cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
69996
Views
28
Helpful
34
Replies

Cisco AnyConnect Constantly Reconnecting on Macbook Pro

brandonleetran
Level 1
Level 1

Hi Folks,

 

In the past month my VPN AnyConnect is constantly reconnecting. From every 3 minutes to every 15 minutes at times. This is a major blocker for attending meetings and workflow interruptions. 

 

I've tried various changes from IPv6 disabling to MTU adjustments but none of these tweaks are correcting the problem.

 

Macbook Pro 15-inch, 2018

macOS Mojave 10.14.5

Cisco AnyConnect Secure Mobility Client Version 4.7.01076

AT&T Gigabit 

Router Model5268AC
Hardware Version260-2173300
Software Version11.1.0.531418-att

 

I did do a test and spent 1.5 hours at Starbucks connected to the VPN with no issues. What is it with AT&T and Cisco combination that is causing the constant reconnects?

 

Thanks for any help.  

 

11:23:53 AM Reconnecting to ******.com...
11:23:55 AM Establishing VPN - Examining system...
11:23:55 AM Establishing VPN - Activating VPN adapter...
11:23:55 AM Establishing VPN - Configuring system...
11:23:58 AM Establishing VPN...
11:23:58 AM Connected to ******.com...
11:25:53 AM Reconnecting to ******.com...
11:25:56 AM Establishing VPN - Examining system...
11:25:56 AM Establishing VPN - Activating VPN adapter...
11:25:56 AM Establishing VPN - Configuring system...
11:25:58 AM Establishing VPN...
11:25:58 AM Connected to ******.com...
11:27:01 AM Reconnecting to ******.com...
11:27:03 AM Establishing VPN - Examining system...
11:27:03 AM Establishing VPN - Activating VPN adapter...
11:27:03 AM Establishing VPN - Configuring system...
11:27:06 AM Establishing VPN...
11:27:06 AM Connected to ******.com...
11:30:37 AM Reconnecting to ******.com...
11:30:39 AM Establishing VPN - Examining system...
11:30:39 AM Establishing VPN - Activating VPN adapter...
11:30:39 AM Establishing VPN - Configuring system...
11:30:52 AM Establishing VPN...
11:30:52 AM Connected to ******.com...
11:32:37 AM Reconnecting to ******.com...
11:32:40 AM Establishing VPN - Examining system...
11:32:40 AM Establishing VPN - Activating VPN adapter...
11:32:40 AM Establishing VPN - Configuring system...
11:32:42 AM Establishing VPN...
11:32:42 AM Connected to ******.com...

34 Replies 34

aninayak
Cisco Employee
Cisco Employee
To me mentioned conditions appears to be matching below said bug
ENH: Optimize tunnel security reinforcement on macOS upon virtual adapter detection: CSCvp04196

Please take a look at this bug and reverify the defined conditions in the bug and match them with the conditions that you are facing

thazarik
Cisco Employee
Cisco Employee

This is what helped me:

  • Open the console app, search for IN6_NDP_ADDR_EXPIRY. We're looking for something like this:
    • kernel: in6_eventhdlr_callback Event IN6_NDP_ADDR_EXPIRY received
  • If found at regular intervals matching your VPN reconnects, read on
  • In network preferences, set a static IPv6 address. Just changing Configure IPv6: "automatic" to "manual" should do it.

Yes, after turning off bluetooth completely and in network preferences setting configure IPV6 from automatic to manual the VPN session flap stopped.

We're in 2020, and still no fix!? Running macOS 10.15.2 and AnyConnect 4.8.01090 and seeing disconnects anywhere from just over an hour to within a minute of connecting.

 

1/3/20

    8:48:45 AM    Ready to connect.

    8:48:45 AM    Contacting SERVER.

    8:48:53 AM    User credentials entered.

    8:49:06 AM    Please respond to banner.

    8:49:20 AM    User accepted banner.

    8:49:20 AM    Establishing VPN session...

    8:49:21 AM    The AnyConnect Downloader is performing update checks...

    8:49:21 AM    Checking for profile updates...

    8:49:21 AM    Checking for product updates...

    8:49:21 AM    Checking for customization updates...

    8:49:21 AM    Performing any required updates...

