Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Client Access Disconnects

Posted on 2013-05-21
10
Medium Priority
?
477 Views
Last Modified: 2013-06-24
We are experiencing clients being disconnected at random times but frequently.
I have worked with both Cisco and IBM and am on my own now. I would like to know how to proceed.
PC5250 Traces (IBM Client Access Traces) show the the Client (User's Computer) is receiving a Socket Error 10054 (Connection reset by peer)
the TRCCNN IBM server trace shows the ACK for the RST on the server.
Wireshark shows that Client is requesting a Retransmission .
However we have multiple clients that are experiencing this and it just started out of the blue about a month ago. I think the problem might be application related but i'm in the dark on how to troubleshoot something like that.
0
Comment
Question by:mpossible
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
10 Comments
 

Author Comment

by:mpossible
ID: 39192723
Anyone have any ideas ? Please help!
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39242846
It looks like you're losing TCP packets on your network.  Packet loss indicates duff network hardware, drivers, switches, cables, NICs etc.  Connect the client to the server direct through a new switch or CAT 5 cable - can you replicate the problem?
0
 

Author Comment

by:mpossible
ID: 39243110
Well i suppose we could ;however, this is at a remote location and it would be costly to drive out there. I have captured and analyzed wireshark captures from the same side of the network as the server and they seem normal and no one on that side appears to be disconnecting.  All the clients that are disconnecting are on the remote side of the VPN.
The captures on the ASA show no dropped packets so I might have too easily dismissed the ASA 5505s . What I discovered today was some ISAKMP keepalives that had been tampered with (Probably because of the VPN going up and coming down all the time) I disabled the keep alives in that tunnel-group and it's only been 2 hours but no one disconnected today.
I'll post back tomorrow.

I can not recreate the problem for sure, Client Access gives the Disconnect screen for several reasons and not knowing the exact reason (aside from Socket Error 10054) makes it very challenging. I did go there and replace the entire Layer 1.  Tried switching out the switches ( Layer 2 ) and the same thing happened.  Even threw in a Layer 3 device closest to the clients to segment the network and explore that option.
0
2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

 

Author Comment

by:mpossible
ID: 39246218
Well so far no one has disconnected today at all.
0
 
LVL 14

Accepted Solution

by:
BlueCompute earned 1500 total points
ID: 39246989
Sorry mpossible, I didn't realise you were using VPN, I thought you meant 'client access' as in general client access to the server rather than IBM Access Client.

VPN drops are sometimes associated with incorrect MTU size causing fragmented packets.
0
 

Author Closing Comment

by:mpossible
ID: 39251618
Ah .perhaps I should have done a little more explaining . Thank u blue for all the help. However it seems now that when they connect to a public ip address that is 1to1 natted to the server ip. They get disconnected .however the vpn sessions do not. This is opposite of what was happening before.
0
 

Author Comment

by:mpossible
ID: 39272976
Never mind about the disconnects to the public IP not through the VPN that was a couple of configuration errors. They weren't really getting disconnected, they were never connecting.
all is well after the editing of the ISAKMP keepalives in the tunnel-group .
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39273190
Wikid.  Glad you got it sorted and sorry I couldn't be more helpful.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
An article on effective troubleshooting
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question