In order to authenticate itself to the clients, the ASA needs to have an identity certificate. interface Vlan90įor IPv6, you also need a default route pointing to the next-hop router towards the Internet. Ipv6 local pool pool6 fcfe:2222::64/64 128įor IPv6 connectivity to the ASA, you need an IPv6 address on the interface that the clients will connect to (typically the outside interface).įor IPv6 connectivity over the tunnel to inside hosts, you need IPv6 on the inside interface(s) as well. Both pools are referenced later in the group-policy. If you want the client to also carry IPv6 traffic over the tunnel, you will need a pool of IPv6 addresses. Configurationįirst off, define a pool of IP addresses from which you will assign one to each client that connects. Refer to the Cisco Technical Tips Conventions for more information on document conventions. The information in this document is based on these software and hardware versions:Īn圜onnect Secure Mobility Client 5 on Microsoft Windows XP Professional (without IPv6 support)Īn圜onnect Secure Mobility Client 5 on Microsoft Windows 7 Enterprise 32-bit However, if any of these requirements are not met, the configuration discussed in this document will still allow the client to connect over IPv4. The ASA software version needs to be 9.0 or later The An圜onnect version needs to be 3.1 or later In order to successfully establish an SSLVPN tunnel over IPv6, meet these requirements: In addition, this configuration allows the client to pass IPv4 and IPv6 traffic over the tunnel.
This document provides a sample configuration for the Cisco Adaptive Security Appliance (ASA) to allow the Cisco An圜onnect Secure Mobility Client (referred to as "An圜onnect" in the remainder of this document) to establish an SSL VPN tunnel over an IPv4 or IPv6 network.
0 kommentar(er)
