cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
727
Views
0
Helpful
0
Comments
mlopacinski
Level 1
Level 1

Hello

Two ASA8.2 single mode with failover. Ipsec working fine.

Today installed anyconnect+mobile license.

It's working fine but...does not replicate session for faliover.

Example, while loggin in primary seems to send that info to secondary:

%ASA-7-720041: (VPN-Primary) Sending Create WebVPN Session message user user1, IP 19.x.x.x to standby unit

%ASA-7-720041: (VPN-Primary) Sending WebVPN Session Mgr Data message Session Index 765953 to standby unit

But when failover few minutes later occurs i receive:

%ASA-6-722023: Group <webvpn> User <user1> IP <19.x.x.x> UDP SVC connection terminated without compression

Failover configuration:

failover

failover lan unit secondary     (or primary)

failover lan interface failover GigabitEthernet0/3

failover key *****

failover replication http

failover link failover GigabitEthernet0/3

failover interface ip failover 192.168.255.1 255.255.255.252 standby 192.168.255.2

At the same time IPsec (cisco ipsec vpn client) works fine after failover occurs - and users the same group-policy and tunnel-group !

What's wrong ?

Thanx

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: