QuestionQ44

Remote access VPNs

Question Image

Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without an XML profile. When the host ikev2 is selected from the AnyConnect drop-down, the connection fails. What causes this issue?

Explanation

For an AnyConnect IPsec/IKEv2 HostEntry, UserGroup must exactly match the ASA connection-profile (tunnel-group) name. The connection profile is IKEV2, whereas the XML entry specifies ikev2; that mismatch prevents the selected host entry from connecting. Cisco AnyConnect Profile Editor

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!