06-17-2021 02:16 AM - edited 06-17-2021 02:21 AM
Hi,
I was following this example on how to use split-tunneling for IPv6 - https://packetpushers.net/cisco-anyconnect-ipv6/
The problem is that there's no option to add an IPv6 pools in a group-policy in FMC - only IPv4 pools. Is this a bug or can it be added using flex-config? I am using FMC and FTD 6.6.4
Thanks
/Chess
Solved! Go to Solution.
06-17-2021 03:52 PM
Hi Chess,
The only options for now is to assign the IPv6 pool on the tunnel-group/connection-profile instead.
Assigning it to the group-policy is not possible yet.
Rate if it helps.
Regards,
Josue Brenes
TAC - VPN Engineer.
06-17-2021 03:52 PM
Hi Chess,
The only options for now is to assign the IPv6 pool on the tunnel-group/connection-profile instead.
Assigning it to the group-policy is not possible yet.
Rate if it helps.
Regards,
Josue Brenes
TAC - VPN Engineer.
06-18-2021 01:15 AM - edited 06-18-2021 01:21 AM
Hi Josue,
Is it possible to mix and assign IPv4 addresses from the group-policy and IPv6 on the tunnel-group at the same time?
Best regards
/Jugge
09-15-2021 12:21 AM
Hi @Chess_N,
Yes, it is possible to mix attributes from different sources. There is a list of priorities, if assigning same attribute from multiple sources, e.g. if you want to assign IP address to a user, and you define it under tunnel-group and group-policy, group-policy would have priority. But, if you assign it under group-policy and DAP, DAP would take precedence.
You can find this information under VPN config guide.
BR,
Milos
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: