cisco asa anyconnect vpn client mode issue

[secureIT]

Hi Team,

I am getting my anyconnect vpn users login failures very frequently and it comesup automaticallly.

Can you please check the attached show version and explain me, if i am running with right licenses in place.

regards

SecIT

[Dinesh Moudgil · Accepted solution]

Hi ,

You have got license for 250 anyconnect users so unless you are having more users than this number , this should not be a problem. Debugs might help you in narrowing down the issue in such case.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

[secureIT]

Thanks Dinesh for the update.

Could you please tell me what are the commands should i execute to produce the alerts in putty session and what are the logging levels for seeing it in putty session.

[Dinesh Moudgil · Accepted solution]

You can run the following commands to get debugs on the ASA putty session:-

logging on
logging enable
logging monitor 7
logging buffered 7
logging buffer-size 1048576

These are for troubleshooting anyconnect sessions:-
debug crypto condition peer <peer’s IP>
debug webvpn anyconnect 255

Syslog server setup as discussed here  will be better option for future logging setups.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

[secureIT]

Hi,

debug crypto condition peer <peer’s IP>

where peer is this firewall external interface ip address correct ?

[Dinesh Moudgil]

Here , the peer IP is public IP of the windows/mac client from where the connection is initiated.

Regards,
Dinesh Moudgil