Anyconnect, switch connection between 2 interfaces
We have some mobile tablets with LTE and wifi cababilities. They use AnyConenct to access an internal server to run dispatch software. The dispatch software requires that the tablets always communicate to the server using the same ip addresss When the tablets are at the office they want to use the wifi there to save on LTE data. We have anyconnect configured to provide the fixed addresses and conenctivity on the outside interface and on a DMZ interface for the wireless. I have the AnyConnect profile setup with a backup server that it the DMZ interface. The tablets connect fine on the DMZ interface or on the outside when in the field.
The issue i am having is when they switch between them. When they disconnect from the wireless the any connect client just keeps trying to connect to the DMZ interface, instead of trying the outside(primary server in the AC profile) until you close the vpn connection and re-establish it.
We need this to work seamlessly and without user intervention.
Re: Anyconnect, switch connection between 2 interfaces
I'd probably try to fix this with DNS instead. Just have the profile point to a dns name ex: vpn.mycompany.com. When they're internal have the A record point to the dmz interface address, when they're external have it resolve to the outside interface address.
If you aren't a member of the Cisco Customer Connection program you're missing out! In addition to regular online NDA briefings, we also conduct exclusive roadmap sessions at Cisco Live events. Coming up at Cisco Live Barcelona we've got a fu...
I have 2 FTD 2120 Firewall with HA. I manage these by FMC. I need to port forward to my web server IP. For example: In my Firewall WAN there is IP Gi 0/1: 188.8.131.52 & 184.108.40.206.
Routable Public IP Gi 0/2: 220.127.116.11/29
LAN IP Gi 0/3 : 10.10.10.10
Improve efficiency, threat protection and remediation with Cisco NGFW
Learn how Cisco’s latest offering in NGFW can help you reduce cost, improve agility and ensure availability with ground breaking Multi-Instance technology. You'll learn how visibil...
Happy New 2019!
About a year ago, we have started a journey to make ISE even more the robust solution our customers expect it to be.
This journey is a journey everyone subscribed with – our Engineering team have and are investing a huge amou...
TP FW doesn't act as router hop
It uses bridging protocols to join two or more interfaces in one bridge group
Within bridge group, segments can communicate
You need to have BVI interface for each bridge group with an IP of the same subnet