<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi Everyone,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I was hoping that I could find some quick guidance here. We have a customer who has been using Cisco AnyConnect with an ASA. We are deploying a newer Cisco 891F for them, and it seemed like it would be straight-forward to setup an SSL VPN
on there for use with AnyConnect, and from my reading it seemed like we would at least be able to eval this for a while with no problem. We’re due to cutover tomorrow and I am trying to get AnyConnect working first.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Does anyone know if anything special is required to allow us to configure the WebVPN component on an 891-F?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am following this guide: <a href="https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200533-AnyConnect-Configure-Basic-SSLVPN-for-I.html#anc8">
https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200533-AnyConnect-Configure-Basic-SSLVPN-for-I.html#anc8</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Everything worked as expected up to step 9 – it seems the functions and svc commands for the webvpn policy are missing/incomplete. Unsure if this a licensing issue, or if I’m using the wrong commands for our IOS version (we’re on IOS 15.7(3)M5)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">router(config)#webvpn context SSL_Context<o:p></o:p></p>
<p class="MsoNormal">router(config-webvpn-context)#gateway SSLVPN_Gateway<o:p></o:p></p>
<p class="MsoNormal">Configure gateway SSLVPN_Gateway using "webvpn gateway" command before associating to context<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">router(config-webvpn-context)#inservice<o:p></o:p></p>
<p class="MsoNormal">router(config-webvpn-context)#policy group SSL_Policy<o:p></o:p></p>
<p class="MsoNormal">router(config-webvpn-group)#aaa authentication list SSLVPN_AAA<o:p></o:p></p>
<p class="MsoNormal">router(config-webvpn-context)#<b>f</b>unctions svc-enabled<o:p></o:p></p>
<p class="MsoNormal"> <b>^<o:p></o:p></b></p>
<p class="MsoNormal">% Invalid input detected at '^' marker.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">router(config-webvpn-context)#svc ?<o:p></o:p></p>
<p class="MsoNormal"> platform Client Operating System Type<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Appreciate any guidance. Thanks!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:EN-AU">Rhys Hanrahan<br>
Chief Information Officer<br>
Nexus One Pty Ltd<br>
<br>
E: <a href="mailto:support@nexusone.com.au"><span style="color:blue">support@nexusone.com.au</span></a><br>
P: +61 2 9191 0606<br>
W: <a href="http://www.nexusone.com.au/"><span style="color:blue">http://www.nexusone.com.au/</span></a><br>
M: PO Box A356 Sydney South, NSW 1235<br>
A: Suite 12.03, Level 12, 227 Elizabeth Street, Sydney NSW 2000<br>
<br>
</span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:EN-AU"><img border="0" width="280" height="73" id="_x0000_i1025" src="http://quintus.nexusone.com.au/~rhys/nexus1-email-sig.jpg" alt="http://quintus.nexusone.com.au/~rhys/nexus1-email-sig.jpg"></span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:EN-AU"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-AU">The information in this email and or any of the attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd, or third parties; and or b. Legally
privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd, or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-AU">If you are not an authorised recipient of this email, please contact the sender immediately by return email or by telephone on 02 91910600 and delete the email from your system.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-AU">We do not accept any liability in connection with any computer virus, data corruption, interruption or any damage generally as a result of transmission of this email.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-AU"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:EN-AU"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>