cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
207
Views
0
Helpful
1
Replies
Highlighted

Multiple Context in SSL VPN in Cisco 2811 IOS without AAA server

Hi All, 

 

I was configuring an SSL VPN on Cisco 2811 with multiple contexts. I wanted specific users to be authenticated on specific contexts but I see that it is not possible to do so without an AAA server. I wanted to create local username and passwords and have them bound to specific contexts. Is it possible to do so? If yes then how. This is a lab scenario so am not looking for best practices.

 

Thanks

1 REPLY 1
Highlighted
VIP Mentor

Here is an example how to configure two contexts. Both use a policy-group ADMIN, but both with different settings:

webvpn context SPLIT16
 !
  policy group ADMIN
    svc split include 10.255.0.0 255.255.0.0
  virtual-template 2
  default-group-policy ADMIN
  aaa authentication list VPN
  gateway VPN domain split16
  inservice
!
webvpn context SPLIT24
  !
  policy group ADMIN
    svc split include 10.255.255.0 255.255.255.0
  virtual-template 2
  default-group-policy ADMIN
  aaa authentication list VPN
  gateway VPN domain split24

 

In AnyConnect you need to use the fqdn "vpn.example.net/split16" or "vpn.example.com/split24" to select the different contexts (these are the commands "gateway VPN domain NAME").