You have the option of creating a profile using the Cisco profile editor. The equivalent XML format is here. A sample xml file can be found here: XML-FILE

In the xml file, there are changes required as per your configuration. In our example, the below changes are made within the same xml file.

1. IKE-Identity: Key-id must be set on the xml file and must match on the ikev2-local-profile as well. This key-id when the user connects will be sent to the router and the router will use it to match with the right ikev2- profile (tunnel). In our configuration, we are using : VPN-KEY-ID

2. Primary Protocol: IPsec must be set as the protocol as VPN connection to the ISR is an IPsec connection. AnyConnect default behavior is SSL. So, if we don't make the change, AnyConnect will do an SSL connection and it wont work as the router is expecting an IPsec connection and not an SSL connection

3. Authentication method: It must be EAP-MSCHAPv2 as most of the WIN radius servers use this type. This may change depending on what you are using for authenticating the users. If you are using Cisco ISE servers, then it could be EAP-AnyConnect instead

4. Host Address: You must type the public ip address of your router. x.x.x.x

5. Host name: This name is shown in the AnyConnect connections list this can be any name you like. In our example: HQ VPN connection

This xml file must be saved in the Profile folder after you have installed the Anyconnect client software. C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile