Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
891
Views
0
Helpful
6
Replies

VPN Access

james.king14
Level 1
Level 1

‎03-17-2020 12:46 PM

I have users from another domain access our local VPN. yes the are part of our trusted DNS group but not part of our AD users group is that possible?

Labels:
0 Helpful
6 Replies 6

Sheraz.Salim
VIP
VIP

‎03-17-2020 02:14 PM

unless your create a local user authentication of these user than yes they can connect.

or

if you have ISE it support multi domain functionality.

please do not forget to rate.
0 Helpful

james.king14
Level 1
Level 1
In response to Sheraz.Salim

‎03-18-2020 05:25 AM

Good Morning Vandit,



Yesterday we had a major problem with users either not able to connect to
the VPN or dropping after several minutes. The only errors were from the
AnyConnect client error messages.


0 Helpful

Cristian Matei
VIP Alumni
VIP Alumni
In response to james.king14

‎03-18-2020 06:10 AM

Hi,

 

   What is your VPN gateway model? Can you post the relevant VPN configuration? Is the VPN gateway licensed to support that many concurrent connections?

 

Regards,

Cristian Matei.

0 Helpful

james.king14
Level 1
Level 1
In response to Cristian Matei

‎03-18-2020 07:08 AM

???3/17/2020
07:34:43 Ready to connect.
07:34:43 Establishing VPN - Initiating connection...
07:34:43 Establishing VPN session...
07:34:43 Disconnect in progress, please wait...
07:34:44 Ready to connect.
7:35:02 AM Contacting 195.195.195.3.
7:35:05 AM Connection attempt has failed.
7:35:08 AM Connection attempt has failed.
7:35:11 AM Connection attempt has failed.
7:35:13 AM Connection attempt has failed.
7:35:15 AM Connection attempt has failed.
7:35:18 AM Connection attempt has failed.
7:35:32 AM Establishing VPN session...
7:35:33 AM The AnyConnect Downloader is performing update checks...
7:35:34 AM Checking for profile updates...
7:35:34 AM Checking for product updates...
7:35:34 AM Checking for customization updates...
7:35:34 AM Performing any required updates...
7:35:34 AM The AnyConnect Downloader updates have been completed.
7:35:34 AM Establishing VPN - Initiating connection...
7:35:34 AM Establishing VPN session...
7:35:37 AM Establishing VPN - Examining system...
7:35:37 AM Establishing VPN - Activating VPN adapter...
7:35:39 AM Establishing VPN - Configuring system...
7:35:39 AM Establishing VPN...
7:35:39 AM Connected to 195.195.195.3.
7:38:37 AM Disconnect in progress, please wait...
7:38:44 AM Ready to connect.
7:38:51 AM Contacting 195.195.195.3.
7:39:27 AM Establishing VPN session...
7:39:28 AM The AnyConnect Downloader is performing update checks...
7:39:29 AM Checking for profile updates...
7:39:29 AM Checking for product updates...
7:39:29 AM Checking for customization updates...
7:39:29 AM Performing any required updates...
7:39:29 AM The AnyConnect Downloader updates have been completed.
7:39:29 AM Establishing VPN - Initiating connection...
7:39:30 AM Establishing VPN session...
7:39:31 AM Establishing VPN - Examining system...
7:39:31 AM Establishing VPN - Activating VPN adapter...
7:39:32 AM Establishing VPN - Configuring system...
7:39:33 AM Establishing VPN...
7:39:33 AM Connected to 195.195.195.3.
7:40:53 AM Disconnect in progress, please wait...
7:40:57 AM Ready to connect.
7:41:11 AM Contacting 195.195.195.3.
7:41:16 AM Connection attempt has failed.
7:41:18 AM Connection attempt has failed.
7:41:47 AM Establishing VPN session...
7:41:47 AM The AnyConnect Downloader is performing update checks...
7:41:48 AM Checking for profile updates...
7:41:48 AM Checking for product updates...
7:41:48 AM Checking for customization updates...
7:41:48 AM Performing any required updates...
7:41:48 AM The AnyConnect Downloader updates have been completed.
7:41:49 AM Establishing VPN - Initiating connection...
7:41:49 AM Establishing VPN session...
7:41:51 AM Establishing VPN - Examining system...
7:41:51 AM Establishing VPN - Activating VPN adapter...
7:41:52 AM Establishing VPN - Configuring system...
7:41:52 AM Establishing VPN...
7:41:52 AM Connected to 195.195.195.3.
7:49:41 AM Disconnect in progress, please wait...
7:49:45 AM Ready to connect.
