• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1448
  • Last Modified:

ASA 5540 WebVPN Issue

Howdy, long time poster first time reader.......

Enough of the jokes. I have an open request with Cisco but how they didnt' see this is beyond me. For our WebVPN SSL, we are getting authentication failures. I've looked through the debugs and the only difference between a successful login and not is the statement "WebVPN: error creating WebVPN session!"

The LDAP authentication is successful.

Doing a show ver I get the following:

Maximum Physical Interfaces  : Unlimited
Maximum VLANs                : 200      
Inside Hosts                 : Unlimited
Failover                     : Active/Active
VPN-DES                      : Enabled  
VPN-3DES-AES                 : Enabled  
Security Contexts            : 2        
GTP/GPRS                     : Disabled  
VPN Peers                    : 5000      
WebVPN Peers                 : 2        
AnyConnect for Mobile        : Disabled  
AnyConnect for Linksys phone : Disabled  
Advanced Endpoint Assessment : Disabled  
UC Proxy Sessions            : 2        


To test my theory that the issue is WebVPN Peers: 2 I logged my successful session out and had another user who had just failed log in. He was able to connect. So I looked through ASDM and found the area where it limits the number of sessions to 2. I tried to change it and it states that I'm only allowed a max of 1 to 2 sessions. How do I change this? Is this a license issue?

Thanks for your time,

-JD-
0
trineit
Asked:
trineit
1 Solution
 
JFrederick29Commented:
Yes, this is a license issue.  You need to purchase additional WebVPN licenses.  By default, the ASA comes with 2.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now