AnyConnect - client XML

[Lance Wendel]

hi all,

one of request made by my customer was to automate the AnyConnect cline to use the LocalLAN access per xml profile.

at the moment it works if he activate it manually. he is trying to achieve this automatically via the XML profile so that the client doesn't have to make this manually. on the XML profile I can see this is been enabled 

<LocalLanAccess UserControllable="false">true</LocalLanAccess>

however, when connected this is been ignored by the client for some reason.

they have several settings in the XML-Profile which are working fine without any problem, so the configuration file itself is used by the AnyConnect client. Only the Local LAN setting is ignored.

they are currently using the 3.1.02026 and also tested with 3.1.02040 both version are behaving the same way as discribe above.

any help on this please?

thanks in advance

Lancellot

[Michael Muenz]

Do you have a split tunnel setup? If you tunnel all networks Local LAN access won't work

[Lance Wendel]

Hi Ciscomax,

thanks for the reply

this is the group policy

group-policy POLICY1 attributes

dns-server value xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy

dhcp-network-scope aaa.aaa.aaa.aaa

vpn-tunnel-protocol ssl-client

split-tunnel-policy excludespecified

split-tunnel-network-list value KKKKKKK

default-domain value reh.rehau.de

msie-proxy method no-modify

msie-proxy pac-url value http://mmmmmm.com

msie-proxy lockdown disable

webvpn

  anyconnect modules value dart,posture

access-list KKKKKK standard permit host 0.0.0.0

just an update, if you enable this manually it works. so my customer is trying to automate this.

thanks in advance

Lance

[Michael Muenz]

The XML file is linked to the correct group policy in ASDM?

[Lance Wendel]

Hi CiscoMax

yes, I can confirm this

regards,

Lancellot

[Michael Muenz]

I can't reproduce this. Can you delete the preference file on the client and reconnect again?