Junos Pulse 3.1R2 error

[marine110303_]

Recieved the following error in the debuglog:

00190,09 2013/01/25 16:01:39.265 3 SYSTEM dsAccessService.exe iveConnectionMethod p3752 t5E8 ncAccessMethod.cpp:869 - 'ncAccessMethod' sendConnectionStatus: state:2, stage:1, iErr:100, iErrorNum:0.

It was at this time the user lost connectivity for a minute or more.

Anyone able to decode what this error message is identifying?

[jayLaiz_]

Hi,

This message shows that there was a temporary disconnection , it could be due to factors like :

change in route table on Client

loss in connectivity between client and SA

we need to check route table on cient when this issue happened as well as wireshark from vpn adapter,physical adapter and TCP dump from SA.User access log will also help. The whole debug log will be needed as we need to see what happened before the error message you posted.

Regards,

Jay

[zanyterp_]

what shows on the server-side? as jay said, appears tobe a network connection issue

[marine110303_]

Here is what the server side saw. It looks like the users ISP changed IP's on him killing the connection. IP's and users name have been changed for security reasons.

Jan 25 16:01:37 10.140.0.11 Juniper: 2013-01-25 16:01:37 - sslvpn1 - [94.87.68.228] jimbo(Users)[Junos-Pulse Client] - Session resumed from user agent 'Junos-Pulse/7.3.2.29447 (Windows XP)'
Jan 25 16:01:37 10.140.0.11 Juniper: 2013-01-25 16:01:37 - sslvpn1 - [94.87.76.187] jimbo(Users)[Junos-Pulse Client] - Remote address for user jimbo/Users changed from 94.87.76.187 to 94.87.68.228.
Jan 25 16:01:37 10.140.0.11 Juniper: 2013-01-25 16:01:38 - sslvpn1 - [94.87.68.228] jimbo(Users)[Junos-Pulse Client] - Network Connect: Session ended for user with IP 10.140.2.32
Jan 25 16:01:37 10.140.0.11 Juniper: 2013-01-25 16:01:38 - sslvpn1 - [94.87.68.228] jimbo(Users)[Junos-Pulse Client] - Network Connect: Session started for user with IP 10.140.2.32, hostname HP27185307493
Jan 25 16:01:37 10.140.0.11 Juniper: 2013-01-25 16:01:38 - sslvpn1 - [94.87.68.228] jimbo(Users)[Junos-Pulse Client] - Network Connect: User with IP 10.140.2.32 connected with SSL transport mode.
Jan 25 16:01:37 10.140.0.11 Juniper: 2013-01-25 16:01:38 - sslvpn1 - [94.87.68.228] jimbo(Users)[Junos-Pulse Client] - Starting dsagentd session.

[zanyterp_]

That would trigger the message on the client as well as a reconnect from the client to the SA unit

[jayLaiz_ · Accepted solution]

Hi,

we can avoid the disconnection and reconnection in such cases by enabling roaming session under the user's role session options.

Regards,

Jay