Run following commands to see the policies being used by Huawei:
debug crypto isakmp 255debug crypto ipsec 255
You will be able to see the policies being pushed from the remote side on the ASA.
Let me know if this helps.
One more option you can use is "Always On" VPN where user connects automatically as soon as user logs in to the computer. I shared this to answer your question about the query to connect vpn before the user can log on.
Refer to this link: http://www...
You cannot make it to work without certificates. The only other way available to authenticate is by using username and password and it needs manual intervention which defeats the purpose of TND.
I hope this answers tour query.
If I am not wrong, you are looking for a functionality where laptop connects immediately to the corporate network if it detects non corporate network. Please correct me if I am wrong.
If you are looking for what I just said then you ne...