    8:49:21 AM    The AnyConnect Downloader updates have been completed.

    8:49:21 AM    Establishing VPN session...

    8:49:21 AM    Establishing VPN - Initiating connection...

    8:49:21 AM    Establishing VPN - Examining system...

    8:49:21 AM    Establishing VPN - Activating VPN adapter...

    8:49:21 AM    Establishing VPN - Configuring system...

    8:49:24 AM    Establishing VPN...

    8:49:24 AM    Connected to SERVER.

    10:10:15 AM    Reconnecting to SERVER...

    10:10:18 AM    Establishing VPN - Examining system...

    10:10:18 AM    Establishing VPN - Activating VPN adapter...

    10:10:18 AM    Establishing VPN - Configuring system...

    10:10:22 AM    Establishing VPN...

    10:10:22 AM    Connected to SERVER.

    10:10:23 AM    Reconnecting to SERVER...

    10:10:25 AM    Establishing VPN - Examining system...

    10:10:26 AM    Establishing VPN - Activating VPN adapter...

    10:10:26 AM    Establishing VPN - Configuring system...

    10:10:30 AM    Establishing VPN...

    10:10:30 AM    Connected to SERVER.

    10:11:23 AM    Reconnecting to SERVER...

    10:11:26 AM    Establishing VPN - Examining system...

    10:11:26 AM    Establishing VPN - Activating VPN adapter...

    10:11:26 AM    Establishing VPN - Configuring system...

    10:11:30 AM    Establishing VPN...

    10:11:30 AM    Connected to SERVER.

    10:11:30 AM    Reconnecting to SERVER...

    10:11:33 AM    Establishing VPN - Examining system...

    10:11:33 AM    Establishing VPN - Activating VPN adapter...

    10:11:33 AM    Establishing VPN - Configuring system...

    10:11:37 AM    Establishing VPN...

    10:11:37 AM    Connected to SERVER.

    10:31:45 AM    Reconnecting to SERVER...

    10:31:48 AM    Establishing VPN - Examining system...

    10:31:48 AM    Establishing VPN - Activating VPN adapter...

    10:31:48 AM    Establishing VPN - Configuring system...

    10:31:52 AM    Establishing VPN...

    10:31:52 AM    Connected to SERVER.

    10:31:52 AM    Reconnecting to SERVER...

    10:31:55 AM    Establishing VPN - Examining system...

    10:31:55 AM    Establishing VPN - Activating VPN adapter...

    10:31:55 AM    Establishing VPN - Configuring system...

    10:31:59 AM    Establishing VPN...

    10:31:59 AM    Connected to SERVER.

    11:35:34 AM    Reconnecting to SERVER...

    11:35:38 AM    Establishing VPN - Examining system...

    11:35:38 AM    Establishing VPN - Activating VPN adapter...

    11:35:38 AM    Establishing VPN - Configuring system...

    11:35:42 AM    Establishing VPN...

    11:35:42 AM    Connected to SERVER.

    11:35:42 AM    Reconnecting to SERVER...

    11:35:45 AM    Establishing VPN - Examining system...

    11:35:45 AM    Establishing VPN - Activating VPN adapter...

    11:35:45 AM    Establishing VPN - Configuring system...

    11:35:49 AM    Establishing VPN...

    11:35:49 AM    Connected to SERVER.

    11:38:30 AM    Reconnecting to SERVER...

    11:38:33 AM    Establishing VPN - Examining system...

    11:38:33 AM    Establishing VPN - Activating VPN adapter...

    11:38:33 AM    Establishing VPN - Configuring system...

    11:38:37 AM    Establishing VPN...

    11:38:37 AM    Connected to SERVER.

    11:38:37 AM    Reconnecting to SERVER...

    11:38:40 AM    Establishing VPN - Examining system...

    11:38:40 AM    Establishing VPN - Activating VPN adapter...

    11:38:40 AM    Establishing VPN - Configuring system...

    11:38:44 AM    Establishing VPN...

    11:38:44 AM    Connected to SERVER.

    11:46:29 AM    Reconnecting to SERVER...

    11:46:32 AM    Establishing VPN - Examining system...

    11:46:32 AM    Establishing VPN - Activating VPN adapter...

    11:46:32 AM    Establishing VPN - Configuring system...

