I have config cisco ASA 5520 as remote access ipsec vpn and It worked.
Now, I want config more function: ssl vpn.
Here my config; if I change "vpn−tunnel−protocol svc" -> "vpn−tunnel−protocol webvpn", I can see clientless ssl work.
But anyconnect ssl dont work ( I can access https://ip_outside_vpn_server and manual download anyconnect software,
and install software, after click CONNECT I get error ( the attach picture) )
Please help me indentify the problem.
access-list inside_nat0_outbound extended permit ip any 192.168.80.0 255.255.255.0
!
ip local pool sslpool 192.168.80.1−192.168.80.254 mask 255.255.255.0
!
webvpn
enable outside
svc image disk0:/anyconnect-win-2.4.1012-k9.pkg 1
tunnel−group−list enable
svc enable
!
!
group−policy sslpolicy internal
group−policy sslpolicy attributes
vpn−tunnel−protocol svc
split−tunnel−policy tunnelall
webvpn
svc ask none default svc
svc keep−installer installed
svc rekey time 30
svc rekey method ssl
!
!
aaa local authentication attempts max−fail 10
!
!
username ssluser1 password sslusr1
!
tunnel−group sslgroup type remote−access
tunnel−group sslgroup general−attributes
address−pool sslpool
default−group−policy sslpolicy
exit
tunnel−group sslgroup webvpn−attributes
group−alias sslgroup_users enable
!
global (inside) 2 interface
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0
nat (outside) 2 192.168.80.0 255.255.255.0 outside
