Konfig robilem zgodnie z https://supportforums.cisco.com/docs/DOC-9124 czyli:
1. wgranie 3 certyfikatow z CUCM na ASA (CAPF.pem, CallManager.pem oraz Cisco_Manufacturing_CA.pem)
2. Import certyfikatu z ASA do CUCM.
3. Stworzenie konfigu w CUCM - VPN Gateway, VPN Group, VPN Profile oraz przypiecie tego do domyslnego profilu dla telefonu.
W konfigu, ktory telefony sciagaja sa informacje odnosnie SSLVPN (group-url https://x.x.x.x/phonevpn)
Z laptopa jestem w stanie sie do tego VPNa podpiac i wszystko dziala. Telefon podczas laczenie dostaje info "VPN Authentication Failed". Ponizej debug z ASA.
Kod: Zaznacz cały
WARNING: CSD is disabled by AnyConnect Essentials license.
WARNING: CSD is disabled by AnyConnect Essentials license.
webvpn_portal.c:webvpn_determine_primary_username[6063]
webvpn_portal.c:webvpn_determine_secondary_username[6131]
webvpn_portal.c:ewaFormServe_webvpn_login[2207]
webvpn_portal.c:http_webvpn_kill_cookie[1002]
webvpn_free_auth_struct: net_handle = 0x7499ab50
webvpn_allocate_auth_struct: net_handle = 0x7499ab50
webvpn_free_auth_struct: net_handle = 0x7499ab50
webvpn_allocate_auth_struct: net_handle = 0x7499ab50
webvpn_portal.c:ewaFormSubmit_webvpn_login[3527]
webvpn_portal.c:webvpn_login_validate_net_handle[2463]
webvpn_portal.c:webvpn_login_allocate_auth_struct[2483]
webvpn_portal.c:webvpn_login_assign_app_next[2501]
webvpn_portal.c:webvpn_login_cookie_check[2518]
webvpn_portal.c:webvpn_login_set_tg_buffer_from_form[2554]
webvpn_portal.c:webvpn_login_transcend_cert_auth_cookie[2588]
webvpn_login_transcend_cert_auth_cookie: tg_cookie = 0AC_Phone, tg_name =
webvpn_portal.c:webvpn_login_set_tg_cookie_form[2650]
webvpn_portal.c:webvpn_login_set_tg_cookie_querry_string[2702]
webvpn_portal.c:webvpn_login_resolve_tunnel_group[2775]
webvpn_login_resolve_tunnel_group: tgCookie = 0AC_Phone
webvpn_login_resolve_tunnel_group: tunnel group name from url
webvpn_login_resolve_tunnel_group: TG_BUFFER = AC_Phone
webvpn_portal.c:webvpn_login_negotiate_client_cert[2865]
webvpn_portal.c:webvpn_login_check_cert_status[2962]
webvpn_portal.c:webvpn_login_cert_only[3010]
webvpn_portal.c:webvpn_login_primary_username[3032]
WARNING: CSD is disabled by AnyConnect Essentials license.
WARNING: CSD is disabled by AnyConnect Essentials license.
webvpn_portal.c:webvpn_determine_primary_username[6063]
webvpn_portal.c:webvpn_determine_secondary_username[6131]
webvpn_portal.c:ewaFormServe_webvpn_login[2207]
webvpn_portal.c:http_webvpn_kill_cookie[1002]
webvpn_free_auth_struct: net_handle = 0x7499ab50
webvpn_allocate_auth_struct: net_handle = 0x7499ab50
webvpn_free_auth_struct: net_handle = 0x7499ab50