Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About wngwngwng
Stats
Member since
03-29-2007
47
Posts
5
Helpful
0
Solutions
12-14-2016
09:39 AM
No worries.
We are not doing any Dynamic Protocol peering over the tunnels. I'll check out the features mentioned in the link again. Could this type of setup potentially cause a loop?
... View more
12-13-2016
09:41 AM
Hi Neno,
Thanks for the link. I don't think it's what I need since I only have a single ISP. I have 2 site-to-site tunnels I setup. One tunnel to HQ and the other to DR. Is there a way to get the remote users to use/prefer the HQ tunnel and use the DR tunnel only if HQ tunnel goes down? The HQ network knows how to get to DR network. So there will be overlapping of subnets in the 'remote' encryption subnets between the 2 tunnels.
Thanks,
Bill
... View more
12-08-2016
08:08 AM
Hi All,
I have a remote site ASA using a single ISP. We have 2 active site to site tunnels, one to HQ and the other to our DR. Is there a way to have both tunnels active but prefer the tunnel to HQ? There is some overlap of network subnets on each of the tunnels as well.
Thanks in advance.
Bill
... View more
Labels:
11-12-2014
09:18 AM
Thanks for the reply. We have 1 HA pair in our primary DC (Active/Standby) and another HA pair in our DR site (Active/Standby) as well. The primary HA pair is the shared license server and the DR HA pair is the backup license server. From the primary HA pair I can ping the DR HA pair and vice versa. I find it odd that there is client info on the DR HA and not on the primary DC one. See below. Is this normal? And do you know of a way to reregister the DR HA to the primary DC one? PrimaryASA01# sh shared license detail Backup License Server Info: Device ID : DRasa01-active Address : 1.1.1.1 Registered : NO HA peer ID : DRasa01-standby Registered : NO Messages Tx/Rx/Error: Hello : 0 / 0 / 0 Sync : 0 / 0 / 0 Update : 27 / 27 / 0 Shared license utilization: AnyConnect Premium: Total for network : 500 Available : 110 Utilized : 390 This device: Platform limit : 504 Current usage : 390 High usage : 390 Messages Tx/Rx/Error: Registration : 0 / 0 / 0 Get : 14 / 14 / 0 Release : 13 / 13 / 0 Transfer : 0 / 0 / 0 Client Info: ********************** DRasa01# sh shared license detail This device is the Backup License Server: Backup state : EXPIRED Messages Tx/Rx/Error: Hello : 0 / 0 / 0 Sync : 0 / 0 / 0 Update : 27 / 27 / 0 Shared license utilization: AnyConnect Premium: Total for network : 500 Available : 110 Utilized : 390 This device: Platform limit : 504 Current usage : 0 High usage : 0 Messages Tx/Rx/Error: Registration : 4464 / 0 / 4463 Get : 0 / 0 / 0 Release : 0 / 0 / 0 Transfer : 0 / 0 / 0 Client Info: Hostname : PrimaryASA01 Device ID : PrimaryASA01-active AnyConnect Premium: Current usage : 390 High : 390 Messages Tx/Rx/Error: Registration : 0 / 0 / 0 Get : 14 / 14 / 0 Release : 13 / 13 / 0 Transfer : 0 / 0 / 0
... View more
11-12-2014
06:53 AM
How do I go about getting the backup state changed on this shared licensing server? I'm guessing that EXPIRED is not a good thing. Also does this need to register with the primary shared license server? On the primary it says the backup licensing server is not registered. Thanks in advance. ******asa01# sh shared license detail This device is the Backup License Server: Backup state : EXPIRED Messages Tx/Rx/Error: Hello : 0 / 0 / 0 Sync : 0 / 0 / 0 Update : 24 / 24 / 0 Shared license utilization: AnyConnect Premium: Total for network : 500 Available : 160 Utilized : 340 This device: Platform limit : 504 Current usage : 0 High usage : 0 Messages Tx/Rx/Error: Registration : 4144 / 0 / 4143 Get : 0 / 0 / 0 Release : 0 / 0 / 0 Transfer : 0 / 0 / 0
... View more
Labels:
10-30-2014
05:06 AM
I myself have not got a resolution yet except for having the client reinstalled and that isn't 100% guaranteed. I have also seen where some setting or something with the user's home wifi router causing issues with VPN.
... View more
10-30-2014
05:03 AM
Our clients are Windows 7 and this doesn't happen to everybody if at all many. On occasion I have had the Anyconnect client reinstalled on their workstations and it seemed to work. Not sure if the Anyconnect service/drive gets messed up. I haven't had the chance to packet capture the inside interface while the client was connected. I figure if the problem was the ASA that more folks connecting would have the issue.
... View more
07-16-2014
12:56 PM
The client side says it is connected and when I look at the ASA the username connected is still listed. I'll have to check on the logs and such to see if there are any anomalies.
