AnyConnect on an interface already supporting a website 2

[jfdean]

I don't know if this has already been answered. I have liiked aroung, I can't see anything.

I have a production site behind a 5510. The ASA does everything, including serving out a secure website on 443 to its outside interface, via a static NAT

static (DMZ-SRV07,outside) tcp ExternalAddress2 https DMZ-SRV07 https netmask 255.255.255.255

If I set up AnyConnect on this ASA, can anyone tell me how this is going to interact with this web site?

Thansk,
James

 

[Supergrrover]

The anyconnect will connect to the ASA outside interface IP. I am assuming that by ExternalAddress2 you have a block of IPs, so you should be fine.

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[jfdean]

Er, yes, good point. However, there is in fact another web site on 443 on the main outside interface also. Good spotting, but the question stands.

James

 

[unclerico]

Either change the port that WebVPN is running on or change the IP address that the other website is pointing to

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Supergrrover]

Here are the commands for the webvpn port change

webvpn
enable outside
port [xx]

to connect to it will be

https://ExternalAddress1:xx

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[jfdean]

Thanks.

So simple, and the obvious answer. I had thought this already, but

1) I couldn't figure out how to actually do it - so far I have been hitting instruction documents, which didn't include this, and

2) I wasn't sure what other effects I would have along the way.

James