For those interested, here's the bug i have for this issue:
CSCtf53013 Bug Details
SSLVPN-VIF route deleted if new session attempted with same client IP
Symptom:
If a user attempts to open a second AnyConnect SSLVPN session on the same IOS
head-end and the AAA ser
Tyson,
TAC SR in progress. I will let you know what they will call this :)
Thanks.
Regards,
Antonio Soares, CCIE #18473 (R&S/SP)
amsoa...@netcabo.pt
-Original Message-
From: Tyson Scott [mailto:tsc...@ipexpert.com]
Sent: quinta-feira, 11 de Fevereiro de 2010 0:11
To: 'Antonio Soare
The session of the 1st user remains up and the vpn routes are there. But in the
router the route back to the user is removed. So in
the user's perspective, connectivity is broken and he doesn't have an idea why.
Clearly a bug, don't you think ?
Thanks.
Regards,
Antonio Soares, CCIE #18473 (R&
Yes, it works fine with local pool. In this case, the AC client gets a message
saying "no address assigned".
I was able to reproduce the problem in the meanwhile. It makes sense that the
2nd user is not able to establish the session but it
doesn't make sense the 1st looses his connection.
This
Thank you both for your inputs. I still cannot share the config since i saw
this in a production network and i'm still trying to
reproduce it in the lab.
But the "debug ip routing" says it all:
1) When user X connects, he gets ip=10.10.10.166
RT(VRF_X): updating static 10.10.10.166/32 (0x1) via
Hello group,
I'm facing a strange issue with IOS Based WebVPN: when user X is connected and
then another user uses the same user X, the second
user is not able to connect but the first user looses connectivity. I have this
with IOS 12.4.24T and AC 2.3.2016 running on a 2821.
This is not expected
