Cisco ASA Series Cli Configuration Manual page 1939

Chapter 1 Configuring AnyConnect VPN Client Connections
•
Configuring the ASA to Web-Deploy the Client
The section describes the steps to configure the ASA to web-deploy the AnyConnect client.
Prerequisites
Copy the client image package to the ASA using TFTP or another method.
Detailed Steps
Command
Step 1
anyconnect image filename order
Example:
hostname(config-webvpn)#anyconnect image
anyconnect-win-2.3.0254-k9.pkg 1
hostname(config-webvpn)#anyconnect image
anyconnect-macosx-i386-2.3.0254-k9.pkg 2
hostname(config-webvpn)#anyconnect image
anyconnect-linux-2.3.0254-k9.pkg 3
Step 2
enable interface
Example:
hostname(config)# webvpn
hostname(config-webvpn)# enable outside
Step 3
anyconnect enable
Step 4
ip local pool poolname startaddr-endaddr
mask mask
Example:
hostname(config)# ip local pool vpn_users
209.165.200.225-209.165.200.254
mask 255.255.255.224
Enabling IPv6 VPN Access, page 1-23
Purpose
Identifies a file on flash as an AnyConnect client package file.
The ASA expands the file in cache memory for downloading to
remote PCs. If you have multiple clients, assign an order to the
client images with the order argument.
The ASA downloads portions of each client in the order you
specify until it matches the operating system of the remote PC.
Therefore, assign the lowest number to the image used by the
most commonly-encountered operating system.
Note
You must issue the anyconnect enable command after
configuring the AnyConnect images with the anyconnect
image xyz command. If you do not enable the anyconnect
enable command, AnyConnect will not operate as
expected, and show webvpn anyconnect considers the
SSL VPN client as not enabled rather than listing the
installed AnyConnect packages.
Enables SSL on an interface for clientless or AnyConnect SSL
connections.
Without issuing this command, AnyConnect does not function as
expected, and a show webvpn anyconnect command returns that
the "SSL VPN is not enabled," instead of listing the installed
AnyConnect packages.
(Optional) Creates an address pool. You can use another method
of address assignment, such as DHCP and/or user-assigned
addressing.
Cisco ASA Series CLI Configuration Guide
Configuring AnyConnect Connections
1-11