ASA5510 SSL VPN Client (Tunnel Mode) setup

[gschew]

Hi,

I'm new to SSL VPN and the ASA5510. I've setup a test network with the ASA5510 and can browse to the login screen.

But after I logged in and installed the certificate, I'm getting the following message:

"The SSL VPN Connection was terminated by the remote peer and could not automatically re-established. A new connection requires re-authentication and must be started manually. Close all sensitive networked applications."

Can anyone shed some light on this message? Is it a browser setting issue? Or the ASA5510 config?

I used the "SSL VPN Client (SVC) ON ASA Using ASDM Configuration Example" doc as a guide to configure the ASA5510.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008071c428.shtml

Thx

[bwalchez]

Try this:

1.Regenerated the ssl certificate:

for example:

asa5510(config)# crypto key generate rsa general-keys label ASA5510

modulus 1024

2.Changed SSL protocol to use Negociate ssl v3/TLS v1

e.g: asa5510(config)# ssl client-version any

3.Uninstalled and re-installed the ssl client.

e.g:

asa5510(config-webvpn)# no svc image disk0:/sslclient-win-1.0.2.127.pkg

asa5510(config-webvpn)# svc image disk0:sslclient-win-1.0.2.127.pkg 1

[ayman.elsayed]

check the asdm logs for the reason. Most likely you did not set the address pool for the ssl vpn to use an internal address range.