Problem with AnyConnect Secure Mobility Client Downloader.

Ciscotinkadm · ‎03-28-2012

Hi,

I've configured our ASA 5510 8.4(3) for remote client VPN using AnyConnect SSL.

I enter the URL for the WebVPN portal, I click on the "Start AnyConnect" link and I get the following error:

"Cannot update AnyConnect Secure Mobility Client 3.0.5080 because the file server is not enabled on the secure gateway. A VPN connection cannot be established."

I'm including my runnig config as well as show version. Just in case it may be a license issue. Any help would be greatly appreciated.

------ Running Config -------

: Saved

:

ASA Version 8.4(3)

!

hostname XXXXXXXXXX

domain-name XXXXXXXXXX

enable password XXXXXXXXXX encrypted

passwd XXXXXXXXXX encrypted

names

!

interface Ethernet0/0

nameif phys_0

security-level 0

no ip address

!

interface Ethernet0/0.511

vlan 511

nameif mtl-web2

security-level 0

ip address 64.254.250.30 255.255.255.224

!

interface Ethernet0/1

no nameif

no security-level

no ip address

!

interface Ethernet0/1.513

vlan 513

nameif mtl-srv

security-level 100

ip address 192.168.13.253 255.255.255.0

!

interface Ethernet0/2

shutdown

no nameif

no security-level

no ip address

!

interface Ethernet0/3

shutdown

no nameif

no security-level

no ip address

!

interface Management0/0

shutdown

no nameif

no security-level

no ip address

management-only

!

boot system disk0:/asa843-k8.bin

ftp mode passive

dns domain-lookup mtl-srv

dns server-group DefaultDNS

name-server 192.168.13.195

name-server 192.168.13.210

domain-name tink.local

same-security-traffic permit inter-interface

object network NETWORK_OBJ_192.168.13.195

host 192.168.13.195

object network obj-192.168.18.0

subnet 192.168.18.0 255.255.255.224

object-group network mtl-srv-net

network-object 192.168.13.0 255.255.255.0

object-group network mtl-voix2-net

network-object 192.168.22.0 255.255.255.0

object-group network ad-hosts

network-object host 192.168.13.195

network-object host 192.168.13.210

object-group network vergo_servers

network-object host 192.168.97.51

object-group network 75-queen

network-object host 69.70.17.36

network-object host 64.254.250.2

network-object host 64.254.250.3

access-list acl_mtl-srv extended permit icmp any any

access-list acl_mtl-srv extended permit ip any any

access-list acl_mtl-srv extended permit udp any any

access-list acl_mtl-web2 extended permit icmp any any

access-list acl_mtl-xcon extended permit icmp any any

access-list acl_mtl-bur extended permit ip object-group mtl-bur-net any

access-list mtl-web2_cryptomap extended permit ip host 192.168.13.195 host 192.168.97.51

access-list mtl-web2 extended permit ip object-group 75-queen host 64.254.250.30

pager lines 24

logging enable

logging buffer-size 100000

logging console debugging

logging monitor debugging

logging buffered debugging

logging asdm debugging

logging class vpn asdm debugging

mtu phys_0 1500

mtu qmgt-inside 1500

mtu mtl-web2 1500

mtu pmgt-inside 1500

mtu mtl-srv 1500

mtu mtl-bur 1500

mtu mtl-xcon 1500

mtu mtl-voix2 1500

mtu management 1500

no failover

icmp unreachable rate-limit 1 burst-size 1

asdm image disk0:/asdm-647.bin

no asdm history enable

arp timeout 14400

nat (mtl-srv,mtl-web2) source static obj-192.168.13.0 obj-192.168.13.0 destination static obj-192.168.18.0 obj-192.168.18.0 no-proxy-arp

nat (mtl-srv,mtl-web2) source static NETWORK_OBJ_192.168.13.195 NETWORK_OBJ_192.168.13.195 destination static NETWORK_OBJ_192.168.97.51 NETWORK_OBJ_192.168.97.51

nat (mtl-srv,mtl-voix2) source static mtl-srv-net mtl-srv-net destination static mtl-voix2-net mtl-voix2-net no-proxy-arp route-lookup

nat (mtl-bur,mtl-web2) source dynamic mtl-bur-net interface

nat (mtl-srv,mtl-web2) source dynamic mtl-srv-net interface

nat (mtl-voix2,mtl-web2) source dynamic mtl-voix2-net interface

!

object network nat-webtest

nat (mtl-srv,mtl-web2) static 64.254.250.25

access-group acl_mtl-web2 in interface mtl-web2

access-group acl_mtl-srv in interface mtl-srv

access-group acl_mtl-xcon in interface mtl-xcon

route mtl-web2 0.0.0.0 0.0.0.0 64.254.250.1 1

route mtl-xcon 192.168.16.0 255.255.254.0 192.168.20.1 1

timeout xlate 3:00:00

timeout pat-xlate 0:00:30

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

timeout tcp-proxy-reassembly 0:01:00

timeout floating-conn 0:00:00

dynamic-access-policy-record DfltAccessPolicy

aaa-server LDAP_SRV_GRP protocol ldap

aaa-server LDAP_SRV_GRP (mtl-srv) host 192.168.13.195

ldap-base-dn dc=tink, dc=local

ldap-scope subtree

ldap-naming-attribute sAMAccountName

ldap-login-password *****

ldap-login-dn CN=svc_asa_vpn,OU=Comptes-Service,OU=Tink,DC=tink,DC=local

server-type microsoft

user-identity default-domain LOCAL

aaa authentication ssh console LOCAL

http server enable

http 192.168.13.0 255.255.255.0 mtl-srv

http 69.70.17.36 255.255.255.255 mtl-web2

no snmp-server location

no snmp-server contact

crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac

crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac

crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac

crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac

crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac

crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac

crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac

crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac

crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac

crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac

crypto ipsec ikev2 ipsec-proposal 3DES-SHA

protocol esp encryption 3des

protocol esp integrity sha-1

crypto ipsec ikev2 ipsec-proposal AES256

protocol esp encryption aes-256