Cisco 5505 Administration Guide - Page 62
Enabling Modules for Additional AnyConnect Features - update
UPC - 882658082252
View all Cisco 5505 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 62 highlights
Enabling Modules for Additional AnyConnect Features Chapter 6 Configuring AnyConnect Features Using CLI Step 2 ! interface GigabitEthernet0/1 nameif inside security-level 100 ip address 10.10.0.1 255.255.0.0 ipv6 address 2001:DB8::1/32 ; Needed for IPv6. ipv6 enable ; Needed for IPv6. Configure an 'ipv6 local pool' (used for AnyConnect Client IPv6 address assignment): ipv6 local pool ipv6pool 2001:DB8:1:1::5/32 100 ; Use your IPv6 prefix here Note You still need to configure an IPv4 address pool when using IPv6 (using the ip local pool command) Step 3 Add the ipv6 address pool to your Tunnel group policy (or group-policy): tunnel-group YourTunGrp1 general-attributes ipv6-address-pool ipv6pool Note Again, you must also configure an IPv4 address pool here as well (using the 'address-pool' command). Step 4 Configure an IPv6 Tunnel Default Gateway: ipv6 route inside ::/0 X:X:X:X::X tunneled Enabling Modules for Additional AnyConnect Features As new features are released for the AnyConnect client, you must update the AnyConnect clients of your remote users for them to use the new features. To minimize download time, the AnyConnect client requests downloads (from the security appliance) only of modules that it needs for each feature that it supports. To enable new features, you must specify the new module names using the svc modules command from group policy webvpn or username webvpn configuration mode: [no] svc modules {none | value string} Separate multiple strings with commas. For a list of values to enter for each AnyConnect client feature, see the release notes for the Cisco AnyConnect VPN Client. In the following example, the network administrator enters group-policy attributes mode for the group policy telecommuters, enters webvpn configuration mode for the group policy, and specifies the string vpngina to enable the AnyConnect client feature Start Before Login: hostname(config)# group-policy telecommuters attributes hostname(config-group-policy)# webvpn hostame(config-group-webvpn)# svc modules value vpngina Cisco AnyConnect VPN Client Administrator Guide 6-4 OL-12950-012