Cisco Cisco ASA 5540 Adaptive Security Appliance 기술 매뉴얼
Note: To display only sessions from a specific address, filter by address.
Check the IP Pool in WebVPN Profile
%ASA−3−722020: Group group User user−name IP IP_address No address
available for SVC connection
No addresses are available to assign to the SVC connection. Therefore, assign the IP pool address in the
profile.
profile.
If you create the new connection profile, then configure an alias or group−url in order to access this
connection profile. If not, all the SSL attempts will hit the default WebVPN connection profile that did not
have an IP pool tied to it. Set this up to use the default connection profile and put an IP pool on it.
connection profile. If not, all the SSL attempts will hit the default WebVPN connection profile that did not
have an IP pool tied to it. Set this up to use the default connection profile and put an IP pool on it.
Tips
Make sure routing works properly with the IP address pool that you assign to your remote clients.
This IP address pool should come from a subnet on your LAN. You can also use a DHCP server or
Authentication Server to assign IP addresses.
This IP address pool should come from a subnet on your LAN. You can also use a DHCP server or
Authentication Server to assign IP addresses.
•
The ASA creates a default tunnel group (DefaultWebVPNGroup) and a default group policy
(GroupPolicy1). If you create new groups and policies, make sure you apply values in accordance
with the security policies of your network.
(GroupPolicy1). If you create new groups and policies, make sure you apply values in accordance
with the security policies of your network.
•
If you want to enable Windows file browsing through CIFS, enter a WINS (NBNS) server under
Configuration > VPN > WebVPN > Servers and URLs. This technology uses the CIFS selection.
Configuration > VPN > WebVPN > Servers and URLs. This technology uses the CIFS selection.
•