Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Random Disconnects on Client VPN after S2S VPN creation

                   After configuring a S2S VPN on ASA5525-X my anyconnect clients get random drops. They disconnect then connect right back. How can I see whats going here? Debugs? ASDM monitoring?

  • VPN
2 REPLIES
New Member

Random Disconnects on Client VPN after S2S VPN creation

6Jan 18 201419:48:38192.168.90.371900Failed to locate egress interface for UDP from outside:192.168.90.37/1900 to 239.255.255.250/1900


I see this a few times before the drops.

Bronze

Random Disconnects on Client VPN after S2S VPN creation

Hi,

(assuming that 192.168.90.37 is the client's VPN address) 239.255.255.250 is a link local multicast address (compareable to 169.254.0.0/16) for mDNS (multicast DNS), This is used for example by some components of the Adobe Suite for LAN printing or quite heavily on OS X for multiple functions.

Best way to get around this is using a split tunneling configuration which either includes the VPN address range or anything except the multicast (and above) address range. You could use e.g. 192.168.0.0/16 and it wouldn't even collide with adddresses on the client's LAN because a longer prefix would still allow a 192.168.1.0/24 to bypass the tunnel.

267
Views
0
Helpful
2
Replies
This widget could not be displayed.