Here is a sample configuration of a Cisco ASA VPN with anyconnect:
### Creating the certificate
ciscoasa(config)#crypto key generate rsa label sslvpnkeypair
ciscoasa(config)#crypto ca trustpoint localtrust
ciscoasa(config-ca-trustpoint)#enrollment self
ciscoasa(config-ca-trustpoint)#fqdn sslvpn.cisco.com
ciscoasa(config-ca-trustpoint)#subject-name CN=sslvpn.cisco.com
ciscoasa(config-ca-trustpoint)#keypair sslvpnkeypair
ciscoasa(config-ca-trustpoint)#crypto ca enroll localtrust noconfirm
ciscoasa(config)# ssl trust-point localtrust outside
## Specify the anyconnect file location
ciscoasa(config)#copy tftp://192.168.50.5/anyconnect-win-2.0.0343-k9.pkg flash
ciscoasa(config)#webvpn
ciscoasa(config-webvpn)#svc image disk0:/anyconnect-win-2.0.0343-k9.pkg 1
ciscoasa(config-webvpn)#enable outside
ciscoasa(config-webvpn)#svc enable
## Ip address pool configuration
ciscoasa(config)#ip local pool SSLClientPool 192.168.25.1-192.168.25.50 mask 255.255.255.0
## configuration of the policies
ciscoasa(config)#group-policy SSLCLientPolicy internal
ciscoasa(config)#group-policy SSLCLientPolicy attributes
ciscoasa(config-group-policy)#dns-server value 192.168.50.5
ciscoasa(config-group-policy)#vpn-tunnel-protocol svc
Ciscoasa(config-group-policy)#default-domain value tsweb.local
ciscoasa(config-group-policy)#address-pools value SSLClientPool
## Allow VPN
ciscoasa(config)#sysopt connection permit-vpn
## Main tunnel configuraiton
ciscoasa(config)#tunnel-group SSLClientProfile type remote-access
ciscoasa(config)#tunnel-group SSLClientProfile general-attributes
ciscoasa(config-tunnel-general)#default-group-policy SSLCLientPolicy
ciscoasa(config-tunnel-general)#tunnel-group SSLClientProfile webvpn-attributes
ciscoasa(config-tunnel-webvpn)#group-alias SSLVPNClient enable
## Assign the tunnel to web vpn
ciscoasa(config-tunnel-webvpn)#webvpn
ciscoasa(config-webvpn)#tunnel-group-list enable
## Acls and usernames
ciscoasa(config)#access-list no_nat extended permit
ip host 192.168.50.5 192.168.25.0 255.255.255.0
ciscoasa(config)#nat (inside) 0 access-list no_nat
ciscoasa(config)#username ras password pswd
ciscoasa(config)#username ras attributes
ciscoasa(config-username)#service-type remote-access
Subscribe