☰

Cisco ASDM 问题“无法打开设备”

tag-icon • tag-icon vpn cisco-asa cisco-vpn anyconnect
Cisco ASDM 问题“无法打开设备”

我刚刚设置了 ASA 5510 来运行 AnyConnect VPN（带客户端）。不幸的是，似乎我在此过程中破坏了允许 ASDM 连接的任何功能。当我尝试从我的 ASDM 软件连接到我拥有的另一台 ASA（5520）设备时，我收到“无法打开设备”的提示。

两个设备的 ASDM 版本相同。有人能帮我解决这个问题吗？下面是经过清理的配置。

    ip local pool XXXVPNPool x.x.5.1-x.x.5.254 mask 255.255.255.0
asdm image disk0:/asdm-715.bin
no asdm history enable

ldap attribute-map XXXVPN_Att_Map
  map-name  memberOf Group-Policy
  map-value memberOf CN=Users,DC=xxx,DC=com XXXVPNGrpPolicy
  map-value memberOf "OU=XXXX Users,DC=xxx,DC=com" XXXVPNGrpPolicy
dynamic-access-policy-record DfltAccessPolicy
aaa-server XXXX protocol ldap
aaa-server XXXX (inside) host x.x.2.38
 ldap-base-dn DC=xxx,DC=COM
 ldap-scope subtree
 ldap-naming-attribute sAMAccountName
 ldap-login-password *****
 ldap-login-dn CN=Administrator,CN=Users,DC=xxx,DC=COM
 server-type microsoft
 ldap-attribute-map XXXVPN_Att_Map

http server enable 65000

http redirect outside 80

crypto ca trustpoint ASDM_TrustPoint2
 enrollment terminal
 fqdn XXXvpn.xxx.com
 subject-name CN=XXXvpn.xxx.com,O=XXXCompany,C=US,St=XXX,L=XXX
 keypair XXXVPNcert
 crl configure

ssl trust-point ASDM_TrustPoint2 outside
webvpn
 enable inside
 enable outside
 anyconnect-essentials
 anyconnect image disk0:/anyconnect-win-3.1.00495-k9.pkg 1
 anyconnect profiles XXXVPNclient disk0:/XXXvpnclient.xml
 anyconnect enable
 tunnel-group-list enable

group-policy XXXVPNGrpPolicy internal
group-policy XXXVPNGrpPolicy attributes
 wins-server value x.x.2.38 x.x.1.75
 dns-server value x.x.2.38 x.x.1.75
 vpn-tunnel-protocol ssl-client 
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value XXXVPN_Split_Tunnel_List
 default-domain value xxx.com
 address-pools value XXXVPNPool
 webvpn
  anyconnect profiles value XXXVPNclient type user

tunnel-group TunnelGroup1 type remote-access
tunnel-group TunnelGroup1 general-attributes
 address-pool XXXVPNPool
 authentication-server-group XXXX
 default-group-policy XXXVPNGrpPolicy
 dhcp-server x.x.2.38
tunnel-group TunnelGroup1 webvpn-attributes
 group-alias XXXVPN enable

答案1

我修复了这个问题。我点击了这里的链接：https://supportforums.cisco.com/document/49741/asa-pixfwsm-unable-manage-unit-sshtelnetasdm#Unable_to_asdm

并且必须补充ssl encryption rc4-md5 rc4-sha1 aes128-sha1 aes256-sha1 3des-sha1

我检查了一下，一个月前配置中没有这个，我能够正常连接到 asdm。在设备中添加 VPN 功能时，我要求添加此行才能使 ASDM 正常工作。

相关内容