topic Re: LAN-to-LAN. Output from log. What does it say? in Network Security

LAN-to-LAN. Output from log. What does it say?

eym — Fri, 21 Feb 2020 08:00:53 GMT

I have a LAN-to-LAN running and it works OK, as it seams.

In my log this keep coming 5 times/sec:

60474 03/15/2005 13:59:30.930 SEV=3 AUTH/5 RPT=31449 13x.22y.29z.24w

Authentication rejected: Reason = Simultaneous logins exceeded for user handle = 633, server = (none), user = 13x.22y.29z.24w, domain = <not specified>

13x.22y.29z.24w is my Remote peer.

What can possible be the problem?

VPN Concentrator Type: 3060

Software Rev: Cisco Systems, Inc./VPN 3000 Concentrator Version 4.1.5.Rel Jun 18 2004 00:22:46

Re: LAN-to-LAN. Output from log. What does it say?

sstudsdahl — Tue, 15 Mar 2005 22:55:52 GMT

It looks like there are too many logins by that specific account. Is your remote peer another Cisco VPN device or another vendors?

Is it possible that the remote VPN connection is trying to establish a second connection into your concentrator? The other thing that comes to mind would be the "simultaneous logins" defined for the LAN-to-LAN tunnel. I would assume that this would apply to the entire connection and not individual networks defined in the network lists.

I've got a different issue that makes me wonder if I am experiencing this exact issue. In particular, one of my LAN-to-LAN connection will lose access to a network periodically. The only fix is to logout the session and let it get rebuilt. I will try increasing the simultaneous logins for my issue and see if that corrects it. If so, I will let you know.

HTH

Steve

Re: LAN-to-LAN. Output from log. What does it say?

eym — Wed, 16 Mar 2005 10:09:18 GMT

Thank you for your quick answer.

The remote peer is Firewall-1.

You have the same thinking I had about remote end trying to establish a second connection. I have asked them about this, but they mean not to have a second session trying to establish.

Have tried to logout the session, it fixes the problem only for a short time. I have searched for, but can't find the definition of "simultaneous logins" on my LAN-to-LAN, do you know where that definition is made on a LAN-to-LAN?