Troubles with AnyConnect

[NET_RANGER]

Hello comunity! I have few tasks with AnyConnect wich I must to do, but have no idea how. Please help. The tasks are:

1. Disable IPv6. We have no running IPv6 services, and clients with IPv6 create for us additional routine.

2. Prevent AnyConnect IPs from it's registring in DNS, cuz AnyConnect IP's isn't routeable from intranet.

Client's OS - from XP to 8, OS of DNS server is Windows server 2008 R2 Datacenter. I'm trying to disable IPv6 like here http://www.techunboxed.com/2012/08/how-to-disable-ipv6-in-windows-8.html, but looks like it's didn't work for AnyConnect.

[Abaji Rawool · Accepted solution]

Hi,

Are you using ASA to assign IPs to Anyconnect users? if yes the they should not register to the DNS.

Also you can disable IPV6 address as mentioned here:http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect31/administration/guide/anyconnectadmin31/ac03vpn.html#pgfId-1520244

HTH

Abaji.

[NET_RANGER]

Yes, ASA is assigns IPs to Anyconnect users. But whom you mean under 'they should not register to the DNS'? Users? If so, how I can do it for an array of PCs?

[Abaji Rawool]

If the ASA assigns IP to users it does not register like windows dhcp / dns based environment.

HTH

Abaji.

[NET_RANGER]

In fact, it's really registring (ASA's IP's are occured in our DNS server), but if I changing something on the ASA, few windows are appears on a client PC's, something like 'profile has been changed' or like that and users have no idea what to press. How I can to make changes on ASA without notifications at the client side (it's around 100 PC's at my company)?

[Abaji Rawool]

Client will continue get the messages if there is any change on ASAs client profile.

HTH

Abaji.

[NET_RANGER]

I have figured out, that's ASA making IP's, which it's assigns to clients, primary. How I can change that?

[Abaji Rawool]

You can refer the same guide.

HTH

Abaji.

[NET_RANGER]

Can I do it without using ASDM? Also, I would like to know, why it's happening (I mean, why an adrress, released by Cisco ASA, becomes primary on targeting PC).