cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1521
Views
0
Helpful
0
Replies

Failed to download default-profile.xml. A VPN connection cannot be established.

hello.

 i have configured a remote access VPN on a Cisco ASA and evrything has been working fine all along until when i changed to use a url instead of the IP address of the ASA's outside Interface. When i connect using AnyConnect, the password prompt appears and when i put the password, it goes to a stage of "Checking for profile updates" and then brings the error "Failed to download default-profile.xml. A VPN connection cannot be established." below is my VPN configuration

 

webvpn
enable INTRA-SERV-OUT
anyconnect image disk0:/anyconnect-win-2.4.1012-k9.pkg 1
anyconnect profiles default-profile disk0:/default-profile.xml
anyconnect enable
tunnel-group-list enable
cache
disable
error-recovery disable

 

tunnel-group NBS_APN type remote-access
tunnel-group NBS_APN general-attributes
address-pool APN-VPN-POOL
authentication-server-group AD-RADIUS
authentication-server-group (INTRA-SERV-OUT) AD-RADIUS
tunnel-group NBS_APN webvpn-attributes
group-url https://gateway-nbs/default enable

 

group-policy GroupPolicy_NBS_APN internal
group-policy GroupPolicy_NBS_APN attributes
wins-server none
dns-server value 10.40.1.14 10.40.1.13
vpn-simultaneous-logins 1
vpn-idle-timeout 10
vpn-filter value APN_VPN_ACL
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelall
default-domain value REDBRIGADE.LOCAL
split-tunnel-all-dns enable
group-policy ICT_VPN internal
group-policy ICT_VPN attributes
wins-server none
dns-server value 10.40.1.14 10.40.1.13
vpn-simultaneous-logins 1
vpn-idle-timeout 10
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelall
default-domain value REDBRIGADE.local
split-tunnel-all-dns enable
webvpn
anyconnect profiles value default-profile type user

 

more disk0:/default-profile.xml
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">
<ServerList>
<HostEntry>
<HostName>APN_VPN</HostName>
<HostAddress>https://gateway-nbs/default</HostAddress>
</HostEntry>
</ServerList>
</AnyConnectProfile>

 

0 Replies 0