Guest

Preview Tool

Cisco Bug: CSCsz11694 - SSL VPN reconnect algorithm in load balancing scenario

Last Modified

Jan 09, 2017

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

8.0(4)

Description (partial)

Symptom:
If Anyconnect client is connecting to ASA VPN cluster IP, it is getting redirected to the least loaded ASA's IP (let's say ASA1). If we now manually shutdown that interface on ASA1, AnyConnect is trying to reconnect, on its own, still to that IP (IP on ASA1), and not to the virtual IP of the cluster. As soon as we shutdown this connection and reconnect manually, everything works perfectly.

Conditions:

ASAs in loadbalancing cluster.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.