First of all, use parameters in your statement, don't concatenate literals to the SQL text. More info, see:
SqlParameter [
^]. When you use parameters, you don't have to worry for example about data type conversions etc.
The problem looks like that you define the connection and the command variables but you don't create instances of those classes at all. So try changing to:
Dim con As New SqlConnection
Dim cmd As New SqlCommand
Another thing is that you set the sql statement but based on your code you don't execute it at all. Use
ExecuteNonQuery[
^] to actually execute the statement