04-26-2017 08:03 PM
All,
I came across a configuration from a customer where it has the following:
tunnel-group abc webvpn-attributes
group-url https://company.com/users enable
tunnel-group def webvpn-attributes
group-url https://company.com/IT enable
The config as is works, however, based upon Cisco Config guide it says the following:
You cannot associate the same URL or address with multiple groups. The ASA verifies the uniqueness of the URL or address before accepting the URL or address for a connection profile.
I supposed this is an invalid config?
Thank you,
Thiago
Solved! Go to Solution.
04-27-2017 07:02 PM
Hi Thiago,
The config is fine, each url is different since there is an identifier for each tunnel group at the end of the group url:
tunnel-group abc webvpn-attributes
group-url https://company.com/users enable
tunnel-group def webvpn-attributes
group-url https://company.com/IT enable
The config guide refers to use the same url for example having only company.com on those 2 and in that case the ASA will not really identify where to point the https request.
Hope this info helps!!
Rate if helps you!
-JP-
04-27-2017 07:02 PM
Hi Thiago,
The config is fine, each url is different since there is an identifier for each tunnel group at the end of the group url:
tunnel-group abc webvpn-attributes
group-url https://company.com/users enable
tunnel-group def webvpn-attributes
group-url https://company.com/IT enable
The config guide refers to use the same url for example having only company.com on those 2 and in that case the ASA will not really identify where to point the https request.
Hope this info helps!!
Rate if helps you!
-JP-
04-27-2017 08:01 PM
Thank you for your reply. Do you know where can I find this info in detail aside from the config guide? This was my impression too but I want to take a read on it, if you know where I can find it.
Thank you,
Thiago
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: