Solved

Client Access Disconnects

Posted on 2013-05-21
10
458 Views
Last Modified: 2013-06-24
We are experiencing clients being disconnected at random times but frequently.
I have worked with both Cisco and IBM and am on my own now. I would like to know how to proceed.
PC5250 Traces (IBM Client Access Traces) show the the Client (User's Computer) is receiving a Socket Error 10054 (Connection reset by peer)
the TRCCNN IBM server trace shows the ACK for the RST on the server.
Wireshark shows that Client is requesting a Retransmission .
However we have multiple clients that are experiencing this and it just started out of the blue about a month ago. I think the problem might be application related but i'm in the dark on how to troubleshoot something like that.
0
Comment
Question by:mpossible
  • 5
  • 3
10 Comments
 

Author Comment

by:mpossible
ID: 39192723
Anyone have any ideas ? Please help!
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39242846
It looks like you're losing TCP packets on your network.  Packet loss indicates duff network hardware, drivers, switches, cables, NICs etc.  Connect the client to the server direct through a new switch or CAT 5 cable - can you replicate the problem?
0
 

Author Comment

by:mpossible
ID: 39243110
Well i suppose we could ;however, this is at a remote location and it would be costly to drive out there. I have captured and analyzed wireshark captures from the same side of the network as the server and they seem normal and no one on that side appears to be disconnecting.  All the clients that are disconnecting are on the remote side of the VPN.
The captures on the ASA show no dropped packets so I might have too easily dismissed the ASA 5505s . What I discovered today was some ISAKMP keepalives that had been tampered with (Probably because of the VPN going up and coming down all the time) I disabled the keep alives in that tunnel-group and it's only been 2 hours but no one disconnected today.
I'll post back tomorrow.

I can not recreate the problem for sure, Client Access gives the Disconnect screen for several reasons and not knowing the exact reason (aside from Socket Error 10054) makes it very challenging. I did go there and replace the entire Layer 1.  Tried switching out the switches ( Layer 2 ) and the same thing happened.  Even threw in a Layer 3 device closest to the clients to segment the network and explore that option.
0
 

Author Comment

by:mpossible
ID: 39246218
Well so far no one has disconnected today at all.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 14

Accepted Solution

by:
BlueCompute earned 500 total points
ID: 39246989
Sorry mpossible, I didn't realise you were using VPN, I thought you meant 'client access' as in general client access to the server rather than IBM Access Client.

VPN drops are sometimes associated with incorrect MTU size causing fragmented packets.
0
 

Author Closing Comment

by:mpossible
ID: 39251618
Ah .perhaps I should have done a little more explaining . Thank u blue for all the help. However it seems now that when they connect to a public ip address that is 1to1 natted to the server ip. They get disconnected .however the vpn sessions do not. This is opposite of what was happening before.
0
 

Author Comment

by:mpossible
ID: 39272976
Never mind about the disconnects to the public IP not through the VPN that was a couple of configuration errors. They weren't really getting disconnected, they were never connecting.
all is well after the editing of the ISAKMP keepalives in the tunnel-group .
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39273190
Wikid.  Glad you got it sorted and sorry I couldn't be more helpful.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Read about achieving the basic levels of HRIS security in the workplace.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

26 Experts available now in Live!

Get 1:1 Help Now