Solved

Client Access Disconnects

Posted on 2013-05-21
10
467 Views
Last Modified: 2013-06-24
We are experiencing clients being disconnected at random times but frequently.
I have worked with both Cisco and IBM and am on my own now. I would like to know how to proceed.
PC5250 Traces (IBM Client Access Traces) show the the Client (User's Computer) is receiving a Socket Error 10054 (Connection reset by peer)
the TRCCNN IBM server trace shows the ACK for the RST on the server.
Wireshark shows that Client is requesting a Retransmission .
However we have multiple clients that are experiencing this and it just started out of the blue about a month ago. I think the problem might be application related but i'm in the dark on how to troubleshoot something like that.
0
Comment
Question by:mpossible
  • 5
  • 3
10 Comments
 

Author Comment

by:mpossible
ID: 39192723
Anyone have any ideas ? Please help!
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39242846
It looks like you're losing TCP packets on your network.  Packet loss indicates duff network hardware, drivers, switches, cables, NICs etc.  Connect the client to the server direct through a new switch or CAT 5 cable - can you replicate the problem?
0
 

Author Comment

by:mpossible
ID: 39243110
Well i suppose we could ;however, this is at a remote location and it would be costly to drive out there. I have captured and analyzed wireshark captures from the same side of the network as the server and they seem normal and no one on that side appears to be disconnecting.  All the clients that are disconnecting are on the remote side of the VPN.
The captures on the ASA show no dropped packets so I might have too easily dismissed the ASA 5505s . What I discovered today was some ISAKMP keepalives that had been tampered with (Probably because of the VPN going up and coming down all the time) I disabled the keep alives in that tunnel-group and it's only been 2 hours but no one disconnected today.
I'll post back tomorrow.

I can not recreate the problem for sure, Client Access gives the Disconnect screen for several reasons and not knowing the exact reason (aside from Socket Error 10054) makes it very challenging. I did go there and replace the entire Layer 1.  Tried switching out the switches ( Layer 2 ) and the same thing happened.  Even threw in a Layer 3 device closest to the clients to segment the network and explore that option.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:mpossible
ID: 39246218
Well so far no one has disconnected today at all.
0
 
LVL 14

Accepted Solution

by:
BlueCompute earned 500 total points
ID: 39246989
Sorry mpossible, I didn't realise you were using VPN, I thought you meant 'client access' as in general client access to the server rather than IBM Access Client.

VPN drops are sometimes associated with incorrect MTU size causing fragmented packets.
0
 

Author Closing Comment

by:mpossible
ID: 39251618
Ah .perhaps I should have done a little more explaining . Thank u blue for all the help. However it seems now that when they connect to a public ip address that is 1to1 natted to the server ip. They get disconnected .however the vpn sessions do not. This is opposite of what was happening before.
0
 

Author Comment

by:mpossible
ID: 39272976
Never mind about the disconnects to the public IP not through the VPN that was a couple of configuration errors. They weren't really getting disconnected, they were never connecting.
all is well after the editing of the ISAKMP keepalives in the tunnel-group .
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39273190
Wikid.  Glad you got it sorted and sorry I couldn't be more helpful.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
FTP Access rule on TMG 1 21
Linksys 4 port wireless router 62 56
Need a device to send message to phone when power is out 3 72
Creating a Vendor Admin user 23 52
As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question