Cisco AnyConnect VPN Profile

cisco-anyconnect-profile.md

Cisco AnyConnect VPN Profile

Router IOS

webvpn import svc profile profile-example usbflash0:example.xml
webvpn context ctx-example
policy group vpn-group-example
svc profile profile-example

Local on PC

/opt/cisco/anyconnect/profile/Profile.xml

<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">
  <ClientInitialization>
    <WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>
    <WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment>
  </ClientInitialization>
  <ServerList>
    <HostEntry>
      <HostName>VPN 1</HostName>
      <HostAddress>vpn1.example.com</HostAddress>
    </HostEntry>

    <HostEntry>
      <HostName>VPN 2</HostName>
      <HostAddress>vpn2.example.com</HostAddress>
    </HostEntry>
  </ServerList>
</AnyConnectProfile>

Schema

/opt/cisco/anyconnect/profile/AnyConnectProfile.xsd

Local AnyConnect Profiles

• XML and profile files are stored locally to the users machine. The location varies based on OS.

Windows XP

%ALLUSERSPROFILE%\Application Data\Cisco\ Cisco AnyConnect Secure Mobility Client\Profile

Windows Vista, 7

%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile

Linux, Mac OS X

/opt/cisco/anyconnect/profile

How do you add usernames if you want for each HostEntry?

Is it possible to setup autoconnect for ios device, I mean if selected app started anyconnect vpn should be connect automatically ?

Very useful, thanks!

How do you add usernames if you want for each HostEntry?
add within HostEntry section
<User>username</User>