We have 5580s and 5550s, all on 8.4(2) and configured to allow AnyConnect SSL clients to connect using DTLS. We have enough users complaining of frequent dropped VPN connections, and see enough disconnections in our syslogs, to be concerned. All of the users who complain of instability are on a "traditional" WLAN, or are using a wifi hotspot through a mobile phone, or are using a cellular data card connection.
We're investigating different ways to improve stability, and one is possibly adjusting the DPD timers. We're thinking this could make the VPN connection more forgiving when it comes to an internet blip (that is more likely when on a wireless connection of some type).
Current DPD settings are:
30 seconds for Gateway Side Detection, and
30 seconds for Client Side Detection.
We plan to do some testing where we bump up the timers on a test ASA and have 'problem users' connect to see if they experience improvements.
Anyone run into similar problems, and make similar adjustments? Any recommendations based on your experiences?
HiI'm testing NAC on colleagues devices on a 3750 Switch, 2 ports configured, using 2 phones and a pc.He had external contractors in, so need to swap phones one.Soon as he did that, both phones and PC wouldn't connect, till I shut the Ports down and broug...
Let me try to explain it : On our ESA we have 2 data interfaces DATA : ipaddress ex 10.64.xx.101 appliaction mail interfaceDATA1 : ipaddess ex 10.64.xx.103 massmail interface On each data interface we have a listener DATA -...
Cisco Champion Radio · S7|E37 Business Resiliency for your Workforce and Workplace
Today, organizations are facing changes so large, so fast, and so many—seeing acceleration of already established trends as well as unprecedented disruption—that’s making ...
Hello,i have a N5k-k5548up-af and i have a acl for trusted network which is attached to line vty and to my uplinks interface, and i have around 250 interface vlan and my interface vlans can reach bgp port or snmp port, is there nayway that tune copp to pe...
This event had place on Tuesday 22nd, Septemberat 10hrs PDT
Omar Santos is an active member of the cyber security community, where he leads several industry-wide initiatives and standards bodies. His active role help...