How to apply multiple Subnet/VLAN's to Cisco Secure Client (Anyconnect) VPN connections

[rhamersley]

With my current Cisco AnyConnect Secure Client VPN connection I am only able to designate only one AnyConnect VPN Subnet for those users that are VPN'ing into that location.   Do we know if it is possible to create additional VLAN's and have VPN users assigned to a different Subnet/VLAN??

[thaack]

No, this is not supported. From: AnyConnect On the MX Appliance Documentation 

AnyConnect on the MX does not support multiple VLANs or address pools for Client VPN users. 

However, you can use group policy to restrict/permit access to VLANs/subnets based on the user. I see you are using RADIUS. In the linked documentation above it shows you how to set group policy based on the RADIUS Filter-ID.

[IvanJukic]

Hi @rhamersley ,

As @thaack mentioned, Group Policy is the way to go for seperation and security. However, if you are finding that they are not enough IP address being assigend. You can simply expand the subnet range. E.g. 192.168.1.0/22 would give you 1022 IPs to use.