Hello,   I am trying to track when users connect to AnyConnect and also when they disconnect per a client request.  I know that the ASA will not show this history except for the current connections.  I have setup a syslog server and tried with message ID lists as well as class and only getting some logs when user disconnects.  Has anyone done this before or know the log ID to create the list?  I have tried searching the buffer as well to get the ID with no luck   Configuration below:   logging enable logging timestamp no logging hide username logging list VPN_Connections message 722022 logging list VPN_Connections message 722023 logging list VPN_Connections message 722024 logging list VPN_Connections message 722021 logging buffer-size 1048576 logging console informational logging monitor informational logging buffered informational logging trap VPN_Connections logging asdm informational logging host inside 10.0.20.7   and tried   logging enable logging timestamp no logging hide username logging buffer-size 1048576 logging console informational logging monitor informational logging buffered informational logging asdm informational logging host inside 10.0.20.7 logging class auth trap informational logging class vpnc trap informational logging class webvpn trap informational logging class svc trap informational ... View more

Hello, I am configuring two AP's with about 20% overlap and the request was to utilize radio 0(2.4) and 1(5) with different SSID's in guest mode and clients could choose which one to connect. There is CORP and GUEST on radio 0 and CORP_5G and GUEST_5G on radio 1.  CORP and CORP_5G on both radios use the same vlan 1 and GUEST and GUEST_5G on both radios use the same vlan 192.  I believe this should work unless cannot use the same VLAN's with different SSID's name across radios.  When they implemented 2.4 connected fine but was super slow and suppose B rates need to be disabled.  However, I was told radio 1 SSID's were not showing in the list and cannot confirm since was not part of implementation or testing.  Below is the configuration that will be the same on both AP's and would like a second pair of eyes if this will work as I expect...:) ! no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname XXX ! ! logging rate-limit console 9 ! aaa new-model ! ! aaa authentication login default local aaa authorization exec default local ! ! ! ! ! aaa session-id common no ip source-route no ip cef ! ! ! ! dot11 syslog ! dot11 ssid GRL_CORP vlan 1 mbssid guest-mode guest-mode authentication open authentication key-management wpa version 2 wpa-psk ascii 7 1322051B111608333C753A3639275743 ! dot11 ssid GRL_GUEST vlan 192 mbssid guest-mode guest-mode authentication open authentication key-management wpa version 2 wpa-psk ascii 7 096B5C00031F1B0B1C5D162F27216C77 ! dot11 ssid GRL_CORP_5G vlan 1 mbssid guest-mode guest-mode authentication open authentication key-management wpa version 2 wpa-psk ascii 7 1322051B111608333C753A3639275743 ! dot11 ssid GRL_GUEST_5G vlan 192 mbssid guest-mode guest-mode authentication open authentication key-management wpa version 2 wpa-psk ascii 7 096B5C00031F1B0B1C5D162F27216C77 ! ! bridge irb ! ! ! interface Dot11Radio0 mbssid ! ssid GRL_CORP ssid GRL_GUEST ! encryption vlan 1 mode ciphers aes-ccm encryption vlan 192 mode ciphers aes-ccm ! ! interface dot11radio0.1 encapsulation dot1q 1 native bridge-group 1 ! interface dot11radio0.192 encapsulation dot1q 192 bridge-group 192 ! interface Dot11Radio1 mbssid ! ! ssid GRL_CORP_5G ssid GRL_GUEST_5G ! encryption vlan 1 mode ciphers aes-ccm encryption vlan 192 mode ciphers aes-ccm ! ! interface dot11radio1.1 encapsulation dot1q 1 native bridge-group 1 ! interface dot11radio1.192 encapsulation dot1q 192 bridge-group 192 ! interface GigabitEthernet0 no ip address duplex auto speed auto ! interface gig0.1 encapsulation dot1q 1 native bridge-group 1 ! interface gig0.192 encapsulation dot1q 192 bridge-group 192 ! interface GigabitEthernet1 no ip address shutdown duplex auto speed auto ! interface BVI1 ip address 10.0.0.245 255.255.255.0 ! ip default-gateway 10.0.0.254 ip forward-protocol nd no ip http server ip http authentication aaa ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ! ! snmp-server community liability RO ! bridge 1 route ip ! ! ! line con 0 line vty 0 4 length 0 transport input all ! end Switchports connected to AP's is trunk with native vlan 1 Router on stick with trunk native vlan 1 to switch hosts DHCP for guest and ACL DHCP for CORP is DHCP server on vlan 1  Switch and router not the issue and  review of AP configuration above is needed as to me this should work unless 5G SSID's need a separate VLAN and DHCP scope since not the same name. Let me know your thoughts, best practices, if this should work, or any changes....thanks ... View more

