I have been banging my head on this problem for a couple days now and coming up with nothing. I have followed a couple/few configuration examples (http://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/118084-configure-anyconnect-00.html) of how to get my Anyconnect VPN clients IP addresses from a DHCP server not running on the ASA and I am still not getting anywhere....any help would be appreciated!
I'm going to try to upload an image but the basic layout is my clients will hit a public address on my ASA 5520 over the internet, I want our Microsoft DHCP server to supply an IP address for the client VPN session....the DHCP server is not on the same subnet as the ASA.
Here are my tunnel-group and group-policy configs:
tunnel-group LimitedNetAdminAccess type remote-access
tunnel-group LimitedNetAdminAccess general-attributes
authentication-server-group New-LDAP
default-group-policy LimitedNetAdminAccess
dhcp-server 10.1.100.6
password-management password-expire-in-days 7
group-policy LimitedNetAdminAccess internal
group-policy LimitedNetAdminAccess attributes
dns-server value 10.4.99.8 10.3.99.8
dhcp-network-scope 10.1.64.0
vpn-access-hours none
vpn-simultaneous-logins 10
vpn-idle-timeout 30
vpn-session-timeout none
vpn-filter value NetAdminLimited
vpn-tunnel-protocol ssl-client ssl-clientless
group-lock value LimitedNetAdminAccess
split-tunnel-network-list value NetAdminMinimal
default-domain value xxxx.com
split-dns value xxxx.com xxxxxxxxxxx.com xxxxxxxxxxxxxxx.com
nac-settings none
address-pools none
vpn-addr-assign dhcp
