Migrating to a new VPN system

[alanvthomas1991@gmail.com]

So we have an existing vpn setup abc.com and we have a setup a new vpn system pqr.com. We want to migrate from abc.com to pqr.com such that the end users when they type abc.com on their vpn anyconnect client they should be redirected to pqr.com. Minimal trouble for end users. So one option we have thought is to add the values of abc.com on the certificate of pqr.com as dns names.

[Rob Ingram]

alanvthomas1991@gmail.com  yes, you could use a multi-domain certificate on the new VPN headend device with both domains in the SAN field of the certificate, to ensure the client devices trust both domains.

[alanvthomas1991@gmail.com]

Thank you for the response. I have never done this before so i wanted to know if there is any reference doc i could use as a guide

[Rob Ingram]

alanvthomas1991@gmail.com there is not a specific guide for your exact scenario, but check out the certificates section in this guide which uses openssl to generate a CSR with SAN fields, you can then get this certificate signed and import to your VPN headend device.