Cisco ASDM问题“无法打开设备”

Question

我刚刚设置了ASA 5510来运行AnyConnect虚拟专用网(w/ client)。不幸的是，在这个过程中，我似乎破坏了允许ASDM连接的任何东西。当我试图从我的ASDM软件连接到另一个ASA (5520)设备时，我会得到一个“无法打开设备”。

这两种设备都有相同的ASDM版本。有人能帮我解决这个问题吗？下面是经过消毒的配置。

    ip local pool XXXVPNPool x.x.5.1-x.x.5.254 mask 255.255.255.0
asdm image disk0:/asdm-715.bin
no asdm history enable

ldap attribute-map XXXVPN_Att_Map
  map-name  memberOf Group-Policy
  map-value memberOf CN=Users,DC=xxx,DC=com XXXVPNGrpPolicy
  map-value memberOf "OU=XXXX Users,DC=xxx,DC=com" XXXVPNGrpPolicy
dynamic-access-policy-record DfltAccessPolicy
aaa-server XXXX protocol ldap
aaa-server XXXX (inside) host x.x.2.38
 ldap-base-dn DC=xxx,DC=COM
 ldap-scope subtree
 ldap-naming-attribute sAMAccountName
 ldap-login-password *****
 ldap-login-dn CN=Administrator,CN=Users,DC=xxx,DC=COM
 server-type microsoft
 ldap-attribute-map XXXVPN_Att_Map

http server enable 65000

http redirect outside 80

crypto ca trustpoint ASDM_TrustPoint2
 enrollment terminal
 fqdn XXXvpn.xxx.com
 subject-name CN=XXXvpn.xxx.com,O=XXXCompany,C=US,St=XXX,L=XXX
 keypair XXXVPNcert
 crl configure

ssl trust-point ASDM_TrustPoint2 outside
webvpn
 enable inside
 enable outside
 anyconnect-essentials
 anyconnect image disk0:/anyconnect-win-3.1.00495-k9.pkg 1
 anyconnect profiles XXXVPNclient disk0:/XXXvpnclient.xml
 anyconnect enable
 tunnel-group-list enable

group-policy XXXVPNGrpPolicy internal
group-policy XXXVPNGrpPolicy attributes
 wins-server value x.x.2.38 x.x.1.75
 dns-server value x.x.2.38 x.x.1.75
 vpn-tunnel-protocol ssl-client 
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value XXXVPN_Split_Tunnel_List
 default-domain value xxx.com
 address-pools value XXXVPNPool
 webvpn
  anyconnect profiles value XXXVPNclient type user

tunnel-group TunnelGroup1 type remote-access
tunnel-group TunnelGroup1 general-attributes
 address-pool XXXVPNPool
 authentication-server-group XXXX
 default-group-policy XXXVPNGrpPolicy
 dhcp-server x.x.2.38
tunnel-group TunnelGroup1 webvpn-attributes
 group-alias XXXVPN enable

Answer 1

我解决了这个问题。我在这里跟踪了一个链接：https://supportforums.cisco.com/document/49741/asa-pixfwsm-unable-manage-unit-sshtelnetasdm#Unable_至_asdm

必须添加ssl encryption rc4-md5 rc4-sha1 aes128-sha1 aes256-sha1 3des-sha1

我检查了一下，这不是在一个月前的配置中，我能够连接到asdm很好。关于将VPN功能添加到设备中，需要我添加这一行才能使ASDM正常工作。