anyconnect client keeps getting disconnected

[Amafsha1]

There is a win 7 client that keeps getting disconnected a lot and has really bad performance on a specific day of the week he says from our VPN ASA5540.  To make matters funny, he only says this happens on Saturdays..    I've searched but I can't find anything pertaining to how to tshoot this.  I always get lost when it comes to troubelshooting VPN issues with clients

logs from client anyconnect client using anyconnect version 4.5.01044

6:28:54 AM Contacting vpn.test.com.
6:29:23 AM User credentials entered.
6:29:24 AM Establishing VPN session...
6:29:24 AM The AnyConnect Downloader is performing update checks...
6:29:24 AM Checking for profile updates...
6:29:24 AM Checking for product updates...
6:29:24 AM Checking for customization updates...
6:29:24 AM Performing any required updates...
6:29:24 AM The AnyConnect Downloader updates have been completed.
6:29:24 AM Establishing VPN - Examining system...
6:29:24 AM Establishing VPN - Activating VPN adapter...
6:29:25 AM Establishing VPN session...
6:29:28 AM Establishing VPN - Configuring system...
6:29:28 AM Establishing VPN...
6:29:28 AM Connected to vpn.test.com.
6:31:11 AM Reconnecting to vpn.test.com...
6:31:18 AM Reconnecting to vpn.test.com...
6:31:51 AM Reconnecting to vpn.test.com...
6:31:52 AM Establishing VPN - Examining system...
6:31:52 AM Establishing VPN - Activating VPN adapter...
6:31:52 AM Establishing VPN - Configuring system...
6:31:52 AM Establishing VPN...
6:31:52 AM Connected to vpn.test.com.
6:33:14 AM Reconnecting to vpn.test.com...
6:33:15 AM Connected to vpn.test.com.
6:34:30 AM Reconnecting to vpn.test.com...
6:34:37 AM Reconnecting to vpn.test.com...
6:34:41 AM Establishing VPN - Examining system...
6:34:41 AM Establishing VPN - Activating VPN adapter...
6:34:41 AM Establishing VPN - Configuring system...
6:34:41 AM Establishing VPN...
6:34:42 AM Connected to vpn.test.com.
6:35:31 AM Reconnecting to vpn.test.com...
6:35:38 AM Reconnecting to vpn.test.com...
6:35:58 AM Disconnect in progress, please wait...
6:36:00 AM Ready to connect.
6:36:01 AM Contacting vpn.test.com.
6:36:22 AM User credentials entered.
6:36:43 AM User credentials entered.
6:36:44 AM Establishing VPN session...
6:36:44 AM The AnyConnect Downloader is performing update checks...
6:36:44 AM Checking for profile updates...
6:36:44 AM Checking for product updates...
6:36:44 AM Checking for customization updates...
6:36:44 AM Performing any required updates...
6:36:44 AM The AnyConnect Downloader updates have been completed.
6:36:44 AM Establishing VPN - Examining system...
6:36:44 AM Establishing VPN - Activating VPN adapter...
6:36:45 AM Establishing VPN session...
6:36:48 AM Establishing VPN - Configuring system...
6:36:48 AM Establishing VPN...
6:36:48 AM Connected to vpn.test.com.
6:41:33 AM Reconnecting to vpn.test.com...
6:41:44 AM Connected to vpn.test.com.
6:42:34 AM Reconnecting to vpn.test.com...
6:45:05 AM Disconnect in progress, please wait...
6:45:07 AM Ready to connect.

