Multiple Context in SSL VPN in Cisco 2811 IOS without AAA server

RUSTOM BILLIMORIA · ‎11-30-2014

Hi All,

I was configuring an SSL VPN on Cisco 2811 with multiple contexts. I wanted specific users to be authenticated on specific contexts but I see that it is not possible to do so without an AAA server. I wanted to create local username and passwords and have them bound to specific contexts. Is it possible to do so? If yes then how. This is a lab scenario so am not looking for best practices.

Thanks

Karsten Iwen · ‎11-30-2014

Here is an example how to configure two contexts. Both use a policy-group ADMIN, but both with different settings:

webvpn context SPLIT16
 !
  policy group ADMIN
    svc split include 10.255.0.0 255.255.0.0
  virtual-template 2
  default-group-policy ADMIN
  aaa authentication list VPN
  gateway VPN domain split16
  inservice
!
webvpn context SPLIT24
  !
  policy group ADMIN
    svc split include 10.255.255.0 255.255.255.0
  virtual-template 2
  default-group-policy ADMIN
  aaa authentication list VPN
  gateway VPN domain split24

In AnyConnect you need to use the fqdn "vpn.example.net/split16" or "vpn.example.com/split24" to select the different contexts (these are the commands "gateway VPN domain NAME").