Tuesday 17 May 2022

Use windows DHCP server instead of IP pool for cisco anyconnect on cisco ASA

Connect to your anyconnect so you can see what tunnels/profiles are enabled

Use "show run tun" to see your tunnel config


Re-enable anyconnect

  • Disable anyconnect (so pool is not in use)
webvpn
no enable OUTSIDE

  • Remove the pool from the tunnel-group
tunnel-group STAFF general-attributes

no address-pool STAFF-POOL

  • Install enntry in the ‘Tunnel-Group’ for your AnyConnect

dhcp-server 10.60.1.6 10.60.1.7


  • Install entry in the AnyConnect ‘Group-Policy’ as well.

group-policy GP-STAFF attributes

dhcp-network-scope 10.60.6.0


  • Remove pool if no longer in use

no ip local pool STAFF-POOL


https://www.petenetlive.com/KB/Article/0001050


No comments:

Post a Comment