7:51:18 AM Contacting 195.195.195.3.
7:51:49 AM Establishing VPN session...
7:51:50 AM The AnyConnect Downloader is performing update checks...
7:51:51 AM Checking for profile updates...
7:51:51 AM Checking for product updates...
7:51:51 AM Checking for customization updates...
7:51:51 AM Performing any required updates...
7:51:51 AM The AnyConnect Downloader updates have been completed.
7:51:51 AM Establishing VPN - Initiating connection...
7:51:51 AM Establishing VPN session...
7:51:53 AM Establishing VPN - Examining system...
7:51:53 AM Establishing VPN - Activating VPN adapter...
7:51:54 AM Establishing VPN - Configuring system...
7:51:54 AM Establishing VPN...
7:51:54 AM Connected to 195.195.195.3.
7:57:17 AM Disconnect in progress, please wait...
7:57:20 AM Ready to connect.
7:58:03 AM Contacting 195.195.195.3.
7:58:33 AM Establishing VPN session...
7:58:34 AM The AnyConnect Downloader is performing update checks...
7:58:35 AM Checking for profile updates...
7:58:35 AM Checking for product updates...
7:58:35 AM Checking for customization updates...
7:58:35 AM Performing any required updates...
7:58:35 AM The AnyConnect Downloader updates have been completed.
7:58:35 AM Establishing VPN - Initiating connection...
7:58:35 AM Establishing VPN session...
7:58:37 AM Establishing VPN - Examining system...
7:58:37 AM Establishing VPN - Activating VPN adapter...
7:58:38 AM Establishing VPN - Configuring system...
7:58:38 AM Establishing VPN...
7:58:38 AM Connected to 195.195.195.3.
8:17:30 AM Disconnect in progress, please wait...
8:17:34 AM Ready to connect.
8:18:07 AM Contacting 195.195.195.3.
8:18:47 AM Establishing VPN session...
8:18:47 AM The AnyConnect Downloader is performing update checks...
8:18:48 AM Checking for profile updates...
8:18:48 AM Checking for product updates...
8:18:48 AM Checking for customization updates...
8:18:48 AM Performing any required updates...
8:18:48 AM The AnyConnect Downloader updates have been completed.
8:18:48 AM Establishing VPN - Initiating connection...
8:18:49 AM Establishing VPN session...
8:18:50 AM Establishing VPN - Examining system...
8:18:50 AM Establishing VPN - Activating VPN adapter...
8:18:52 AM Establishing VPN - Configuring system...
8:18:52 AM Establishing VPN...
8:18:52 AM Connected to 195.195.195.3.
8:20:05 AM Disconnect in progress, please wait...
8:20:10 AM Ready to connect.
8:21:09 AM Contacting 195.195.195.3.
8:21:38 AM Establishing VPN session...
8:21:39 AM The AnyConnect Downloader is performing update checks...
8:21:40 AM Checking for profile updates...
8:21:40 AM Checking for product updates...
8:21:40 AM Checking for customization updates...
8:21:40 AM Performing any required updates...
8:21:40 AM The AnyConnect Downloader updates have been completed.
8:21:40 AM Establishing VPN - Initiating connection...
8:21:41 AM Establishing VPN session...
8:21:43 AM Establishing VPN - Examining system...
8:21:43 AM Establishing VPN - Activating VPN adapter...
8:21:44 AM Establishing VPN - Configuring system...
8:21:45 AM Establishing VPN...
8:21:45 AM Connected to 195.195.195.3.
8:23:03 AM Disconnect in progress, please wait...
8:23:07 AM Ready to connect.
0 Helpful

Cristian Matei
VIP Alumni
VIP Alumni

‎03-18-2020 02:26 AM

Hi,

 

   Not sure what you mean by "part of our trusted DNS group". As long as they are authenticated, they will be able to get in. What's your VPN gateway model and how do you want to authenticate this additional users? I understand that your internal users have their VPN session authenticated against AD, right?


Regards,

Cristian Matei.

0 Helpful

james.king14
Level 1
Level 1
In response to Cristian Matei

‎04-04-2020 06:47 AM

Good Morning 

Using ASA 5585-X with AC 4.6, no problem until the Covid-19 then more users wanted access so I changed 

vpn-simultaneous-logins from default (3)  to 100?   which allow more than 3 users at a time to connect.  But still getting long time to connect to VPN.  Plus is that the only way to allow users to connect.  I have the AC premium license, which should not have cause a problem it seems to have, I would like to know.

 

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents