Catalyst 6509 IOS code versions

  Is Cisco moving away from the 12.2 SX  trains and on to  15.X trains only ?  Currently they have the 12.2 SXJ train , will there be any other 12.2 codes after this? Will they move to like SXK after this or should we move to the 15.X trains even though it doesn't really offer us anything we need .  Will all fixes only be on the 15.X train in the future . I see that the 12.2 SXJ is like EOL in Sept 2015 , is this the last version in the 12.2 train ?  Trying to determine upgrade path for our 6500's which currently run 12.2 SXI train .

As far as I remember Cisco never produced any IOS after the SXJ train. They moved to 15SY after that.
http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-15-0sy/product_bulletin_c25-687567.html
HTH

Similar Messages

  • Catalyst 6509 VSS IOS upgrade

    Hi,
    We have a Catalyst 6509 VSS system, each chassis have 2 supervisor engines. The IOS version is 12.2(33)SXI4a. We should upgrade to 12.2(33)SXI12.
    The following document mention 2 upgrade method : FSU & eFSU
    http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/vss.html#wp1170391
    We can not use eFSU due to the images with release dates more than 18 months apart, so we can use FSU only. And there is some note for FSU :
    Note VSS mode supports only one supervisor engine in each chassis. If another supervisor engine resides in the chassis it will act as the DFC
    It make me some confuse.... What is the correct procedule to upgrade the Caytalyst 6509 VSS IOS ( each chassis with 2 supervisor engine )?
    Best Regards,

    Hello Jackson,
    Please take a on the next post which may answered your questions:
    https://supportforums.cisco.com/thread/2188244
    Intrachassis Availability
    The initial release of the Cisco Virtual Switching System supports only a single supervisor per chassis. If a second, or redundant, supervisor is installed in an individual chassis then the redundant supervisor will not fully boot. The redundant supervisor will stop the boot process at the ROMMON stage.
    In this configuration any device connected to the chassis in a single-homed, or single-attach, manner must rely on the availability of the single supervisor. Therefore the recommendation for connecting to the VSS is to always dual-attach devices.
    As a result of the single supervisor per chassis support the recovery period for replacing a failed supervisor module is undeterministic in that the recover process requires manual intervention in order to install and initialize a new supervisor in the chassis.
    Beginning in the 12.2(33)SXI4 software release, Quad-Sup Uplink Forwarding is supported which allows for a redundant supervisor to fully boot Cisco IOS Software, thereby providing a deterministic recovery option for redundant supervisors in a VSS chassis.
    Refer:
    http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps9336/white_paper_c11_429338.pdf 
    The link that you mentioned describe how to configure a VSS from release 12.2(33)SXH1.
    Below is a step by step explanation of the upgrade process and the downtimes associated with each step:
    http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-729039.html
    ISSU restrictions and guidelines.
    http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configu
    ration/guide/vss.html
    Video:
    https://supportforums.cisco.com/videos/2650
    Best regards,
    Haihua

  • Trying to interconnect Catalyst 4506 (IOS) & Catalyst 6509 (CatOS) using FS

    Hey all,
    I'm currently having a problem interconnecting a Catalyst 4506 using IOS and a Catalyst 6509 using CatOS via FSO. The FSO is all setup and they show that they are talking but when we plug the fiber optic cables into the switches, we get a notconnect status on the switches. The link lights on both switches don't light up either. I have configured both sides as follows
    6509 (the Gigabit Port is 2/6):
    set port negotiation 2/6 disable
    set trunk 2/6 nonegotiate dot1q 1-1005,1025-4094
    4506 (the Gigabit Port is 1/1):
    interface GigabitEthernet 1/1
    switchport trunk encapsulation dot1q
    switchport mode trunk
    switchport nonegotiate
    speed nonegotiate
    We were told by the FSO company that both ends must turn off negotiation in order for it to work. On the end with the Catalyst 6509, I have tried plugging another known working fiber optic line into the 2/6 port and the link light lights up so we know that the port isn't broken. Any ideas? I am lost.
    Background:
    We currently have a T1 line that serves as a point to point between the two buildings. We were trying to get rid of it and go with Free Space Optics (FSO) to increase bandwidth between the two buildings. We have 5 VLANs on each side (on the 4506 side, Vlans 110, 120, 132, 140, & 104 and on the 6509 side, Vlan 10, 20, 32, 40, 4) and the point to point is on the 200 network to interconnect the switches.

