Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I am trying to make two different ikev2 profiles for two different group of users. I am trying to distinguish between them based on the serial number of certificate. However any certificate that is issued by the CA always fall under the first profile...
Hi there,I am trying to make a FlexVPN AnyConnect-EAP with local authentication using both user and certificate working. However if I use only local user authentication it works but I am not able to make the certification part working. I am still get...
So as @Rob Ingram suggested, I tried to make only certificate authentication with name-mangler. However I am not very successful here as well. Any idea what is wrong?Config aaa new-model
aaa authentication login AUTHEN local
aaa attribute list TEST-...
@Rob Ingram Since I am not able to make it work with the user name I would say certificate would be sufficient if the name-mangler works correctly. This is my config which is not working: crypto ikev2 profile VPN-INT
match identity remote key-id ...
Name looks correct. I had there "no crypto ikev2 http-url cert" all the time so nothing has changed. If I remove "match identity remote key-id *$AnyConnectClient$*" I am not able to connect at all.
