VPN concentrator 3020 not responding

priedman1 · ‎08-31-2005

Hi folks,

I have a VPN concentrator 3020 here and on occasion (happened again this morning), the box stops responding. Our monitoring software (What's Up Gold) shows it isn't replying to pings and I can't get into the web UI. The only thing I can do is reboot it. When it reboots, it's fine for a few days. I have logging turned up but am not seeing anything terribly obvious.

Can someone shed some light as to what may be going on? It is running Bootcode Rev: 4.0 and Software Rev: 4.1.7

Thanks in advance

ciscocsoc · ‎08-31-2005

Hi,

It sounds like a resource leak. There are comments in the latest release of the Concentrator software (4.7.2) about fixing leaks in webvpn that eventually locked up the concentrator.

Is the 3020 heavily used and have you enabled webvpn?

HTH

Kind Regards

Cathy

priedman1 · ‎09-01-2005

Hello Cathy,

Thank you very much for the help. We have about 60-70 users hitting the concentrator at peak usage. The concurrent session limit is 750 and the load never appears to get too high (10-15% maybe). I don't believe anyone is using the WebVPN feature. Mostly everyone uses a MS Win2000 or WinXP VPN client. I believe a few Cisco VPN clients are still in use but not many.

Since I am a newbie to using the VPN concentrators, can you tell me how I can go about procuring the latest software for the concentrator? I did some hunting on the Cisco site and it sounds like a CD that has to be ordered. Does the concentrator need to be under a SMARTNET contract in order to qualify for getting the updated OS?

Thanks again!

Pete

ciscocsoc · ‎09-01-2005

Hello Pete,

You don't specify which version of 4.1.7 you are running. The 4.1.7D release notes reference:

CSCef81463

Memory leak in VPN Concentrator software. Critical memory alerts triggered

after approximately 78,000 cumulative sessions.

You can check the release using the web interface (

Administration / Software Upgrade / Concentrator) to see if you are vulnerable to this problem.

You need a CCO account with privileged access - this normally comes with a Smartnet contract. If you have any support contract from your reseller you may be able to get new versions of the code through them.

Kind Regards

Cathy