11-14-2010 08:13 AM
This is on an ASA5505
I have a question about resolving errors in the web browser when trying to access my ssl vpn interface to download Anyconnect.
I'm using self-signed certs.
The webvpn page that will allow users to connect to get the anyconnect client.
For the webvpn page I am not using a FQDN only the public IP of the outside interface.
For example I want clients to connect to https://x.x.x.x/AnyConnectVPN and get the anyconnect client. They will get the webbrowser error noting the certificate is not trusted. After installing the cert to root that goes away now I'm trying to prevent them from getting the error "The URL you're using to access the site does not match with the name in the certificate. "
Do I specify the exact page I want vpn users to access in the subject-name CN?
crypto ca trustpoint Identity_Certificate
keypair LOCAL-CA-SERVER
id-usage ssl-ipsec
no fqdn
subject-name CN=x.x.x.x/AnyConnectVPN,OU=IT_Dept,O=TEST COMPANY,C=US,St=FL,L=Daytona,EA=admin@blabla.com
Thanks for the help.
Newt
Solved! Go to Solution.
11-14-2010 04:37 PM
The trustpoint that you created needs to have subject-name of "CN=x.x.x.x", you don't need to include the "/AnyConnectVPN"
Hope that helps.
11-14-2010 04:37 PM
The trustpoint that you created needs to have subject-name of "CN=x.x.x.x", you don't need to include the "/AnyConnectVPN"
Hope that helps.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide