Cisco VPN :: 5540 Recurrent Disconnection AnyConnect Users
Nov 27, 2012
we have three ASA 5540 with Cisco Adaptive Security Appliance Software Version 8.4(5) Device Manager Version 6.4(9) this devices are only for remote conections (webvpn/ssl-web/anyconnect), and we are having problems with connections anyconnects; are released every 15 seconds, the version anyconnect is 2.3.0254.is there a conflict of versions or a bug that could be picking up??.is there a compability matrix betwen Software Version of ASA and Anyconnect ?
View 2 Replies
ADVERTISEMENT
May 22, 2013
I have a ASA 5540 VPN Premium with 2 Client-less licenses.How many anyconnect users can i accommodate with current sessions ??
View 5 Replies
View Related
Feb 23, 2011
Currently i m experiencing VPN Remote access intermittent disconnection on the asa 5540,what is the reason for that?how to start a proper troubleshooting?
View 2 Replies
View Related
Feb 9, 2012
4402 Software Version - 4.2.130.0
1242 IOS Version - 12.4(10b)JA4
First off let me start by saying I am quite green when it comes to this equipment, I managed to get this project up and running with the equipment manuals, tech notes, forums and a lot of google work.
This setup has been up and running now for around 4 years with little to no maintenance or monitoring, I have been getting a few reports of users not being able to move from one area to the next without getting disconnected from our wireless, all of our users (about 400 or so) are running on newer Lenovo laptops on Windows XP SP3.
I know this is extremely light in substance with regards to troubleshooting, but where would be a good starting point to begin with this issue?
We use one RADIUS server with Layer 2 WPA WPA2 AES security.
View 1 Replies
View Related
Apr 29, 2012
I am a little new to Cisco ASA's but we bought two new 5540's to use as a new VPN solution for our company. We want to implement Cisco Anyconnect full client and Clientless based solutions for our end users. I am having problems working with setting up access lists based on groups. I simply want to create access-lists to certain IP's based on groups. I ultimately want to get to the point where we have Dynamic Access Policies that are based on Active Directory Groups allowing access to back end servers based solely on their group membership in AD. But first I need to figure out how to just apply an ACL on a group.
View 2 Replies
View Related
Sep 23, 2011
We've deployed WebVPN on Cisco ASA 5540 and its working fine with no trouble in relation to connectivity. My Anyconnect VPN users are able to download the client and connect to our corporate network.However, sometimes when I try to connect after entering the credentials it keeps saying Login failed.
View 3 Replies
View Related
May 5, 2011
I have a ASA 5540+SSM-40 on which I have configured webvpn and it's listening for connections on the outside interface. It can be accessed from outside the network (the internet) and works just fine. The problem is, I want to access it from inside the network as well but it doesn't work. I can't ping or connect in any way to the IP address of the outside interface from inside (so I suppose it's not strictly related to the configuration of the webvpn).
I don't think it's a ACL issue because the only ACL filtering I do is on the OUTSIDE-IN (facing the internet), the rest are set to permit any.
What I have to do to be able to access the IP address of the outside interface from networks behind the inside interface?
View 5 Replies
View Related
Jan 22, 2012
I want to connect with AnyConnect Secure Mobility Client 3.0.2052 to ASA 5540 Version 8.4 and SSL Premium License.The clients using Maschine Certificate to authenticate to ASA. This works fine.Now I want to setup a DAP to verifiy the client against the Microsoft AD using LDAP. I configured LDAP server in ASA see:aaa-server LDAP protocol ldap aaa-server LDAP (inside) host ldap.com ldap-base-dn DC=x,DC=x,DC=x,DC=com ldap-scope subtree ldap-login-password ***** ldap-login-dn ***** server-type microsoft ,I can see that it works if I test the server via the testbotton in ASDM and I see it in CLI "debug ldap 255" also. But if I configure in DAP: AAA Attribute ID:memberOf = DomainMember I can not see any request to the LDAP server during I try to connect with the Client und the DAP doesn't match.
View 2 Replies
View Related
Jul 13, 2011
want to connect with AnyConnect Secure Mobility Client 3.0.2052 to ASA 5540 Version 8.4 and SSL Premium License.The clients using Maschine Certificate to authenticate to ASA. This works fine.
Now I want to setup a DAP to verifiy the client against the Microsoft AD using LDAP. I configured LDAP server in ASA see: [code]I can see that it works if I test the server via the testbotton in ASDM and I see it in CLI "debug ldap 255" also. But if I configure in DAP: AAA Attribute ID:memberOf = Domain Member I can not see any request to the LDAP server during I try to connect with the Client und the DAP doesn't match.
View 3 Replies
View Related
Nov 25, 2012
Is it possible to send profile name as an Radius atribute during client authentication? I would like to match users depends on profile name to sperate Identity Stores in my ACS. ASA 5540 8.4, anyconnect 3.1.01065, ACS 5.1
View 3 Replies
View Related
Mar 7, 2011
I have an ASA 5540 cluster that is configured as my remote access VPN point. Users connect using IPSEC Profiles with Cert based authentication, the profile is configured to query two DHCP servers (infoblox appliance servers).
The problem I am encountering, is that I need to make reservations on the DHCP server for some users for specific business needs. What happens is that the ASA passes the request to the DHCP server with it's own MAC address and not the MAC of the remote host.
Is there any way I can configure the ASA to pass the request using the hosts actual MAC address?
View 1 Replies
View Related
Nov 1, 2012
I have AnyConnect newly configured on my ASA 5550, running 8.2.x code; however, Mac users cannot connect using the Apple client, nor using the Cisco AnyConnect client - they are getting a "posture error" of some kind or the laptop is failing some kind of machine profiling.
View 3 Replies
View Related
Jul 16, 2012
I am trying to configure a Cisco ASA 5505 so that users can authenticate via Radius or via a Local account using the Cisco AnyConnect client. In the AnyConnect Connection profile, the basic tab, it has Authentication Method. We have this going to an AAA server group with Use Local if Server Group fails option is checked.Each time, I see where the user has failed while attemtping to log in to the domain via the radius servers and thus bypasses the local user database all together.
View 3 Replies
View Related
May 16, 2012
I am able to successfully connect to my ASA5505 via AnyConnect via a mobile device. Upon doing so, I lose internet connectivity. My access list appear to be correct to I'm sort of at a loss.
[code]....
View 6 Replies
View Related
Jun 9, 2013
I have a weird problem which I have already submitted a TAC ticket about. When users authenticate through AnyConnect into our HQ ASA 5510 they grab an address from 172.16.254.x. What we have been noticing intermittently is that when logged into our network through the client they are unable to access their resources at one of our remote offices which is connected over l2l to the HQ ASA. This problem just started randomly a week ago and we have been working with Cisco trying to create a solution.
My quick fix is logging into a device at the remote office which is trying to be accessed and pinging the gateway of the virtual subnet for AnyConnect users. When I ping 172.16.254.1 it goes through after a few dropped icmp packets and then the issue is resolved for about 8 hours or so.
View 1 Replies
View Related
Dec 29, 2012
I am having problems with a customer's ASA 5505 with Anyconnect 3.1 - it is generating captive portal false-alerts which are stopping users from connecting. This issue began when I upgraded from Anyconnect 2.4 to 3.1, and it appears like this: A user downloads and installs the Anyconnect client and is able to connect fine, to begin with. However, once they reboot their computer and try to reconnect, the VPN session will not come up and they receive the error message below."The service provider in your current location is restricting access to the internet. You need to log on with the service provider before you can establish a VPN session. You can try this by visiting any website with your browser."
Reading other posts, it seems this message appears when a captive portal is restricting internet access. It must be a false alert in this case as there is nothing of the sort here. Apparently, Anyconnect 3.1 can generate a false alert like so if the name of the firewall's SSL certificate doesn't match the CName listed on the Client Profile. I've set this up to match, to no avail. Although users can connect by reauthenticating through the SSL VPN login web page, I am stumped as to how to get rid of this captive portal error that pops up when they try to use the Anyconnect client.
View 4 Replies
View Related
Jul 15, 2012
we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly.Site/Subnet A: 192.160.0.0 - local (8.4(4)) Site/Subnet B: 192.260.0.0 - remote (8.2(5)) VPN Users: 192.160.40.0 - assigned by ASA When you VPN into the network, all traffic hits Site A, and everything on subnet A is accessible.
Site B however, is completely inaccessible for VPN users. All machines on subnet B, the firewall itself, etc... is not reachable by ping or otherwise.There are also some weird NAT rules that I am not happy with that were created after I upgraded Site A ASA to 8.4
Site A internal: 192.160.x.x External: 55.55.555.201(main)/202(mail)
Site B (over site-to-site) is 192.260.x.x External: 66.66.666.54(all)
I pretty much just have the basic NAT rules for VPN, Email, Internet and the site-to-site.What do I need to add for the VPN to be able to access the site-to-site network?
Here is my NAT config:
nat (inside,Outside) source static DOMAIN_LOCAL DOMAIN_LOCAL destination static VPN_Network VPN_Network no-proxy-arp route-lookup
nat (inside,Outside) source static DOMAIN_LOCAL DOMAIN_LOCAL destination static DOMAIN_REMOTE DOMAIN_REMOTE no-proxy-arp route-lookup
!
object network DMZ_Network
nat (DMZ,Outside) dynamic interface
object network DOMAIN_LOCAL
[code]....
View 3 Replies
View Related
Apr 14, 2012
I just recently had comcast high-speed cable installed, and purchased a Linksys E2500 advanced dual-band N router to get myself going. I'm running an Asus G74s series laptop with windows 7 and everything runs great while I am the only one connected.That being said when another laptop connects (Toshiba satellite also windows 7) the internet stays stable. It isn't until we try and do something that the internet randomly disconnects for 2 or more seconds before re-connecting and putting us in a constant loop of idiotic disconnection.
A quick example would be using the Toshiba to connect to World of Warcraft, I on my Asus can surf the web just fine for about an hour before it disconnects. When I try connecting to a, or the game at the same time it'll allow play for about 7 mins before the net drops for a few seconds then re-connects. This happens frequently no matter the time of day.I have attempted re-setting everything. Everything is up to date including the router. I've attempted to release and renew my IP. However I get this :
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:UsersVirus>ipconfig/all
Windows IP Configuration[code].....
View 5 Replies
View Related
Sep 17, 2012
I am not good at networking. My friend wanted me to set up his home network.because the modem is unable to supply a good wireless connection to the rest of the household when the door is closed, a second router was needed.I set both routers to run with DHCP as they have many devices that needs to connect to the router for internet. However, a few hours after setting it up, my friend's pc as well as all devices connected to the second router faced issues. The router's interface showed that it does not have connection to the internet. they are still facing this problem until now.
View 7 Replies
View Related
Aug 23, 2012
I thought I had this problem fixed i.e.unticking `allow computer to turn this device off to save power`in Wireless Connection Properties, I still have the problem the diagnostics say I did not receive any response from the wireless router or access point! I have Vista SP2.
View 15 Replies
View Related
Jul 13, 2011
I have a scenario where multiple branches are connected to Head Office via DSL links. The branches are located in differenct exchanges, everyone once in a while ALL branches go down at the exact same time except 3 branches and those 3 branches don't have ATM interface on the router, rather they have external DSL modem, all other branches that face the disconnection (for couple of minutes) have either HWIC-1ADSL-M or HWIC-2SHDSL and the DSL line is directly plugged into the card. [code]
I tried so many solutions like adding "operating-mode auto" command under the subinterface, IOS upgrade, changed dynamic routing protocol from EIGRP to OSPF... Nothing worked, on the logs of the router it just shows "EIGRP neighbor down", at the time of the problem I can't ping any of the affected branches on their WAN ATM interface although it stays physically "up up".Could the problem be a missing command that I need to add under the subinterface? Something maybe related to clocking or timeout or..?Note that hte problem occurs randomly, every few days, sometimes every 10 days, and all branches with ATM interface go down at the exact same time.
View 5 Replies
View Related
Nov 26, 2012
We have a VPN 3000 that we use to connect. We are recieving reports that some of the users are connected but after a set period of time they are disconnected. Is there any changes that I could look at in the VPN 3000 that could point me in the right direction.
View 3 Replies
View Related
Oct 18, 2012
Here is my internet setup:Blue Zoom ISP (Satellite) >>> Their Modem >>> Sony Viao Desktop >>> Linksys EA4500 Router,I have a metal garage with an apartment in it about 30 feet from the house. I cannot get any kind of wireless internet into the apartment because it is made of metal. I barely have cell phone signal.So, in order to get internet into the apartment I have a Ubiquiti Nano Bridge mounted about three feet off the ground right outside of the apartment which runs a CAT 5 Ethernet cable inside the apartment into a Linksys EA2500 Router.
View 1 Replies
View Related
Jan 2, 2013
My network connection keeps on disconnecting every few minutes and my downloads are always interrupted. I also checked out my Ipconfig and the Media State says Media Disconnected. I�m using windows XP by the way.
View 2 Replies
View Related
Sep 30, 2012
i got the echolife HG520b with this weird problem that's bugging me a lot nowadays which is disconnection. The internet light bulb always go off and the internet cuts every 5-10 minutes. I've tried to reboot with factory settings but it didn't work.
View 6 Replies
View Related
Jul 6, 2012
Basically I started disconnecting when I logged onto Blacklight Retribution after a recent game patch, after a few days the problem stopped and I was able to play again (with no changes to my computer) a few days later another patch was added and the problem occurred again, at first I thought it was a Blacklight specific problem (as this was my only installed game) however i installed a few other games (Kabold Online, Perfect World, Forsaken World, TF2, MW2 and C9) and I got the same problem on each of these games. I haven't been able to log onto a single Online game for more than 5 minutes, normally I'm disconnected at login, HOWEVER, my internet works completely fine in for everything else, i can browse the web, download game clients etc with no problem whatsoever.(Forgot to add, When i disconnect my LAN Cable mysteriously Unpluggs itself (according to computer) and a disable/enable in network manager reconnects it)
- Checked to see if drivers were up to date (they were)
- Rolled back NIC Driver (and put it back when this didn't work)
- Checked device manager for any problems with my NIC, (working as normal apparently)
- Tried setting my NIC to 100mbps Full Duplex
- Setting my power options to not interfere with NIC
- Had a DHCP error in my event logs so i set my gaming machine to a static IP
- Turned of UnUP, Turned on DMZ
- Turned off "Green Ethernet"
- I had other Errors in the form of a service stopping my NIC
- Phoned ISP, Everything is OK there end but they sent out a new router, but problem still occurs
- Noticed that a service was sending a stop control to my NIC, looked on forums for fixes and applied several of them
- Reformatted computer with old XP (switched from windows 7), updated, installed latest drivers etc and still same problem except now I don't get anything in event viewer when the problem occurs.
The only thing i haven't tried is replacing my NIC, but considering the internet works completely fine for everything but Online games I'm unsure how this could be the problem.
View 9 Replies
View Related
Jan 21, 2013
I've a 20Mbit/s connection with Telecom Italia provider.My line values follows:-- DSL Information ---DSL Driver Version: AnnexA version - A2pB023k.d21dDSL VPI/VCI: 8/35DSL Status: ShowtimeDSL Mode: ADSL2+DSL Channel:DSL Upstream Rate: 979 KbpsDSL Downstream Rate: 22105 Kbps Down upDSL Noise Margin: 12.0 dB 13.4 dBDSL Attenuation: 10.5 dB 4.3 dBDSL Transmit Power: 14.0 dBm 12.4 dBm?I have issues about connection stability : on HEAVY load download the PPP connection goes down. The sync signal stays up, but the PPP goes down!
In the log these lines corresponds:
Sun, 2013-01-20 23:29:29 - No response to 3 echo-requests
Sun, 2013-01-20 23:29:29 - Serial link appears to be disconnected.
Sun, 2013-01-20 23:29:29 - Enter: tdb_store.
Sun, 2013-01-20 23:29:29 - tdb_store: calling tdb_update.
Sun, 2013-01-20 23:29:29 - Enter: tdb_update.
[code]....
My ISP says that there are no troubles with the line and it can be an issue of the modem...
View 8 Replies
View Related
Feb 25, 2013
I have been experiencing random disconnection from the internet completely out of the blue lately. Router has worked great for a long long time. Now it just drops connection and is down for about a minute and then I can reconnect or reload a webpage.I have my xbox live and PC wired with a laptop wireless. It drops everything at the same time everytime. I hardwired my xbox to the modem and gamed all day. I would assume this could eliminate the modem as an issue. There isnt any inconsistencies with the router's colour or lights to my knowledge either.
I put a new Ethernet cable from modem to router to try and I thought it fixed the problem but it lasted problem free for about 6 hours then it crashed.
View 1 Replies
View Related
Feb 17, 2013
I have a Switch model WS-C3560X-24P with SW Version 12.2. (55) SE5 and SW Image C3560E-UNIVERSALK9-M. Now I get messages from 3 ports that:% ILPOWER-5-IEEE_DISCONNECT: Interface Gi0/12: PD removed. The strange thing is that there is nothing connected to these ports and they are like "notconnect»
An excerpt of the log looks like this:
1469058: Feb 18 09:08:33.945 CET: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi0/12: PD removed 1469060: Feb 18 09:08:49.279 CET: %ILPOWER-5-POWER_GRANTED: Interface Gi0/12: Power granted 1469061: Feb 18 09:08:50.310 CET: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi0/12: PD removed 1469063: Feb 18 09:09:02.280 CET: %ILPOWER-5-POWER_GRANTED: Interface Gi0/12: Power granted 1469064: Feb 18 09:09:03.413 CET: %ILPOWER-5-[Code]....
View 5 Replies
View Related
Jan 2, 2011
I have a Dell XPS 410 desktop PC purchased in 2006 now running Windows 7 (32-bit) that is hard-wired to D-Link 825 dual band N router.
The Problem- The desktop, when actively using the internet, will randomly lose connection to the Internet, then by just waiting, it re-acquires a connection. When it does this it sometimes also disconnects other laptops that are wirelessly connected through the same router, or at least slows them way down. Also similarly effects a hard-wired X-Box 360 (either loses connection all together or, the games start to severely lag) much to the disdain of my game playing kids.
[code]....
View 4 Replies
View Related
Jan 29, 2011
this has been a new developing problem i have been having it its starting to be a pain in the you know what. Recently i have been losing connection off the network countless times a day then to have problems getting back online. I have a Belkin Surf and Share Wireless N router that was working perfectly. i have a laptop sitting next to me that doesnt go offline when i do. Seems like im the only person in the house hold experiencing problems. I even tried a different wireless card and still have the same issue. im clueless on what to do. i tried flushing my DNS several times. I have a connection of only .30 mbsp from this issue as well.
View 1 Replies
View Related
Mar 16, 2011
I have moved into an apartment with 4 friends of mine. We all own HP 6515b Laptop running Windows 7. We connect to the internet through a wireless router. Our connection's name is LINKSYS and is WEP.Once i have connected to the internet, it will continue to work fine for a while. After some random time, it will disconnect.(The computer stays connected to the wireless modem, but computer shows NO INTERNET CONNECTIVITY (in bottom-right taskbar))Then in 5-6 seconds, it will start working again... The only change that is visible is that the exclamation mark on network disappears. The computer remains connected to router for this whole time. Initially we thought it was a problem of our ISP. But later we found out that at a time not all users face disconnection.So at a particular time, it is possible that only I cannot open webpages.
View 9 Replies
View Related
Oct 19, 2011
I've just got a BRAND NEW HP dv7-6197ca
Specs: Windows 7 64 bit
Processor: Intel i7-2360QM 2.0 Ghz with Turbo boost technology
RAM: 8GB DDR3
Graphics: Radeon HD 6770m 1GB
Storage: 2 x 500 GB 7200rpm
Network Interface: Integrated 10/100/1000 Gigabit Ethernet LAN
Wireless: Wireless LAN 802.11 b/g/n. Bluetooth wireless networking with WiDi
So problem is with persistent disconnection from my landlord's wireless hotspot. The usual exclamation mark at the wireless bar indicating that I'm connected to the network but I don't get internet access...I've got the computer checked up by STAPLES where I bought it and everything was in perfect shape, network card fully functional... I mean it is brand new. They even reformatted the computer and installed clean Windows 7 with no crap software in it...I brought the computer to school and internet works FLAWLESSLY. Disgustingly fast.The problem is only when I'm at home where my internet would work fine for say 5 mins and then the exclamation mark will pop at the wireless bar and I would lose internet access for half an hour or more. I would get the access back and then it would disconnect again.
I called my ISP and they suggested to change my wireless channel to a unique # say channel 11 from 1-11. Turns out the wireless channel already is on 11... I then got it changed to 1 by my landlord. Still same situation. We then tried to change the wireless security encryption (e.g WPA-personal to WPA2). My computer can't connect in that case...On a side note I do have an older laptop (~7 years old), the one I had before purchasing this new computer. This old laptop can connect to the wireless and work PERFECTLY.
So the problem happens only with this new computer, and only at home. I'm completely clueless as to what the problem might be. It looks like some kind of interference but I've tried changing wireless channel (from 11 to 1) which didn't get rid of the persistent disconnection. Could it be interference with another computer that's using the same wireless hotspot in the house?
View 5 Replies
View Related