So I am running into a problem and not sure best course of action.  I have installed the collector, client registered CCO ID, and have configured correctly from what I have in the past and tests. The devices are collected and added successfully but uploads fail to the portal.  I am not sure how I can resolve as cannot even tell if gets to the back end.         Client registered ID and got notification from Cisco complete.  However, seems like items are missing on the portal from what I am used to seeing.  Screen shot below      Created collector license and entitlement      Downloaded software based on the instructions and configured plus installed license successful     Tested communication to Cisco backend with SUDO Telnet and ports successfully via CLI based on requirements from documentation      Successfully completed discovery of devices      Setup a upload and fails when ran too Cisco Portal shows the collector as registered and completed Attached Screen Shot of portal as seems missing items from what used to seeing Instructions for this type of collector followed https://supportforums.cisco.com/blog/12696871/self-service-onboarding-setting-cspc-25-collector ... View more

Hello, I have created a SSL VPN using SVC on a 2921 and currently here is my issue.  When I browse to the web site and login it is successful and also installs the Any Connect Client and connects.  At that point all works successfully.  When you disconnect and try to connect again by typing the ip address into Any Connect it states "connection failed".  If I try another machine with anyconnect already installed I get a message "invalid cert and connection failed".  Below is the configuration for the SSL VPN and I am using a self signed cert which has to be for this DR site at the current time....Any help is appreciated.....thanks aaa authentication login uservpn local ! crypto pki trustpoint TP-self-signed-2519532865 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2519532865 revocation-check none rsakeypair TP-self-signed-2519532865 ! ! crypto pki certificate chain TP-self-signed-2519532865 certificate self-signed 01   3082025D 308201C6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030   31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274   69666963 6174652D 32353139 35333238 3635301E 170D3130 30363135 31353337   34315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649   4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35313935   33323836 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281   8100AE70 14E1B352 33B99C21 2BA10F47 2EEBEB22 1FAD3B4E 4E4CEC55 BAB8F502   49025428 34A8128F AE7CD70C AC572CBE F614473F 38CAEED0 D294358A 332C43D3   053FDF63 DFCEA2C8 3A9EA457 CA426791 BCCA4B9E CE3D2FC6 DE9242F0 1E5987B2   95E32970 D3EC5F87 19F297BD 0568073B BEB82AA2 3EF2F6A1 C960A3D8 2A98D782   7B410203 010001A3 81843081 81300F06 03551D13 0101FF04 05300301 01FF302E   0603551D 11042730 2582234F 4C594D50 49412D56 414E2D32 3932312D 322E6F6C   796D7069 61747275 73742E63 6F6D301F 0603551D 23041830 1680148A 0B6232F1   D50DD40E 113F7354 DF5AAA4C 6C055F30 1D060355 1D0E0416 04148A0B 6232F1D5   0DD40E11 3F7354DF 5AAA4C6C 055F300D 06092A86 4886F70D 01010405 00038181   00570925 70950700 73531783 7FCE5578 3EBDF166 3A55A497 436AC9F7 91AFAE11   D035EB88 ABB1C9B6 433A58A0 46A95165 4305D44B C40770EA C0055320 F9B89207   12FB8908 8057F577 712D610C 3AA017B7 D080B2E9 4C208A2A 9DCA7E95 01CDAD3D   B7CD036C 0D94A6DB DC765EE7 B0669E40 CAF6D56F 94532BA4 F67B900F 8ECB8129 D1             quit ! ip local pool uservpn 192.168.201.200 192.168.201.250 ! ip access-list extended outside-in permit tcp any host x.x.x.x eq 443 www permit udp any host x.x.x.x eq 443 80 ! ! webvpn gateway VANCISCO2921DR-GATEWAY ip address x.x.x.x port 443  http-redirect port 80 ssl encryption rc4-md5 ssl trustpoint TP-self-signed-2519532865 inservice ! webvpn install svc flash0:/webvpn/anyconnect-win-3.1.04072-k9.pkg sequence 1 ! webvpn context Cisco-WEBVPN title "DR VPN Access to Vancouver" ssl authenticate verify all ! acl "ssl-acl"    permit ip 192.168.201.0 0.0.0.255 10.2.1.0 0.0.0.255    permit ip 192.168.201.0 0.0.0.255 10.2.2.0 0.0.0.255    permit ip 192.168.201.0 0.0.0.255 10.2.3.0 0.0.0.255    permit ip 192.168.201.0 0.0.0.255 10.2.4.0 0.0.0.255    permit ip 192.168.201.0 0.0.0.255 10.2.5.0 0.0.0.255 ! login-message "DR VPN Access to Vancouver" ! policy group webvpnpolicy    functions svc-required    filter tunnel ssl-acl    svc address-pool "uservpn"    svc rekey method new-tunnel    svc split include 10.2.1.0 255.255.255.0    svc split include 10.2.2.0 255.255.255.0    svc split include 10.2.3.0 255.255.255.0    svc split include 10.2.4.0 255.255.255.0    svc split include 10.2.5.0 255.255.255.0 default-group-policy webvpnpolicy aaa authentication list uservpn gateway VANCISCO2921DR-GATEWAY max-users 2 inservice ! ... View more