    11:46:36 AM    Establishing VPN...

    11:46:36 AM    Connected to SERVER.

    11:46:36 AM    Reconnecting to SERVER...

    11:46:40 AM    Establishing VPN - Examining system...

    11:46:40 AM    Establishing VPN - Activating VPN adapter...

    11:46:40 AM    Establishing VPN - Configuring system...

    11:46:43 AM    Establishing VPN...

    11:46:43 AM    Connected to SERVER.

    11:48:17 AM    Reconnecting to SERVER...

    11:48:20 AM    Establishing VPN - Examining system...

    11:48:20 AM    Establishing VPN - Activating VPN adapter...

    11:48:20 AM    Establishing VPN - Configuring system...

    11:48:24 AM    Establishing VPN...

    11:48:24 AM    Connected to SERVER.

    11:48:24 AM    Reconnecting to SERVER...

    11:48:27 AM    Establishing VPN - Examining system...

    11:48:27 AM    Establishing VPN - Activating VPN adapter...

    11:48:27 AM    Establishing VPN - Configuring system...

    11:48:31 AM    Establishing VPN...

    11:48:31 AM    Connected to SERVER.

    12:04:59 PM    Reconnecting to SERVER...

    12:05:02 PM    Establishing VPN - Examining system...

    12:05:02 PM    Establishing VPN - Activating VPN adapter...

    12:05:02 PM    Establishing VPN - Configuring system...

    12:05:05 PM    Establishing VPN...

    12:05:05 PM    Connected to SERVER.

    12:05:05 PM    Reconnecting to SERVER...

    12:05:08 PM    Establishing VPN - Examining system...

    12:05:08 PM    Establishing VPN - Activating VPN adapter...

    12:05:08 PM    Establishing VPN - Configuring system...

    12:05:12 PM    Establishing VPN...

    12:05:12 PM    Connected to SERVER.

    12:33:20 PM    Reconnecting to SERVER...

    12:33:23 PM    Establishing VPN - Examining system...

    12:33:23 PM    Establishing VPN - Activating VPN adapter...

    12:33:23 PM    Establishing VPN - Configuring system...

    12:33:27 PM    Establishing VPN...

    12:33:27 PM    Connected to SERVER.

    1:18:35 PM    Reconnecting to SERVER...

    1:18:38 PM    Establishing VPN - Examining system...

    1:18:38 PM    Establishing VPN - Activating VPN adapter...

    1:18:38 PM    Establishing VPN - Configuring system...

    1:18:42 PM    Establishing VPN...

    1:18:42 PM    Connected to SERVER.

    1:18:42 PM    Reconnecting to SERVER...

    1:18:50 PM    Establishing VPN - Examining system...

    1:18:50 PM    Establishing VPN - Activating VPN adapter...

    1:18:50 PM    Establishing VPN - Configuring system...

    1:18:53 PM    Establishing VPN...

    1:18:53 PM    Connected to SERVER.

    2:05:55 PM    Reconnecting to SERVER...

    2:05:59 PM    Establishing VPN - Examining system...

    2:05:59 PM    Establishing VPN - Activating VPN adapter...

    2:05:59 PM    Establishing VPN - Configuring system...

    2:06:02 PM    Establishing VPN...

    2:06:02 PM    Connected to SERVER.

    2:06:02 PM    Reconnecting to SERVER...

    2:06:05 PM    Establishing VPN - Examining system...

    2:06:05 PM    Establishing VPN - Activating VPN adapter...

    2:06:05 PM    Establishing VPN - Configuring system...

    2:06:09 PM    Establishing VPN...

    2:06:09 PM    Connected to SERVER.

    2:55:39 PM    Reconnecting to SERVER...

    2:55:41 PM    Establishing VPN - Examining system...

    2:55:42 PM    Establishing VPN - Activating VPN adapter...

    2:55:42 PM    Establishing VPN - Configuring system...

    2:55:45 PM    Establishing VPN...

    2:55:45 PM    Connected to SERVER.

    2:55:46 PM    Reconnecting to SERVER...

    2:55:49 PM    Establishing VPN - Examining system...

    2:55:49 PM    Establishing VPN - Activating VPN adapter...

    2:55:49 PM    Establishing VPN - Configuring system...

