6-4
Cisco AnyConnect VPN Client Administrator Guide
OL-12950-012
Chapter 6 Configuring AnyConnect Features Using CLI
Enabling Modules for Additional AnyConnect Features
!
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 10.10.0.1 255.255.0.0
ipv6 address 2001:DB8::1/32 ; Needed for IPv6.
ipv6 enable ; Needed for IPv6.
Step 2 Configure an 'ipv6 local pool' (used for AnyConnect Client IPv6 address assignment):
ipv6 local pool ipv6pool 2001:DB8:1:1::5/32 100 ; Use your IPv6 prefix here
Note You still need to configure an IPv4 address pool when using IPv6 (using the ip local pool
command)
Step 3 Add the ipv6 address pool to your Tunnel group policy (or group-policy):
tunnel-group YourTunGrp1 general-attributes ipv6-address-pool ipv6pool
Note Again, you must also configure an IPv4 address pool here as well (using the 'address-pool'
command).
Step 4 Configure an IPv6 Tunnel Default Gateway:
ipv6 route inside ::/0 X:X:X:X::X tunneled
Enabling Modules for Additional AnyConnect Features
As new features are released for the AnyConnect client, you must update the AnyConnect clients of your
remote users for them to use the new features. To minimize download time, the AnyConnect client
requests downloads (from the security appliance) only of modules that it needs for each feature that it
supports. To enable new features, you must specify the new module names using the svc modules
command from group policy webvpn or username webvpn configuration mode:
[no] svc modul
es {none | value string}
Separate multiple strings with commas.
For a list of values to enter for each AnyConnect cl
ient feature, see the release notes for the
Cisco AnyConnect VPN Client.
In the following example, the network administrator enters group-policy attributes mode for the group
p
olicy telecommuters, enters webvpn configuration mode for the group policy, and specifies the string
vpngina to enable the AnyConnect client feature Start Before Login:
hostname(config)# group-policy telecommuters attributes
hostname(config-group-policy)# we
bvpn
hostame(config-group-webvpn)# svc
modules value vpngina