logs from logging server#

11/21/2018
03:33:19.717
Nov 21 2018 03:33:19: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:51716 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7046 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:33:14.572
Nov 21 2018 03:33:14: %ASA-5-750007: Local:172.25.2.6:4500 Remote:192.168.2.1:51458 Username:user1.user1 IKEv2 SA DOWN. Reason: peer lost
source event_type hostname Time Remote IP VPN Username Reason
11/21/2018
03:31:56.247
Nov 21 2018 03:31:56: %ASA-5-751025: Local:172.25.2.6:4500 Remote:192.168.2.1:51458 Username:user1.user1 IKEv2 Group:GroupPolicy_delo-VPN-Duo2FA IPv4 Address=172.25.8.96 IPv6 address=0.0.0.0 assigned to session
source event_type hostname Remote IP VPN Username Internal IP
11/21/2018
03:31:56.247
Nov 21 2018 03:31:56: %ASA-5-750006: Local:172.25.2.6:4500 Remote:192.168.2.1:51458 Username:user1.user1 IKEv2 SA UP. Reason: New Connection Established
source event_type hostname Remote IP VPN Username Reason
11/21/2018
03:31:56.161
Nov 21 2018 03:31:56: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:51458 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7047 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:31:56.161
Nov 21 2018 03:31:56: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:51458 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7046 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:31:34.593
Nov 21 2018 03:31:34: %ASA-5-750007: Local:172.25.2.6:4500 Remote:192.168.2.1:57852 Username:user1.user1 IKEv2 SA DOWN. Reason: peer lost
source event_type hostname Time Remote IP VPN Username Reason
11/21/2018
03:29:28.417
Nov 21 2018 03:29:28: %ASA-5-751025: Local:172.25.2.6:4500 Remote:192.168.2.1:57852 Username:user1.user1 IKEv2 Group:GroupPolicy_delo-VPN-Duo2FA IPv4 Address=172.25.8.96 IPv6 address=0.0.0.0 assigned to session
source event_type hostname Remote IP VPN Username Internal IP
11/21/2018
03:29:28.417
Nov 21 2018 03:29:28: %ASA-5-750006: Local:172.25.2.6:4500 Remote:192.168.2.1:57852 Username:user1.user1 IKEv2 SA UP. Reason: New Connection Established
source event_type hostname Remote IP VPN Username Reason
11/21/2018
03:29:28.415
Nov 21 2018 03:29:28: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:57852 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7047 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:29:28.415
Nov 21 2018 03:29:28: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:57852 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7046 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:43:04.446
Nov 21 2018 03:43:04: %ASA-5-750007: Local:172.25.2.6:4500 Remote:192.168.2.1:64664 Username:user1.user1 IKEv2 SA DOWN. Reason: peer lost
source event_type hostname Time Remote IP VPN Username Reason
11/21/2018
03:41:47.932
Nov 21 2018 03:41:47: %ASA-5-751025: Local:172.25.2.6:4500 Remote:192.168.2.1:64664 Username:user1.user1 IKEv2 Group:GroupPolicy_delo-VPN-Duo2FA IPv4 Address=172.25.8.98 IPv6 address=0.0.0.0 assigned to session
source event_type hostname Remote IP VPN Username Internal IP
11/21/2018
03:41:47.932
Nov 21 2018 03:41:47: %ASA-5-750006: Local:172.25.2.6:4500 Remote:192.168.2.1:64664 Username:user1.user1 IKEv2 SA UP. Reason: New Connection Established
source event_type hostname Remote IP VPN Username Reason
11/21/2018
03:41:47.844
Nov 21 2018 03:41:47: %ASA-5-750007: Local:172.25.2.6:4500 Remote:192.168.2.1:62321 Username:user1.user1 IKEv2 SA DOWN. Reason: unknown
source event_type hostname Time Remote IP VPN Username Reason
11/21/2018
03:41:47.844
Nov 21 2018 03:41:47: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:64664 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7047 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:41:47.844
Nov 21 2018 03:41:47: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:64664 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7046 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:36:48.431
Nov 21 2018 03:36:48: %ASA-5-751025: Local:172.25.2.6:4500 Remote:192.168.2.1:62321 Username:user1.user1 IKEv2 Group:GroupPolicy_delo-VPN-Duo2FA IPv4 Address=172.25.8.98 IPv6 address=0.0.0.0 assigned to session
source event_type hostname Remote IP VPN Username Internal IP
11/21/2018
03:36:48.431
Nov 21 2018 03:36:48: %ASA-5-750006: Local:172.25.2.6:4500 Remote:192.168.2.1:62321 Username:user1.user1 IKEv2 SA UP. Reason: New Connection Established
source event_type hostname Remote IP VPN Username Reason
11/21/2018
03:36:48.429
Nov 21 2018 03:36:48: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:62321 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7047 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:36:48.429
Nov 21 2018 03:36:48: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:62321 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7046 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:36:04.536
Nov 21 2018 03:36:04: %ASA-5-750007: Local:172.25.2.6:4500 Remote:192.168.2.1:52571 Username:user1.user1 IKEv2 SA DOWN. Reason: peer lost
source event_type hostname Time Remote IP VPN Username Reason
11/21/2018
03:34:45.855
Nov 21 2018 03:34:45: %ASA-5-751025: Local:172.25.2.6:4500 Remote:192.168.2.1:52571 Username:user1.user1 IKEv2 Group:GroupPolicy_delo-VPN-Duo2FA IPv4 Address=172.25.8.96 IPv6 address=0.0.0.0 assigned to session
source event_type hostname Remote IP VPN Username Internal IP
11/21/2018
03:34:45.855
Nov 21 2018 03:34:45: %ASA-5-750006: Local:172.25.2.6:4500 Remote:192.168.2.1:52571 Username:user1.user1 IKEv2 SA UP. Reason: New Connection Established
source event_type hostname Remote IP VPN Username Reason
11/21/2018
03:34:45.765
Nov 21 2018 03:34:45: %ASA-5-750007: Local:172.25.2.6:4500 Remote:192.168.2.1:51716 Username:user1.user1 IKEv2 SA DOWN. Reason: unknown
source event_type hostname Time Remote IP VPN Username Reason
11/21/2018
03:34:45.765
Nov 21 2018 03:34:45: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:52571 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7047 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:34:45.765
Nov 21 2018 03:34:45: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:52571 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7046 could not be processed. Error: Unknown/Unsupported Attribute
source event_type hostname Remote IP VPN Username
11/21/2018
03:33:19.804
Nov 21 2018 03:33:19: %ASA-5-751025: Local:172.25.2.6:4500 Remote:192.168.2.1:51716 Username:user1.user1 IKEv2 Group:GroupPolicy_delo-VPN-Duo2FA IPv4 Address=172.25.8.96 IPv6 address=0.0.0.0 assigned to session
source event_type hostname Remote IP VPN Username Internal IP
11/21/2018
03:33:19.804
Nov 21 2018 03:33:19: %ASA-5-750006: Local:172.25.2.6:4500 Remote:192.168.2.1:51716 Username:user1.user1 IKEv2 SA UP. Reason: New Connection Established
source event_type hostname Remote IP VPN Username Reason
11/21/2018
03:33:19.717
Nov 21 2018 03:33:19: %ASA-4-751014: Local:172.25.2.6:4500 Remote:192.168.2.1:51716 Username:user1.user1 IKEv2 Warning Configuration Payload request for attribute 0x7047 could not be processed. Error: Unknown/Unsupported Attribute

From what I noticed on this client is that the log message that says "IKEv2 Warning Configuration Payload request for attribute 0x7046 could not be processed. Error: Unknown/Unsupported Attribute" is an error message that I don't see from other clients and only from this user.  Can't tell if this is what is causing the issue, but I can't find any info online about this log and what it is..

I believe there is a 3 hour time different between client and the server. 

Thank you in advance

[Francesco Molino]

Hi

How is this user authenticated? If through radius, can you verify what kind of attributes is being pushed?
Can you run the debug anyconnect in the firewall please and share the output?
Have you installed anyconnect DART on the client? Install it and exit detailed logs from it please.

Only Saturday? Is he trying to connect during week days.

[Amafsha1]

Thank you for your response Francesco.  yes, he connects all the time, but only complains about saturdays.  Correct, through RADIUS.  How do I verify the attributes that are being pushed through him? I will look into the RADIUS server to see if I can figure it out. 

Ok, I will run a debug.  Do you have a more specific debug I can run against his username/account, so I don't overload the VPN router?  We have about 40 simultaneous users who use this VPN on any given day.    Are you looking for "debug webvpn anyconnnect" debug?

Do you think this could possibly have to do with the version of anyconnect?  he's using 4.x where as in I use 3.x and I have no problems ever.  Thank you for your help

[Francesco Molino]

You can add a condition using debug webvpn condition user xxxx.
Not sure it's related to version but we will wait debug to see. The weird thing is you say it works perfectly well during week days except on saturday? What about sunday?
What radius server are you using? Can you share the policy for it?