Error: "Login Denied , unauthorized connection mechanism , contact your administrator"

[marcio.tormente]

Hello friends,

I´m trying to configure an anyconnect on my ASA 5555 and when I try to connect in the anyconnect client, I receive the msg: "Login Denied , unauthorized connection mechanism , contact your administrator"

I try to research on Cisco web site and the solution was: 

This error message occurs mostly because of configuration issues that  are improper or an incomplete configuration. Check the configuration  and make sure it is as required to resolve the issue.

As you can see, didn´t help me. I know that there is something wrong, I junt don´t know what.

Thanks

Marcio

[jagmeesi]

Hi Marcio,

Please check the group-policy configuration for the intended conenction-profile/Tunnel-group that you are connecting to.

This error generally comes when you have not defined "ssl-client" as the "vpn-tunnel-protocol" in the intended group-policy.

If possible can you share your configuration, sot hat i can point out the same.

Regards,

Jagmeet

[marcio.tormente]

Hello Jagmeet,

Thanks for your support.

Follow the all configuration attach.

Sorry, I´m new with firewall.

Thanks

[carlguer · Accepted solution]

Hi Marcio,

Try adding the following commands:

tunnel-group VPN_SPO_ARTERIS webvpn-attributes

group-alias VPN_SPO_ARTERIS

Then test the connection again.

[Kennyanu]

Hello,

Where can I add the commands?

And how?

Thanks

[Dinesh Moudgil]

Hi Kennyanu,

These commands can be added on ASA CLI

ciscoasa# configure terminal
ciscoasa(config)# tunnel-group <tunnel-group-name> webvpn-attributes
ciscoasa(config-tunnel-webvpn)# group-alias <tunnel-group-name>
ciscoasa(config-tunnel-webvpn)#

Make sure <tunnel-group-name> tunnel-group already exists else you will see an error during the configuration.

Thank you,

Dinesh Moudgil

[marcio.tormente]

Thanks carlguer,

Now is working.

Thank you very much