cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
991
Views
5
Helpful
3
Replies

ASA 5506-X VPN issue and options

simonq3sec
Level 1
Level 1

Hi All,

 

I am using ASA 5506-X firewall in our office and I have VPN connection setup over IPSec (IKE1) and Cisco VPN Client 5.0.07.0440. We have currently only 2 people connecting via VPN but I am trying to setup new laptops with access to files in shared drive. It will never be more then 3-5 people connected at the same time.

My issue is that laptops are dropping connection shortly after connecting. While checking out logs of VPN Client I can see the connection is terminating due to IP address change (see logs in attachment). I have also 2 PCs that are connecting without any problems (one is Win 7 and other one Win 10) and connection does not drop for a week if not disconnected manually. Is there any solution for that problem? 

If Cisco VPN Client is an issue is there any 3rd party client that I could use with my setup?

 

When it comes to AnyConnect, my Base license says that I can have 2 AnyConnect Premium Peers but when tried to setup that via Windows AnyConnect I had license error. Is it possible to use those 2 licenses or is it outdated feature that cannot be used with new clients? I got quote for AnyConnect VPN but is quite big money for perpetual license so if possible, I would prefer to avoid going that road if I have 10 IPsec peers ready to be used.

 

Thanks,

 

Simon Kochan

 

EDIT

 

I did some testing last night and problem appears only on WiFi connection. When I connected 2 laptops via cable directly to my home router I had working tunnel for more then an hour on both laptops, then disconnected cable and connected to WiFi and connection dropped after 40 seconds.

3 Replies 3

I would try to look at the wifi access point/router logs and check if there is any output that would help to understand what's going on. Also, I would try to connect one of the laptops to a mobile phone and connect to the VPN over 3G/4G/5G connection. If that works well then at least you would know that the issue is local to your wifi network and the remote users wouldn't be affected.

simonq3sec
Level 1
Level 1

Hi Aref,

Thanks for reply.

Problem happens on all WiFi networks I tested including phone hotspots. I was looking for a solution to my problem and found this thread which is probably right but I cannot find a solution for a fix anywhere.
https://answers.microsoft.com/en-us/windows/forum/all/cisco-vpn-client-lost-conection-only-wifi-after/73a6157e-df68-4c07-9c18-caf28c0de12b

 

You welcome. I think at this point probably you should try to move to AnyConnect rather than using the old VPN client which I think is not supported anymore. Alternatively, maybe you can try to use Shrew VPN client.