For a particular connection profile (tunnel-group), you can configure more than one group-url. When the WebVPN requests comes to ASA through the WebVPN enabled interface and if the URL matches anyone of the configured group-url in the tunnel-group, then that tunnel group is used for the WebVPN.
In the URL that you have given, they have specified group-url in the form of FQDN and IP address. It's not like there is only three format. It can one, two, three or more than that. >From 8.0, you can configure URL-list no more using CLI. You can configure it using ASDM which uses xmls. ASDM is not the scope of CCIE and you can ignore URL-lists. But still you can enter the URLs in the browser tab in the portal and also you need to e aware of WebVPN filter of URLs and port forward. With regards Kings On Sat, Oct 2, 2010 at 5:40 PM, Pipatpong Samranpit < [email protected]> wrote: > Hi all, > > I may specify wrong url for my question and I just know that three formats > of group URL strings > are supported as the following url: > > > http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a008094abcb.shtml > > Figure 3: Configure Group-URLs for the Connection Profile > > Note: In this example, the group-url is configured in three different > formats. The user can enter any one of them in order to connect to the ASA > through the sslclient connection profile. > > Could anyone help me to give more explain about three formats of group-url? > > Cheers, > Pipatpong > > ------------------------------ > From: [email protected] > To: [email protected] > Date: Sat, 2 Oct 2010 02:45:10 -0800 > Subject: [OSL | CCIE_Security] ASA and Group URL > > > Hi, > > I want to configure WEBVPN on Cisco ASA for two different groups of user > > 1. Group "CustomerA", url = https://www.CustomerA.com, tunnel-group > "CustomerA" > 2. Group "CustomerB", url = https://www.CustomerB.com, tunnel-group > "CustomerB" > > How do I allow user to access the appropriate tunnel-group by the above URL > without to > specify the IP address or FQDN of the ASA as part of the URL? > > Cheers, > Pipatpong > > > > > > > > _______________________________________________ For more information > regarding industry leading CCIE Lab training, please visit > www.ipexpert.com > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