    Hie David,
    Just to start with are we sure that Rx of one switch terminates on Tx of other and vice versa. The fiber cable which is plugged in the trnasmitter of one switch must go to the receiver of another switch. You can just try swapping the TX and RX points at one switch.
    I doubt this because as you have said even the link light is not coming up.

  • Catalyst 6509 Standby Supervisor IOS upgrade

    You can delete and squeeze bootflash on the standby supervisor. Is there a way to download IOS to Standby Supervisor bootflash ( 2/bootflash: ) on a Catalyst 6509 ?

    Yes it is possible
    "copy tftp {flash | file-id | config}"
    file-id
    Format used to specify the file on the Flash device, where the format is m/device:filename.
    m/ = Option that gives access to different modules, such as the standby supervisor engine or an Ethernet module.
    device: = Device where the Flash resides.
    filename = Name of the configuration file.
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_6_3/cmd_ref/d_cmd.htm#39929

  • Bootloader and IOS image into a Catalyst 6509 running hybrid mode

    Hi all,
    I have a Catalyst 6509 running CatOS and IOS (hybrid mode)
    The chassis is based on a SUP1A and a MSFC2
    The MSFC is using images:
    boot system bootflash:c6msfc2-is-mz.121-2.E
    boot bootldr bootflash:c6msfc2-boot-mz.121-2.E
    I would like to know if is possible to add the next command to the MSFC configuration in order to load the new image before erase the old one, even while the chassis boot using the old bootloader image:
    boot system tftp c6msfc2-pk2o3sv-mz.121-26.E2.bin 10.10.5.15
    Thanks.

    Thanks Amit, thanks Ankur,
    Yeah! I know about the limits of the bootflash space as the PCMCIA option.
    It is a bit complicated to explaint the situation here but I will try.
    Neither the actual CatOS or IOS will recognize the new PCMCIA we bought to this upgrade. :P
    First, I will upgrade CatOS using rommon and xmodem command in order to execute a new catos release that can view the PCMCIA, then I will format it and I will copy the new catos image and the new ios image there.
    Then I will change the catos boot config and I will do a reset.
    I must do that because the new release don't enter into the bootflash and the actual CatOS don't support boot from the network :P. It is CatOS 5.5.1 :PPP
    After that, I need also to upgrade the MSFC because as I read that the actual IOS won't see the PCMCIA filesystem. In order to do that I would like to prepare the MSFC to boot from a TFTP server and then modify the configuration to boot from sup-slot0: forever :)
    Let me know what do you think about this steps.

  • Recommended IOS XE version for Cisco Catalyst 4500X-16 SFP+ Switch

    Could someone confirm IOS XE version for Cisco Catalyst 4500X-16 SFP+ Switch please.
    It already has 03.06.00.E on it. I am planning to configure VSS on it with similar switch.
    VSS will participate in various Etherchannels (MES).
    Just wondering if there are any known bugs in this IOS XE release.

    Use the Bug Search Tool to look for issues with vss, vsl, etc.
    https://tools.cisco.com/bugsearch/

  • Missinf FWSM in Catalyst 6509 switch

    I have a problem with a Catalyst 6509 switch.The problem initially I had was loggin into the switch.I was always sent to the rommon> anytime I tried logging into the switch until I was told to enter "boot bootflash:". I was able to enter the switch but could not find the FWSM module.The module was there until we tried upgrading the IOS of the MSFC.
    When I enter "show module" it does not show the FWSM module.
    Is there something anybody can please show me to do other to access the Firewall module.

    Thanks for your post.
    Below is the result of a sh version and sho module of the switch as well as a report that comes up upon bootup using the "boot bootflash:"
    core02>en
    Password:
    core02#sh ver
    Cisco Internetwork Operating System Software
    IOS (tm) c6sup2_rp Software (c6sup2_rp-PSV-M), Version 12.1(12c)E4, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
    TAC Support: http://www.cisco.com/tac
    Copyright (c) 1986-2002 by cisco Systems, Inc.
    Compiled Mon 14-Oct-02 12:37 by hqluong
    Image text-base: 0x40008980, data-base: 0x41598000
    ROM: System Bootstrap, Version 12.1(11r)E1, RELEASE SOFTWARE (fc1)
    BOOTLDR: c6sup2_rp Software (c6sup2_rp-PSV-M), Version 12.1(12c)E4, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
    core02 uptime is 4 minutes
    System returned to ROM by power-on (SP by power-on)
    System image file is "sup-bootflash:c6sup22-psv-mz.121-12c.E4.bin"
    cisco Catalyst 6000 (R7000) processor with 227328K/34816K bytes of memory.
    Processor board ID SAL08144260
    R7000 CPU at 300Mhz, Implementation 39, Rev 3.3, 256KB L2, 1024KB L3 Cache
    Last reset from power-on
    X.25 software, Version 3.0.0.
    Bridging software.
    8 Ethernet/IEEE 802.3 interface(s)
    --More-- 6 Virtual Ethernet/IEEE 802.3 interface(s)
    26 Gigabit Ethernet/IEEE 802.3 interface(s)
    381K bytes of non-volatile configuration memory.
    32768K bytes of Flash internal SIMM (Sector size 512K).
    Configuration register is 0x2102
    core02#sh module
    Mod Ports Card Type Model Serial No.
    1 2 Catalyst 6000 supervisor 2 (Active) WS-X6K-SUP2-2GE SAL08154S4S
    2 8 unknown FRU type (major = 0x6003, mino WS-XSVC-K+BB-2 SAD081203ZV
    3 16 16 port GE RJ45 WS-X6316-GE-TX SAD08140999
    4 8 8 port 1000mb GBIC Enhanced QoS WS-X6408A-GBIC SAL081555Q1
    Mod MAC addresses Hw Fw Sw Status
    1 000f.8f9d.3510 to 000f.8f9d.3511 5.0 6.1(3) 7.2(0.90) Ok
    2 000f.8f5b.bd62 to 000f.8f5b.bd69 2.0 Unknown Unknown PwrDowo 0003.feae.f137 1.3 5.4(2) 7.2(0.90) Ok
    4 000f.f716.8dd0 to 000f.f716.8dd7 3.1 5.4(2) 7.2(0.90) Ok
    Copyright (c) 1986-2002 by cisco Systems, Inc.
    Compiled Mon 14-Oct-02 13:00 by hqluong
    00:00:54: %SNMP-5-COLDSTART: SNMP agent on host core02 is undergoing a cold star
    t
    00:00:56: %C6KPWR-SP-4-UNSUPPORTED: unsupported module in slot 2, power not allo
    wed: Unknown Card Type.
    00:00:56: %C6KPWR-SP-4-ENABLED: power to module in slot 3 set on
    00:00:57: %C6KPWR-SP-4-ENABLED: power to module in slot 4 set on
    00:00:56: %C6KPWR-SP-4-UNSUPPORTED: unsupported module in slot 2, power not allo
    wed: Unknown Card Type.
    00:00:56: %C6KPWR-SP-4-ENABLED: power to module in slot 3 set on
    00:00:57: %C6KPWR-SP-4-ENABLED: power to module in slot 4 set on
    00:01:10: %DIAG-SP-6-RUN_MINIMUM: Module 1: Running Minimum Online Diagnostics..
    00:01:14: %DIAG-SP-6-DIAG_OK: Module 1: Passed Online Diagnostics
    00:01:14: %OIR-SP-6-INSCARD: Card inserted in slot 1, interfaces are now online
    00:01:25: %DIAG-SP-6-RUN_MINIMUM: Module 3: Running Minimum Online Diagnostics..
    00:01:28: %DIAG-SP-6-DIAG_OK: Module 3: Passed Online Diagnostics
    00:01:28: %OIR-SP-6-INSCARD: Card inserted in slot 3, interfaces are now online
    00:01:56: %DIAG-SP-6-RUN_MINIMUM: Module 4: Running Minimum Online Diagnostics..
    00:01:57: %DIAG-SP-6-DIAG_OK: Module 4: Passed Online Diagnostics
    00:01:57: %OIR-SP-6-INSCARD: Card inserted in slot 4, interfaces are now online
    Mod Sub-Module Model Serial

  • ACE10-6500-K9 module in catalyst 6509 gives this error

    Hello
    I have a module ACE10-6500-K9  inserted en module 8 of a catalyst 6509 that gave me this error yesterday.
    The workaround is to manually reset the slot ¿ok? I try to reload and the problem persists ¿is neccesary  hardware reset to solve this probem?
    Is due to a bug o hardware problem?
    %C6KPWR-SP-4-DISABLED: power to module in slot 8 set off (Module not responding to Keep Alive polling)
    Thanks you very much

    Hi, a.serrano
    The meaning of the message is as it says. Sup, to be specific,  Switch Processor of Sup sent continual keepalives through EOBC path and
    did  not hear back for keepalives from ACE in slot 8. So the Sup reset the  ACE blade in slot 8.
    I can only say that it could be h/w related or s/w related or due to  slack inserted blade with the message.
    If it is h/w related, whichever chassis slot, chassis eobc  path, ACE blade,  the first thing you need to check out is that
    failures  in generic on-line diagnostic (GOLD) from Sup side.
    Let's  see what diagnostic is running on ACE blade.
    Router#show  diagnostic content module 1
    Module 1: Application Control Engine Module
      Diagnostics test suite attributes:
         M/C/* - Minimal bootup level test / Complete bootup level test / NA
           B/* - Basic ondemand test / NA
         P/V/* - Per port test / Per device test / NA
         D/N/* - Disruptive test / Non-disruptive test / NA
           S/* - Only applicable to standby unit / NA
           X/* - Not a health monitoring test / NA
           F/* - Fixed monitoring interval test / NA
           E/* - Always enabled monitoring test / NA
           A/I - Monitoring is active / Monitoring is inactive
           R/* - Power-down line cards and need reload supervisor / NA
           K/* - Require resetting the line card after the test has completed  / NA
           T/* - Shut down all ports and need reload supervisor / NA
                                                              Test  Interval   Thre-
       ID   Test Name                          Attributes      day  hh:mm:ss.ms shold
       ==== ================================== ============     =============== =====
         1) TestEobcStressPing --------------> ***D*X**I***    not  configured  n/a
         2) TestFirmwareDiagStatus ----------> M**N****I***    000  00:00:15.00 10
         3) TestAsicSync --------------------> ***N****A***    000  00:00:15.00 10
    With ACE blade, "3) TestAsicSync" has "A" flag which means  "Monitoring is active".
    SP of Sup is sending  polling packets at a certain interval to check health of an Asic on ACE  blade.
    Now let's see failure count of that.
    Router#show diagnostic result module 1 detail
        3) TestAsicSync --------------------> .
              Error code ------------------> 0 (DIAG_SUCCESS)
               Total run count -------------> 47297
               Last test execution time ----> Feb 17 2011 05:52:34
               First test failure time -----> n/a
               Last test failure time ------> n/a
               Last test pass time ---------> Feb 17 2011 05:52:34
               Total failure count ---------> 0
               Consecutive failure count ---> 0
    If you see failure counters incremented,  check the same thing with other blades inserted in the chassis to know
    if  it is specific to slot 8 or seen with multiple slots. (different type  of blade has different type of diagnostic contents)
    Also, check  dropped and retry counters SCP as below.
    Router#remote  command switch show scp status
    Rx 22492903,  Tx 11717042,  scp_my_addr 0x5
    Id Sap      Channel name    current/peak/retry/dropped/total   time(queue/process/ack)
    0  20   SCP Unsolicited:20      0/    0/    0/      0/    0      0/    0/   0
    1  0    SCP Unsolicited:0       0/    3/    0/      0/8179027      0/    0/10036
    2  2    SCP Unsolicited:2       0/    2/    0/      0/8205700      0/    0/   0
    3  21   SCP Unsolicited:21      0/    0/    0/      0/    0      0/    0/   0
    4  1    SCP Unsolicited:1       0/    2/    0/      0/109393      0/    0/ 252
    5  18   SCP Unsolicited:18      0/    0/    0/      0/    0      0/    0/   0
    6  17   SCP Unsolicited:17      0/    0/    0/      0/    0      0/    0/   0
    7  16   SCP Unsolicited:16      0/    0/    0/      0/    0      0/    0/   0
    8  33   SCP async: LCP#6        0/   37/    0/      0/1779208    172/  240/  28
    9  32   SCP async: LCP#4        0/   24/    0/      0/2234291    296/  604/ 236
    10 37   SCP async: LCP#5        0/   61/    0/      0/1381933   1040/  716/ 236
    11 36   SCP async: LCP#1        0/ 1008/    0/      0/455925    1192/1184/ 236
    12 39   SCP async: LCP#2        0/  150/    0/      0/252763    696/  456/ 224
    Router#
    LCP# means that  "Line Card Processor of slot  #".
    If you see counters mentioned above incremented  continualy with the ACE blade in slot 8,
    try removing /  re-inserting the blade. If it persists, consider moving the ACE blade to  other slot.
    Even it persists after that, now consider h/w  replace.
    If moving slot or h/w replace do not fix the reset due to keepalive failure, or those counters incrementing,
    it might be s/w related issue.
    I do not know what  s/w version you use, however we always recommend to take the latest
    version  to have bug fixes and enhancements.
    Actually we had control plane  issue with ACE that could cause not responding to keepalive
    some  times ago.
    Let's isolate possibility of bad chassis and slack  inserted blade, then try s/w upgrading.
    If all those effort fails, pls consider h/w replace.
    If s/w upgrade is not easy option for you, try replacing ACE blade instead of s/w upgrade
    and keep s/w upgrade as the last option based on your environment.
    Regards,
    Kim

  • Catalyst 6509 switch

    I have a problem with one of our catalyst 6509 switches. We had power problem and when I tried to power the switch on after the power was restored it take me to the rommon.
    rommon>
    I urgently need answers to three questions and would therefore appreciate it if anyone can help me out.
    1. What is the cause of the switch not booting from flash but going to rommon?
    2.How do I get into the switch and
    3.How do I reset the switch to boot from flash and not going to the rommon
    Hope a savior comes to my aid

    Probably went into rommon due to incorrect or missing boot statement . You must already be in the switch if you know it is in rommon . If this is a native IOS box then just issue the "boot bootflash: " command and this should boot the box . Once booted up make sure the boot statement is correct . "boot system flash sup-bootflash: .

  • ASA code version upgrade error

    I just recently tried to upgrade the code version of a 5510 from 8.3(2) to 9.1 and got this error:
    This is an ASA image and cannot be loaded on a PIX platform.
    I was consoled into the firewall and watching it boot up, after that error it just said "rebooting..." and nothing ever happened. Can someone please shed some light on this as I have no idea why that error popped up and can't find any documentation about it. I tested the upgrade on a seperate 5510 to make sure it would work beforehand and didn't have any issues. Thanks in advance!

    The problem is that the flash storage is corrupt. I have also received this error in the past. Power cycling did absolutely nothing to help, and I was not able to get far enough to boot from ROMMON to boot to another image. It was resolved simply by processing an RMA with Cisco Systems. Out of many hundreds of Cisco devices that I have installed, I have only experienced this happening one time. It seems (based on research) more common with the ASA for some reason. I have absolutely never had this happen with an ISR, or Catalyst switch. Of course, these are all rather different devices. This problem could just be specific to the ASA itself. I had it happen with a 5505. OP had this occur on a 5510. Perhaps this should be looked in to by the ASA dev. team if it has not already been addressed.

  • Installing X6148A-GE-45F in catalyst 6509

    i've got ios 12.2-18.sxd7 in a catalyst 6509 with 720, and when i put a 6148A(for POE) he said that 'unsupported card).

    Hi,
    Per release notes the WS-X6148A-GE-TX need at least 12.2(18)SXF, you have SXD. You need to upgrade the IOS in able to suport the line card.
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/122sx/ol_4164.htm
    Please rate all posts.

  • MSFC2 Error on Catalyst 6509

    I have a Catalyst 6509 with the WS-X6K-SUP2-2GE and the WS-F6K-MSFC2. When I do a show mod, the Multilayer Switch Feature display "no Other". If I do a show port on 15 it displays the port in state "errdisable". I try to enable or even disable the port but it states it is not a feature on the module. When I session the the daughter card, there are no interfaces listed. Is there a fix to get this port out of this state?

    HI Marmour,
    There can be couple of reasons why MSFC show you in other state.
    1) A corrupted Cisco IOS Software image
    2) A misseated bootflash
    3) The drop of the MSFC or MSFC2 to ROM monitor (ROMMON)
    4) MSFC not properly seated on supervisor
    Check this link out
    http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a008015bfa9.shtml
    This link will guide you how to recover MSFC from any of the above mentioned problem.
    If you are not able to recover msfc with the above link I am afraid your msfc might have gone bad and you have to get your sup + msfc RMAed.
    Hope for the best and best of luck!!
    Regards,
    Ankur

  • NAT IN CATALYST 6509-HOW TO DO IT?

    Hello friends,
    The LAN CAMPUS is conformed by more than 20 VLANS and all the PCs can go to Internet.
    Now I have a new network cloud and I have to attach that network into my campus.
    To do that, I have a Public IP Pool to do translation.
    But I just need that some IPs (from diferent Vlans)could go to the new Network while keep having connecivity to Internet.
    So my Question is:
    I am not interested in perform Static NAT.
    I wonder if I can NAT a group of IPs (in different subnets) with the Public POOL. i.e: group to group.
    I have a PIX 525. I could do it in that PIX but I think It could be better to do it in the Catalyst 6509. (Because the Pix CPU percentage is High-and sometimes I have problems)
    How can I do NAT in C 6509?
    I am attaching a referecial picture.

    Hi bosalaza:
    yes, I think ACL will help so much...
    Look I need to translate only this IPs:
    172.16.8.56
    172.16.24.85
    172.16.33.95
    172.16.86.56
    172.16.125.81
    172.16.157.89
    To this Public IPs:
    200.xx.45.170
    200.xx.45.171
    200.xx.45.172
    200.xx.45.173
    200.xx.45.174
    200.xx.45.175
    But whitout Static NAT.
    And do it but in the C6509.
    I have no enough experience to perform NAt in C6509.
    Thanks in advance.

  • I have an older iPod Touch, Model MC086LL with an IOS software version of 4.2.1.  Many of the applictions which I had previously purchased were recently upgraded and they no longer can be loaded on my iPod.  What is the fix?

    I have an older iPod Touch, Model MC086LL with an IOS software version of 4.2.1.  Many of the applictions which I had previously purchased were recently upgraded and they no longer can be loaded on my iPod.  What is the fix?

    Reload older versions from iTunes on a computer, or buy a newer device.
    (73016)

  • Configuration of SSL VPN in IOS-XE (Version 03.13.01.S)

    Hi,
    I am looking for some advice in regard to the configuration of SSL VPN in IOS-XE (Version 03.13.01.S).
    I have been following the Cisco Guide (http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-3s/sec-conn-sslvpn-xe-3s-book.html#topic_D5CE388EB64446E0897B4741801C84A5) but I am not really having any luck.
    I am testing my config in my lab using a CSR1000V before putting it into the production box.
    When I try to fire up a https connection from a Windows client to the listening IP address in the router all what I get is a blank page (after clicking OK in the certficate error). In the virtual router though, I can see that the CRYPTO-SSL-WEBSERVICE is running, but I am not getting prompted with the page for me to enter the username and password.
    I am using a self signed certificate and AAA is using local authentication to authenticate my users.
    The version of the Anyconnect I am using is 3.1 for Windows, but I have not been to the point where the router pushes the Anyconnect software to the client.
    The Windows host is running the latest version of Java (Version 8 Update 31).
    I have to be honest and admit that this is not my area of expertise. Therefore, I am afraid I have some very silly questions such as what sort of webpage I should be getting when starting a https section to the router. Is it a default one?
    I have not been able to find any real examples on the web and that's why I decided to reach out to you guys for help. Could you please have a look at my config and shed some light about why this is not working?
    I created the annyconect.xml profile file using the Anyconnect Profile Editor.
    CSR_1000V_VPN#sh debugging 
    IOSXE Conditional Debug Configs:
    Conditional Debug Global State: Stop
    IOSXE Packet Tracing Configs: 
    Crypto SSL Subsystem:
      Crypto SSL (verbose) debugging is on
      Crypto SSL Web Service debugging is on
      Crypto SSL AAA debugging is on
      Crypto SSL Tunnel debugging is on
      Crypto SSL Tunnel Events debugging is on
      Crypto SSL Tunnel Errors debugging is on
      Crypto SSL Tunnel Packets debugging is on
      Crypto SSL Client Package debugging is on
    This is what happens when I browse to the listening IP address (1.1.1.1) from the client:
    CSR_1000V_VPN#
    *Feb 12 05:38:22.959: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:22.959: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.004: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.004: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.183: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.183: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.217: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.217: CRYPTO-SSL: Fragmented App data - buffered
    *Feb 12 05:38:23.217: CRYPTO-SSL-WEBSERVICE: Date: Thu, 12 Feb 2015 05:38:23 GMT, Expires: Thu, 12 Feb 2015 04:38:23 GMT
    *Feb 12 05:38:23.217: CRYPTO-SSL: Unsupported GET Request. Sent Status 501
    *Feb 12 05:38:23.217: CRYPTO-SSL: Chunk data written..
     buffer=0x7FE12868F258 total_len=138 bytes=138 tcb=0x7FE180F64058
    *Feb 12 05:38:23.217: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.278: CRYPTO-SSL: sslvpn process rcvd context queue event
    *Feb 12 05:38:23.278: CRYPTO-SSL: Fragmented App data - buffered
    *Feb 12 05:38:23.278: CRYPTO-SSL-WEBSERVICE: Date: Thu, 12 Feb 2015 05:38:23 GMT, Expires: Thu, 12 Feb 2015 04:38:23 GMT
    CSR_1000V_VPN#
    *Feb 12 05:38:23.278: CRYPTO-SSL: Unsupported GET Request. Sent Status 501
    *Feb 12 05:38:23.278: CRYPTO-SSL: Chunk data written..
     buffer=0x7FE12868F258 total_len=138 bytes=138 tcb=0x7FE180F64058
    *Feb 12 05:38:23.279: CRYPTO-SSL: sslvpn process rcvd context queue event
    Thanks in advance,
    Alejandro

    Hi Alejandro,
    Weblaunch for SSL VPN is not supported on CSR 1000v. Here's the enhancement request: https://tools.cisco.com/bugsearch/bug/CSCus02767/?reffering_site=dumpcr
    Please save this bug so that you get notified if any changes are made to the bug's status.
    Regards,
    Anu

Maybe you are looking for