client can successfully authenticate to my ISR-4331 router. F...

I have the exactly same problem.

I tried this solution, but it does not work under Cisco Secure Client 5.0.00246 and IOS-XE 17.03.05.After successful EAP-MD5 authentication, anyconnect client strangely additionally requests to authenticate with pre-shared key (for id IKE_IDENTITY), ...

Hi, Mathrew, It seems like a bug.My ISR1921 also has this problem, the "no ip dhcp client request ..." commands take no effect.