It's almost impossible to use Anyconnect VPN on an 877 router because there just isn't enough space on the standard flash card to install the Anyconnect pkg file, and it seems crazy that you have to install the pkg files on the router anywhere when you can download and install Anyconnect standalone clients for Windows and other platforms - is there any way you can setup Anyconnect without having to install the clients on the router?
I know this thread is quiet old but I has the same situation some days ago. I found a workaround to the problem opening the pkg file (using 7zip) and removing some modules I did not need for my environment (gina, hostscan, etc). Once the pkg was small enough I was able to upload it to the router and install it with the command: webvpn svc install .
Maybe this will not work in all the cases (where all modules are requiered) but it is OK for me since I only need this working to be able to connect remotely to my home network.
Hi fmpiedraftia, i have the same issue (home cisco877, just want anyconnect access into it) and tried your workaround (hacking down the .pkg file) but i cant get the SSL page to come up, nor will the anyconnect client on my mac connect (times out). I have a:
- flash = 24MB in total, above image is 22MB, leaving only 2MB to install package.
- v4.0 of anyconnect .pkg = 15MB!
- see below screenshot for the files i deleted (basically all of the big files under the /binaries/ directory, all else i left untouched). Logic being i dont need to host the anyconnect client on the headend, as i have a local installer, and the other stuff [posture, ise-posture, websecurity, ise-network-assistant, dart] i dont need, i dont think anyway!
- bit worried about the "vpndownloader.sh" that ive deleted, which is a shell script, but looking at it, a very minimal one, with some sort of binary archive attached (that accounts for the massive size of 1.2MB for a shellscript!). Also "anyconnectprof.sgz" (looking on the web for the .sgz extension) is an encrypted file, clearly i dont know hat the purpose of this is.
i guess my questions to you are:
1/ what was the hardware / software breakdown you had? (how much flash? what IOS? what version of anyconnect?)
2/ what files did you remove from the .pkg? perhaps you could email me that .pkg and i could have a look [ keiran_harris (at) yahoo (dot) com ] ?
The Cisco Secure Firewall and SecureX teams are looking for feedback from active Secure Firewall users who may or may not have already activated SecureX. Your responses will help us improve the Firepower experience in SecureX. Th...
Related documentsCisco ISE (Identity Services Engine) IPv6 features by release2.6ISE ManagementNetwork Time Protocol SupportDomain Name System SupportExternal RepositoriesAudit Logs and ReportsSimple Network Management ProtocolAccess Control Lists And Dyn...
Site to Site IPSec VPN with Dynamic IP Endpoint is typically used when we have a branch sites which obtains a dynamic public IP from the Internet ISP. For example an ADSL connection.One important note is that Site-to-Site VPN with Dynamic remote routers P...
On R1, configure a key ring that defines the peer R3:Address: 184.108.40.206Local and remote pre-shared key: cisco R1(config)#crypto ikev2 keyring KRR1(config-ikev2-keyring)# peer R3R1(config-ikev2-keyring-peer)# address 220.127.116.11R1(config-ikev2-keyring-pee...