... View more
Created by
wngwngwng
in VPN and AnyConnect
in VPN and AnyConnect
06-30-2014
12:18 PM
06-30-2014
12:18 PM
Hi All, Has anyone ever had an Anyconnect VPN client just lose connectivity in the middle of a session? The user connects via VPN fine all internal resources are available and they can get to things. Within a certain time frame the user all of the sudden cannot get to internal resources, but tunnel is still established and connected. They cannot ping internal resources nor can I ping the client IP of the user that is connected. I see the connection still there within the CLI. The user can log off and log back into the vpn and work again, but the issue may creep up again. Any one else seen an issue like this? Thanks, Bill
... View more
Labels:
03-03-2014
11:23 AM
All, I am have having an issue in which my Anyconnect clients are connecting to the VPN using SSLVPN instead of IPsec(IKEv2). I have a check box on Enable IPsec(IKEv2) client protocol and have the check box cleared on Enable SSL VPN client protocol. The group policy I have it pointing too only has a checkbox in IPsec IKEv2. I have this same setup on another set of ASAs and it works just fine with IPsec(IKEv2). Am I missing something? Thanks in advance, Bill
... View more
Labels:
01-14-2014
05:58 AM
Hi all, We are getting some calls regarding Anyconnect users getting timed-out in their IBM Host-on-demand sessions when they leave the app idle. The users are not getting logged out of anyconnect. Idle timeout on the ASA is set to unlimited. If the users are directly connected to the LAN and leave the Host-on-demand idle they are not getting timed-out. Anyone have any suggestions on what else I could check or change to keep this from happening. Thanks. Bill
... View more
Labels:
11-20-2013
09:12 AM
Ours is working with MAC OSX now. I'm trying to recall from memory how I got it working. I had to put the macosx AnyConnect client pkg file in the AnyConnect Client software. Make sure your DAPs are not blocking MAC OSX. Make sure your CA certificates have the issuing server from where your certs come from. I have our MS PKI issuing servers certificates uploaded. Watch your ASA logs as you connect as well. Hope this helps. Bill
... View more
Created by
wngwngwng
in VPN and AnyConnect
in VPN and AnyConnect
10-28-2013
10:45 AM
10-28-2013
10:45 AM
Hi Harry, I have resolved the issue. I didn't realize that I had to have the Mac Anyconnect pkg file copied to the flash of the ASA. Once I did that the authentication issue went away. Bill
... View more
Created by
wngwngwng
in VPN and AnyConnect
in VPN and AnyConnect
10-25-2013
01:12 PM
10-25-2013
01:12 PM
Hi all, I'm running into the following error when I use a Mac OSX anyconnect client when I try to connect. Our Windows 7 anyconnect clients login just fine. 3 Oct 25 2013 16:19:54 751011 Local:x.x.x.x:4500 Remote:y.y.y.y:34573 Username:Unknown Failed user authentication. Error: General Failure %ASA-3-751011: Local: localIP:port Remote:remoteIP:port Username:
username/group Failed user authentication. Error: error A failure occured during user authentication within EAP for an IKE version 2 remote access connection. • localIP:port—The local IP address and port number • remoteIP:port—The remote IP address and port number • username/group—The username or group associated with this connection attempt • error—The error string that indicates the specific error Any ideas of what could be causing this? We are using certifcate and LDAP for AAA. Thanks in Advance. Bill
... View more
- Tags:
- anyconnect
Labels:
12-14-2016
No worries. We are not doing any Dynamic Protocol peering over the
tunnels. I'll check out the featu...
12-13-2016
Hi Neno, Thanks for the link. I don't think it's what I need since I
only have a single ISP. I have ...
12-08-2016
Hi All, I have a remote site ASA using a single ISP. We have 2 active
site to site tunnels, one to H...
11-12-2014
Thanks for the reply.We have 1 HA pair in our primary DC
(Active/Standby) and another HA pair in our...
11-12-2014
How do I go about getting the backup state changed on this shared
licensing server? I'm guessing tha...
10-30-2014
I myself have not got a resolution yet except for having the client
reinstalled and that isn't 100% ...
10-30-2014
Our clients are Windows 7 and this doesn't happen to everybody if at all
many. On occasion I have ha...
07-16-2014
The client side says it is connected and when I look at the ASA the
username connected is still list...
Created by
wngwngwng
in VPN and AnyConnect
06-30-2014
06-30-2014
Hi All, Has anyone ever had an Anyconnect VPN client just lose
connectivity in the middle of a sessi...
03-03-2014
All,I am have having an issue in which my Anyconnect clients are
connecting to the VPN using SSLVPN ...
01-14-2014
Hi all,We are getting some calls regarding Anyconnect users getting
timed-out in their IBM Host-on-d...
11-20-2013
Ours is working with MAC OSX now. I'm trying to recall from memory how I
got it working.I had to put...
10-28-2013
Hi Harry,I have resolved the issue. I didn't realize that I had to have
the Mac Anyconnect pkg file ...
10-25-2013
Hi all,I'm running into the following error when I use a Mac OSX
anyconnect client when I try to con...
Public Statistics
| Date Registered | 03-29-2007 05:30 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 47 |
| Total Helpful Votes Received | 5 |
