ISR SSL VPN SETUP???

[Charlie Mayes]

                      Hello Guys,

                                       This is my first time setting up SSL VPN on this 2851 router. I just need to know if there is any detailed documentation on this setup via SDM or CLI? If so which way is the easiest way for me to get this done? SDM or CLI? A copy of my flash files are below.

-#- --length-- -----date/time------ path
1     57726628 Mar 09 2010 15:40:46 c2800nm-advipservicesk9-mz.124-24.T2.bin
2         2903 Mar 09 2010 15:52:38 cpconfig-28xx.cfg
3      2324992 Mar 09 2010 15:52:52 cpexpress.tar
4         1038 Jun 17 2010 13:47:36 home.shtml
5       112640 Jun 17 2010 13:47:38 home.tar
6      1697952 Jun 17 2010 13:48:06 securedesktop-ios-3.1.1.45-k9.pkg
7       415956 Jun 17 2010 13:48:10 sslclient-win-1.1.4.176.pkg
8         3255 Jun 16 2010 03:03:26 known-good.cfg
9         2751 Jun 17 2010 13:47:38 sdmconfig-28xx.cfg
10     1505280 Jun 17 2010 13:47:42 common.tar
11     6389760 Jun 17 2010 13:47:58 sdm.tar
12      931840 Jun 17 2010 13:48:16 es.tar

[spremkumar]

Hope this helps

http://www.cisco.com/en/US/products/ps6496/products_configuration_example09186a0080720346.shtml

regds

[Charlie Mayes]

            Thanks but, I saw this link before and it does not have the WEBVPN option. I only have the SSLVPN Option for it. What is the difference between WEBVPN and SSL Clientless VPN? please look at my attached screenshot for what I have.

[Jennifer Halim]

Webvpn and Clientless SSL VPN is the same thing. The name is used interchangeably.

Are you trying to set up clientless ssl vpn or client ssl vpn (anyconnect vpn)?

With client ssl vpn (anyconnect) vpn, you will have full connectivity between your remote PC and the resources behind the router (same as IPSec vpn client). With clientless ssl vpn, your connectivity is limited to browser based only.

Hope that helps.

[Charlie Mayes]

                          They are going to need use the Anyconnect. Client. Do you have detailed instruction how to set this up?

[Jennifer Halim]

Here is configuration guide to configure AnyConnect (client ssl vpn) on IOS router (CCP and CLI configuration):

http://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a0080af314a.shtml

Hope that helps.

[Charlie Mayes]

                         Sorry i know I said Anyconnect but, I meant   sslclient-win-1.1.4.176.pkg. Do you have the instructions for setting up this?

[Jennifer Halim]

Pls use the same sample configuration. The only difference is the filename, yours is sslclient-win-1.1.4.176.pkg, however you can also download the anyconnect file to your router. As far as configuration is concern, it would be the same, the only difference would be on the configuration line when you install the actual ssl client package on the router (you can use anyconnect, or sslclient). SSLClient is the old version of client, while Anyconnect is the latest version of client.

[Charlie Mayes]

                      Is there any difference in the Anyconnect software for Routers and the Anyconnect software for ASA's?

[Jennifer Halim]

No, there is no difference. You can use the AnyConnect package that you use for ASA on router too.