IKEv2 VPN and Cisco ASA

[dfurasek]

We are attempting to use the Meraki MDM to push a VPN profile to iPads, using the IKEv2 connection type with certificate authentication, and the ultimate goal is to have an always-on remote access VPN connection between the iPad and a Cisco ASA. Detailed documentation for this scenario (both inside and outside of official Meraki resources) is hard to find, and so far, we have been unsuccessful in making this work as intended, after several attempts and even trying to enlist the help of Cisco TAC. I guess my first question is... Has anyone here been able to successfully implement the scenario that I outlined (especially the ASA part), and/or has anyone here even tried? Thanks!

[rhbirkelund]

From what I see, it should be possible by creating a Device Profile, and pushing it to the device.

But I would probably try reaching out to Meraki Support, rather then Cisco TAC.

[PhilipDAth]

Is there any option to push an actual XML AnyConnect profile?

If so, you should be able to use my online tool to make the profile.

https://www.ifm.net.nz/cookbooks/online-anyconnect-profile-editor.html

That gets a lot of what you want.  You'll still need to add the "Always On" part, but if you get get the above bit working first that would be a good start.

You should be able to create the profile on the ASA as well.

[CptnCrnch]

That'd prolly be the easiest solution!