Enabling Anyconnect Client Connections - Cisco PIX 500 Series Configuration Manual

Chapter 38 Configuring AnyConnect VPN Client Connections
The security appliance downloads portions of each client in the order you specify until it matches the
operating system of the remote PC. Therefore, assign the lowest number to the image used by the most
commonly-encountered operating system. For example:
hostname(config-webvpn)# svc image anyconnect-win-2.0.0310-k9.pkg 1
hostname(config-webvpn)# svc image anyconnect-macosx-i386-2.0.0310-k9.pkg 2
hostname(config-webvpn)# svc image anyconnect-linux-2.0.0310-k9.pkg 3
Note The security appliance expands SSL VPN client and the CSD images in cache memory. If you receive
the error message ERROR: Unable to load SVC image - increase disk space via the 'cache-fs' command,
use the cache-fs limit command to adjust the size of cache memory:
Check the status of the clients using the show webvpn svc command:
Step 3
hostname(config-webvpn)# show webvpn svc
1. disk0:/anyconnect-win-2.0.0310-k9.pkg 1
CISCO STC win2k+
2,0,0310
Tue 03/27/2007
2. disk0:/anyconnect-macosx-i386-2.0.0310-k9.pkg 2
CISCO STC Darwin_i386
2,0,0
Tue Mar 27 05:09:16 MDT 2007
3. disk0:/anyconnect-linux-2.0.0310-k9.pkg 3
CISCO STC Linux
2,0,0
Tue Mar 27 04:06:53 MST 2007
3 SSL VPN Client(s) installed

Enabling AnyConnect Client Connections

After installing the client, enable the security appliance to allow SSL VPN client connections by
performing the following steps:
Enable WebVPN on an interface using the enable command from webvpn mode:
Step 1
For example:
hostname(config)# webvpn
hostname(config-webvpn)# enable outside
Step 2 Configure a method of address assignment. You can use DHCP, and/or user-assigned addressing. You
can also create a local IP address pool using the ip local pool command from global configuration mode:
The following example creates the local IP address pool vpn_users:
hostname(config)# ip local pool vpn_users 209.165.200.225-209.165.200.254
mask 255.255.255.224
Step 3 Assign IP addresses to a tunnel group. One method you can use to do this is to assign a local IP address
pool with the address-pool command from general-attributes mode:
OL-12172-03
4:16:21.09
enable interface
ip local pool poolname startaddr-endaddr mask mask
address-pool poolname
Enabling AnyConnect Client Connections
Cisco Security Appliance Command Line Configuration Guide
38-3