using the same group-url in different tunnel-groups

[Thiago Henriques]

All,

I came across a configuration from a customer where it has the following:

tunnel-group abc webvpn-attributes

group-url https://company.com/users enable

tunnel-group def webvpn-attributes

group-url https://company.com/IT enable

The config as is works, however, based upon Cisco Config guide it says the following:

You cannot associate the same URL or address with multiple groups. The ASA verifies the uniqueness of the URL or address before accepting the URL or address for a connection profile.

I supposed this is an invalid config?

Thank you,

Thiago

[JP Miranda Z · Accepted solution]

Hi Thiago,

The config is fine, each url is different since there is an identifier for each tunnel group at the end of the group url:

tunnel-group abc webvpn-attributes

group-url https://company.com/users enable

tunnel-group def webvpn-attributes

group-url https://company.com/IT enable

The config guide refers to use the same url for example having only company.com on those 2 and in that case the ASA will not really identify where to point the https request.

Hope this info helps!!

Rate if helps you!

-JP-

[Thiago Henriques]

Thank you for your reply. Do you know where can I find this info in detail aside from the config guide? This was my impression too but I want to take a read on it, if you know where I can find it.

Thank you,

Thiago