Good afternoon folks. I have been using Release 9.004-34 and having a very odd problem. I have done a quick search, but not found other reported issues similar to mind, so I am hoping the smart people here will have a clue.
I am using the Cisco AnyConnect Secure Mobile Client (v3.0.2052) to connect from my local network to work. My network is behind the UTM, but I am able to successfully connect to work without issue (the necessary firewall ports are open).
However, after some time (variable), I will start to see uplink monitoring errors (WAN link down, up, down, etc.). If I take a look at a ping to one of the Google IPs (either at a machine behind the UTM or from the shell of the router) they are very lagged (see below).
I have found that if I disconnect my VPN client the issue resolves almost instantly, so in fact it does not appear to be a provider (Comcast) issue, but some interaction between the VPN and the UTM. The amount of time before this issue surfaces will vary from a few minutes to much longer (probably less than an hour though).
I am not sure what is causing this issue, but troubleshooting so far suggests that the VPN is causing the UTM to get very confused/laggy. Ideas? Thanks.
Mike
--------------
Ping output:
64 bytes from 173.194.33.39: icmp_seq=8505 ttl=55 time=1806.132 ms
64 bytes from 173.194.33.39: icmp_seq=8506 ttl=55 time=809.775 ms
64 bytes from 173.194.33.39: icmp_seq=8507 ttl=55 time=22.227 ms
64 bytes from 173.194.33.39: icmp_seq=8508 ttl=55 time=3232.222 ms
64 bytes from 173.194.33.39: icmp_seq=8509 ttl=55 time=2250.042 ms
64 bytes from 173.194.33.39: icmp_seq=8510 ttl=55 time=1251.644 ms
64 bytes from 173.194.33.39: icmp_seq=8511 ttl=55 time=250.566 ms
64 bytes from 173.194.33.39: icmp_seq=8512 ttl=55 time=924.547 ms
64 bytes from 173.194.33.39: icmp_seq=8513 ttl=55 time=16.061 ms
64 bytes from 173.194.33.39: icmp_seq=8514 ttl=55 time=56.407 ms
Disconnected VPN client...
64 bytes from 173.194.33.39: icmp_seq=8515 ttl=55 time=18.398 ms
64 bytes from 173.194.33.39: icmp_seq=8516 ttl=55 time=13.274 ms
64 bytes from 173.194.33.39: icmp_seq=8517 ttl=55 time=13.212 ms
64 bytes from 173.194.33.39: icmp_seq=8518 ttl=55 time=13.866 ms
64 bytes from 173.194.33.39: icmp_seq=8519 ttl=55 time=19.950 ms
64 bytes from 173.194.33.39: icmp_seq=8520 ttl=55 time=12.060 ms
64 bytes from 173.194.33.39: icmp_seq=8521 ttl=55 time=15.463 ms
64 bytes from 173.194.33.39: icmp_seq=8522 ttl=55 time=15.357 ms
64 bytes from 173.194.33.39: icmp_seq=8523 ttl=55 time=14.272 ms
64 bytes from 173.194.33.39: icmp_seq=8524 ttl=55 time=15.910 ms
I am using the Cisco AnyConnect Secure Mobile Client (v3.0.2052) to connect from my local network to work. My network is behind the UTM, but I am able to successfully connect to work without issue (the necessary firewall ports are open).
However, after some time (variable), I will start to see uplink monitoring errors (WAN link down, up, down, etc.). If I take a look at a ping to one of the Google IPs (either at a machine behind the UTM or from the shell of the router) they are very lagged (see below).
I have found that if I disconnect my VPN client the issue resolves almost instantly, so in fact it does not appear to be a provider (Comcast) issue, but some interaction between the VPN and the UTM. The amount of time before this issue surfaces will vary from a few minutes to much longer (probably less than an hour though).
I am not sure what is causing this issue, but troubleshooting so far suggests that the VPN is causing the UTM to get very confused/laggy. Ideas? Thanks.
Mike
--------------
Ping output:
64 bytes from 173.194.33.39: icmp_seq=8505 ttl=55 time=1806.132 ms
64 bytes from 173.194.33.39: icmp_seq=8506 ttl=55 time=809.775 ms
64 bytes from 173.194.33.39: icmp_seq=8507 ttl=55 time=22.227 ms
64 bytes from 173.194.33.39: icmp_seq=8508 ttl=55 time=3232.222 ms
64 bytes from 173.194.33.39: icmp_seq=8509 ttl=55 time=2250.042 ms
64 bytes from 173.194.33.39: icmp_seq=8510 ttl=55 time=1251.644 ms
64 bytes from 173.194.33.39: icmp_seq=8511 ttl=55 time=250.566 ms
64 bytes from 173.194.33.39: icmp_seq=8512 ttl=55 time=924.547 ms
64 bytes from 173.194.33.39: icmp_seq=8513 ttl=55 time=16.061 ms
64 bytes from 173.194.33.39: icmp_seq=8514 ttl=55 time=56.407 ms
Disconnected VPN client...
64 bytes from 173.194.33.39: icmp_seq=8515 ttl=55 time=18.398 ms
64 bytes from 173.194.33.39: icmp_seq=8516 ttl=55 time=13.274 ms
64 bytes from 173.194.33.39: icmp_seq=8517 ttl=55 time=13.212 ms
64 bytes from 173.194.33.39: icmp_seq=8518 ttl=55 time=13.866 ms
64 bytes from 173.194.33.39: icmp_seq=8519 ttl=55 time=19.950 ms
64 bytes from 173.194.33.39: icmp_seq=8520 ttl=55 time=12.060 ms
64 bytes from 173.194.33.39: icmp_seq=8521 ttl=55 time=15.463 ms
64 bytes from 173.194.33.39: icmp_seq=8522 ttl=55 time=15.357 ms
64 bytes from 173.194.33.39: icmp_seq=8523 ttl=55 time=14.272 ms
64 bytes from 173.194.33.39: icmp_seq=8524 ttl=55 time=15.910 ms