Cisco ASA 5585-X

1-61
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Clientless SSL VPN
Configuring Application Access
Detailed Steps
Enabling and Disabling Smart Tunnel Access
By default, smart tunnels are disabled.
Detailed Steps
Command Purpose
Step 1
webvpn
Switches to webvpn configuration mode.
Step 2
group-policy webvpn
OR
username webvpn
Switches to group-policy webvpn configuration
mode.
Switches to username webvpn configuration mode.
Step 3
smart-tunnel auto-start list
Example:
hostname(config-group-policy)# webvpn
hostname(config-group-webvpn)# smart-tunnel
auto-start apps1
Starts smart tunnel access automatically upon user
login. list is the name of the smart tunnel list already
present.
Assigns the smart tunnel list named apps1 to the
group policy.
Step 4
show running-config webvpn smart-tunnel
Views the smart tunnel list entries in the SSL VPN
configuration.
Step 5
(Optional)
no smart-tunnel
Removes the smart-tunnel command from the group
policy or username and reverts to the default.
Command Purpose
Step 1
webvpn
Switches to webvpn configuration mode.
Step 2
group-policy webvpn
OR
username webvpn
Switches to group-policy webvpn configuration
mode.
Switches to username webvpn configuration mode.
Step 3
smart-tunnel [enable list | disable]
Example:
hostname(config-group-policy)# webvpn
hostname(config-group-webvpn)# smart-tunnel enable
apps1
Enables smart tunnel access. list is the name of the
smart tunnel list already present. You do not have to
start smart tunnel access manually if you entered
smart-tunnel auto-start list from the previous
table.
Assigns the smart tunnel list named apps1 to the
group policy.
Step 4
show running-config webvpn smart-tunnel
Shows the smart tunnel list entries in the SSL VPN
configuration.