ASA AnyConnect Remote Access VPN Configuration.DEFAULT PORT.

[woori-bank]

Hello!!! Now i need to configure AnyConnect Remote Access VPN. And i have one question.

The default port for AnyConnect 443, but that port is busy on ASA. We use this port for another application.

How to change the port to connect? Is it real? THANK YOU!!!

[Aditya Ganjoo · Accepted solution]

Hi, please add the following configuration:

1. Enable the WebVPN feature on the ASA:
   

   ASA(config)#webvpn

2. Enable the WebVPN service for the outside interface of the ASA:
   

   ASA(config-webvpn)#enable outside

3. Allow the ASA to listen to the WebVPN traffic on the customized port number:
   

   ASA(config-webvpn)#port <1-65535>

[woori-bank]

Wau!!! How fast!!! Thank you!

1. As I understand it, the client must enter the address like: //external address:port?

2.On ASA  SITE-TO-SITE vpn is configired already. Tuning AnyConnect Remote Access VPN, I can break SITE-TO-SITE vpn?

[Aditya Ganjoo]

Hi,

Yes the clients have to enter the https: //external address:port to access the Anyconnect.

It should not break your Site to site as they are two different services.

Regards,

Aditya

Please rate helpful posts.

[woori-bank]

Ok! I have one question. I confiqured all settings. I want to use port 6789. I think that i need to open this port on interface.Is it right? Thanks!!!

 I use NAT RULE (lan1-center office lan2-vpn clients), but i think that a need to use a second nat rule too, because port 6789 is not open?

nat (inside,outside) source static LAN1 LAN1 destination static LAN2 LAN2 no-proxy-arp route-lookup

[woori-bank]

I read documentation and i think that i need to add nat rule. Is it right?

object service PORTVPN
 service tcp destination eq 6789

nat(outside,outside) source static LAN2 LAN2 destination static LAN2 LAN2 service PORTVPN