cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2012
Views
5
Helpful
2
Replies

Cisco Anyconnect Secure Mobiliy Clent\How set default group

marramix01
Beginner
Beginner

I would like to know if there is a way to set up the default group in the Cisco Anyconnect secure Mobility Client (ssl vpn) 

 

For example: In our company we have more than one ssl vpn group that are available to remote users (based on their job roles, access, etc) 

 

I would like to set up a specific group to be the default group - e.i - ssl-companyname to always be the group that shows on the drop down menu  when users are trying to get on vpn. 

 

The group should show under the authentication window after clicking on 'connect'

 

Thanks again, 

 

marramix01

 

 

1 Accepted Solution

Accepted Solutions

Dinesh Moudgil
Cisco Employee
Cisco Employee

Hi,

You can allow the users to connect to different connection-profile by using group-alias or group-url .
Group-alias allows you to select via a drop down menu and group-url allows you to directly land your connection to the interested connection profile.

If you do not use group-alias or group-url , the connection defaults to DefaultWEBVPNGroup .
If you want to use this default group for the users, use the following commands:

ciscoasa(config)#tunnel-group DefaultWEBVPNGroup webvpn-attributes
ciscoasa(config-tunnel-webvpn)#group-alias <group-name> enable

Make sure to enable menu selection via these commands:-
ciscoasa(config)#webvpn
ciscoasa(config-webvpn)#tunnel-group-list enable

 

Ref:-
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html#cli

Regards,
Dinesh Moudgil


P.S. Please rate helpful posts.

Cisco Network Security Channel - https://www.youtube.com/c/CiscoNetSec/

View solution in original post

2 Replies 2

Dinesh Moudgil
Cisco Employee
Cisco Employee

Hi,

You can allow the users to connect to different connection-profile by using group-alias or group-url .
Group-alias allows you to select via a drop down menu and group-url allows you to directly land your connection to the interested connection profile.

If you do not use group-alias or group-url , the connection defaults to DefaultWEBVPNGroup .
If you want to use this default group for the users, use the following commands:

ciscoasa(config)#tunnel-group DefaultWEBVPNGroup webvpn-attributes
ciscoasa(config-tunnel-webvpn)#group-alias <group-name> enable

Make sure to enable menu selection via these commands:-
ciscoasa(config)#webvpn
ciscoasa(config-webvpn)#tunnel-group-list enable

 

Ref:-
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html#cli

Regards,
Dinesh Moudgil


P.S. Please rate helpful posts.

Cisco Network Security Channel - https://www.youtube.com/c/CiscoNetSec/

Thanks Dinesh, been looking for this nougat of information for hours :)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: