AnyConnect AAA routing issues

NetworkMonkey101 — Fri, 04 Apr 2025 11:54:21 GMT

I have two sites one has a working AnyConnect solution 192.168.250.96 the other is not working 10.102.64.94.

After review the RAVPN configuration I am sure it is correct but I have identified a possible routing issue for the AAA server.

As you can see above the working solution on 192.168.250.96 see the AAA server 192.168.235.11 on a directly connected DMZ interface. It also see's the seocndary AAA 172.16.1.23 located at the other site via ospf and routing seems to be ok.

The non working solution on the other hand also sees the opposite DMZ AAA server 192.168.235.11 via ospf but is picking up a default route to the inside which appears ok..

But it's own DMZ server 172.16.1.23 states it is directly connected but is also using a static route via the inside when it should be going via DMZ_PCH_INTERNET...

Is there an issue with a static route overriding the directly connected DMZ route?

Re: AnyConnect AAA routing issues

MHM Cisco World — Fri, 04 Apr 2025 12:42:46 GMT

Can you draw topolgy

MHM

topic Re: AnyConnect AAA routing issues in Network Security

AnyConnect AAA routing issues

Re: AnyConnect AAA routing issues