Unable to create Anyconnect IPv6 tunnel

[Philip Brown]

Hi,

                I am having problems getting Anyconnect to work with IPv6.

As can be seen below from the live log entries, the session attempts are being discarded due to an ACL even though the ‘Bypass interface access lists for inbound VPN sessions’ is enabled.

 

The ASA’s are 5545’s, the OS version is 9.6(3).1 and the Anyconnect client involved is version 4.4.0234, an IPv6 pool has not been configured.

Any ideas

[Bogdan Nita]

The  ‘Bypass interface access lists for inbound VPN sessions’ would apply to the decrypted traffic, inside the tunnel.

From the logs it seems the ASA is dropping the encrypted traffic coming in on the outside interface.

Did you enable anyconnect on the outside interface?

webvpn

 enable OUTSIDE
 anyconnect enable

[Philip Brown]

Hi Bogdan,
Anyconnect is, and has been working for years, enabled on the Outside Interface.
Phil