WANTS TO CONNECT A REMOTE VPN ON CISCO C1111-8p

[emmanuelbista3]

Hi please i am trying to figure out a solution to my problem and i would humbly welcome all response to aid my seek for the right thing to be done in terms of configuring either anyconnect vpn of FlexVpn for my staffs to be able to work remotely. 

Please i already have a license running which is the k9 security based license, i am running the dynamic IPsec isakmp policy which connects to my head office, but this time round:

Actual Problem 

I now want to configure a new vpn tunnel for my users to connect from home using either AnyConnect vpn or FlexVPN. i have seen many configs but i want an advice from the reputable snr engineers on this platform as to the best practices in my scenario.

Thank you.

[Flavio Miranda]

Hi @emmanuelbista3 

 For a start Id like to recommend this document

https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116000-flexvpn-config-00.html 

[Rob Ingram]

@emmanuelbista3 Personally an ASA or FTD is a much better Remote Access VPN solution, more features and easier to support/manage. Although as you have a C1111 router start with the Cisco Live presentation BRKSEC-3054 https://www.ciscolive.com/on-demand/on-demand-details.html?#/session/16360600840250017x8G which has good information about FlexVPN Remote Access VPN.

A few FlexVPN guides:

https://integratingit.wordpress.com/2018/06/03/configuring-flexvpn-remote-access-vpn/
https://www.cisco.com/c/en/us/support/security/flexvpn/products-configuration-examples-list.html

[emmanuelbista3]

Thank you for the reply sir, but my case is i already have an ipsec vpn which is s2s working and looking at the commands show in some of the articles that you have shared, i am afraid to run all the commands thinking it may conflict with my existing vpn connection.

has any one had these scenario kindly share with me the best practice and if posible the exact command syntax.

[emmanuelbista3]

Can i get someone to help me get the anyconnect.pkg and xml file ?