    2:55:53 PM    Establishing VPN...

    2:55:53 PM    Connected to SERVER.

    3:32:27 PM    Reconnecting to SERVER...

    3:32:30 PM    Establishing VPN - Examining system...

    3:32:31 PM    Establishing VPN - Activating VPN adapter...

    3:32:31 PM    Establishing VPN - Configuring system...

    3:32:35 PM    Establishing VPN...

    3:32:35 PM    Connected to SERVER.

    3:32:35 PM    Reconnecting to SERVER...

    3:32:39 PM    Establishing VPN - Examining system...

    3:32:40 PM    Establishing VPN - Activating VPN adapter...

    3:32:40 PM    Establishing VPN - Configuring system...

    3:32:43 PM    Establishing VPN...

    3:32:43 PM    Connected to SERVER.

    3:32:44 PM    Reconnecting to SERVER...

    3:32:47 PM    Establishing VPN - Examining system...

    3:32:47 PM    Establishing VPN - Activating VPN adapter...

    3:32:47 PM    Establishing VPN - Configuring system...

    3:32:51 PM    Establishing VPN...

    3:32:51 PM    Connected to SERVER.

    4:08:02 PM    Reconnecting to SERVER...

    4:08:13 PM    Establishing VPN - Examining system...

    4:08:13 PM    Establishing VPN - Activating VPN adapter...

    4:08:13 PM    Establishing VPN - Configuring system...

    4:08:17 PM    Establishing VPN...

    4:08:17 PM    Connected to SERVER.

    4:10:27 PM    Reconnecting to SERVER...

    4:10:31 PM    Establishing VPN - Examining system...

    4:10:31 PM    Establishing VPN - Activating VPN adapter...

    4:10:31 PM    Establishing VPN - Configuring system...

    4:10:34 PM    Establishing VPN...

    4:10:34 PM    Connected to SERVER.

    4:10:34 PM    Reconnecting to SERVER...

    4:10:37 PM    Establishing VPN - Examining system...

    4:10:37 PM    Establishing VPN - Activating VPN adapter...

    4:10:38 PM    Establishing VPN - Configuring system...

    4:10:41 PM    Establishing VPN...

    4:10:41 PM    Connected to SERVER.

    4:24:58 PM    Reconnecting to SERVER...

    4:25:00 PM    Establishing VPN - Examining system...

    4:25:00 PM    Establishing VPN - Activating VPN adapter...

    4:25:01 PM    Establishing VPN - Configuring system...

    4:25:05 PM    Establishing VPN...

    4:25:05 PM    Connected to SERVER.

    6:26:23 PM    Reconnecting to SERVER...

    6:26:26 PM    Establishing VPN - Examining system...

    6:26:26 PM    Establishing VPN - Activating VPN adapter...

    6:26:26 PM    Establishing VPN - Configuring system...

    6:26:30 PM    Establishing VPN...

    6:26:31 PM    Connected to SERVER.

    7:16:39 PM    Reconnecting to SERVER...

    7:16:42 PM    Establishing VPN - Examining system...

    7:16:43 PM    Establishing VPN - Activating VPN adapter...

    7:16:43 PM    Establishing VPN - Configuring system...

    7:16:49 PM    Establishing VPN...

    7:16:49 PM    Connected to SERVER.

This specific problem sealed the deal to move away from AnyConnect.

Sadly this BS is not exclusive to AnyConnect.  I'm having the exact same issues described on a MBPr 16 running 10.15.3 with all three of Fortinet FortiClient, OpenVPN Connect, and Viscosity (commercial OpenVPN client).  At first I thought it was a screen saver / sleeping wifi issue, but then noticed more often that I'll drop VPN even while the laptop is being actively used.  Apple wifi troubleshooter does not detect the issue as being a disconnect even if left in continuous monitoring mode. 

 

If I capture kernel messages via console, I'm finding very short wifi flaps with messages looking like this:

default 15:53:29.805053-0400    kernel  postMessage::1349 APPLE80211_M_BSSID_CHANGED received
default 15:53:29.805197-0400    kernel  en0::IO80211Interface::postMessage bssid changed
default 15:53:29.805330-0400    mDNSResponder   <private>
default 15:53:29.805255-0400    kernel  001817.167532 wlan0.A[787] updateQoSFastLaneToNetworkState@1137:Enterprise Initiatives: Qos FastLane is Disabled
default 15:53:29.805766-0400    kernel  com.apple.p2p: IO80211AWDLPeerManager::getInfrastructureState lost infrastructure link
default 15:53:29.805773-0400    kernel  com.apple.p2p: IO80211AWDLPeerManager::getInfrastructureState infra channel 149 -> 0
default 15:53:29.805778-0400    kernel  com.apple.p2p: IO80211AWDLPeerManager::getInfrastructureState(): Infrastructure state changed: BSSID(00:00:00:00:00:00), Channel(0)
default 15:53:29.805780-0400    kernel  com.apple.p2p: IO80211AWDLPeerManager::interfaceStateChange Infra State Changed, Channel = 0
default 15:53:29.805531-0400    configd en0 link INACTIVE
default 15:53:29.805784-0400    kernel  com.apple.p2p: interfaceStateChange[2611]: Infra link down, disable dynamic SDB
default 15:53:29.805793-0400    kernel  com.apple.p2p: IO80211AWDLPeerManager::configureValidAWDLChannels Default alternate 5GHz channel 44 is valid
default 15:53:29.805797-0400    kernel  com.apple.p2p: IO80211AWDLPeerManager::configureValidAWDLChannels social channel 2G: 6 on 5G: 149 5G Alt: 44 country code: US
default 15:53:29.806354-0400    symptomsd       SCDynamicStore config_callback: k: State:/Network/Interface/en0/LinkQuality
default 15:53:29.806060-0400    configd en0: no SSID

When this happens, it usually recovers within 100-200ms, but because the kernel has sent a 'network change event', the VPN client drops.  Now I have other non-Mac (and Mac non-T2) systems on the same access points, same SSID, same vlan, that are not experiencing this issue. 

 

I'm going to test out the bluetooth and/or airdrop disabling to see if it produces any positive change; I'd at least like to be able to definitively blame apple by disabling features to see the problem go away.

 

Edit: ugh.  No change.  Airdrop disabled, bluetooth disabled, and I got a whole 20 minutes out of my VPN before it booted me.

Has anyone found a resolution to this issue?  I have disabled bluetooth and airdrop and continue to see the connection drop.  I am on AnyConnect 4.8.03036 and macOS Catalina 10.15.6.  The problem started occurring recently on my machine after the latest installation of the Catalina update.

Nope, opened a case with Cisco support and they just blamed Apple.

You bet, called up Cisco IT twice in last 2 weeks and it ended with the issue being with Mac. Seems like nobody wants to solve this problem. So much for productivity and wfh

User27364
Level 1
Level 1

"Reconnecting" persists with macOS 10.15.7 and Cisco AnyConnect client version 4.9.01095. I can connect to the VPN for a moment and then it starts unsuccessfully trying to reconnect indefinitely.

iamandywarren
Level 1
Level 1

Was working fine until I upgraded to MAC OS BigSur version.11.0.1 running 4.8.02045.

I'll try updating my client but doing that whilst working from home makes me twitchy might be safer for me to downgrade back to Caitlina

bjornsol
Level 1
Level 1

I see the same problem while using OSX 11.0.1 BigSur, using AnyConnect 4.9.01095. I have tried making IPv6 manual instead of automatic, turning off Bluetooth and AirDrop, but I still get dropped out every so often (once a minute to once every several minutes) - I have tried this from 2 different work networks and 3 different home networks. Are there other options for troubleshooting or fixing this? I still haven't seen anything pointing to a root cause...

I have now seen intermittent days where the disconnects don't happen. Thus I suspect for my problem it may be related to local network conditions (faulty or too-stringent configured firewalls?) rather than AnyConnect itself, since my client hasn't changed at all. If there is anything I can do to configure my client or AnyConnect to circumvent those problems I'd be interested in hearing it.

This seems to have been fixed - running OSX 13.1 and AnyConnect 4.10.00093 I don't experience the problem anymore.

i encountered the same issue when i was running OSX 11.1 BigSur after this i have downgraded my OS to 10.15.7 Catalina but still i facing this issue. Tired of going through google search for work arounds.