Link to home
Start Free TrialLog in
Avatar of eemoon
eemoon

asked on

Why doesn't the session have assigned ip address ?

Hi, The below is output of show vpn-sessiondb anyconnect. There are two sessions, which are in the same tunnel-group CCC. Usually the session has two ip address, one is public ip address, another is assigned ip address. In below two session, why does one session not has assigned ip address ? Thank you

Username     : blebovit               Index        : 15804
Public IP    : 66.51.26.6
Protocol     : AnyConnect-Parent
License      : AnyConnect Premium
Encryption   :                        Hashing      : none
Bytes Tx     : 938099441              Bytes Rx     : 30261090
Group Policy : CVA                    Tunnel Group : CCC
Login Time   : 11:53:34 EDT Fri Jul 10 2015
Duration     : 1h:54m:12s
Inactivity   : 0h:15m:57s
NAC Result   : Unknown
VLAN Mapping : N/A                    VLAN         : none

Username     : cfenton                Index        : 12337
Assigned IP  : 172.10.6.16           Public IP    : 73.190.9.68
Protocol     : AnyConnect-Parent SSL-Tunnel DTLS-Tunnel
License      : AnyConnect Premium
Encryption   : RC4 AES128             Hashing      : none SHA1 SHA1
Bytes Tx     : 2686059                Bytes Rx     : 130212627
Group Policy : CVA                    Tunnel Group : CCC
Login Time   : 10:51:9 EDT Wed Jul 8 2015
Duration     : 2d 2h:56m:27s
Inactivity   : 0h:00m:00s
NAC Result   : Unknown
VLAN Mapping : N/A                    VLAN         : none
Avatar of John
John
Flag of Canada image

Check the specifications for AnyConnect.  The VPN client applications I use do not support more than one tunnel.

I can find that it certainly does NOT support 2 tunnels for SSL VPN

https://supportforums.cisco.com/document/7651/anyconnect-vpn-client-faq#Q._Does_SSL_VPN_have_the_facility_where_the_user_can_create_two_tunnels_at_the_same_time_and_then_after_accessing_the_network_if_one_tunnel_goes_down_the_VPN_client_can_automatically_shift_the_user_to_the_second_tunnel

and the likelihood is it cannot for any mode.
ASKER CERTIFIED SOLUTION
Avatar of Steven Carnahan
Steven Carnahan
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of eemoon
eemoon

ASKER

Excellent! I confirmed it. Thank you