Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: VPN 3030 load balancing

VPN 3030 load balancing 6 years 3 months ago #35323

  • Dove
  • Dove's Avatar
  • Offline
  • Distinguished Member
  • Posts: 198
  • Thank you received: 1
  • Karma: 2
Hi All,

I have been asked to setup the load balancing between two Cisco VPN Concentrator (Cisco VPN 3030).

I have configured both the boxes as mentioned in cisco website

[url] https://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_tech_note09186a0080094b4a.shtml [/url]

After enabling the VPN load balancing I am getting the belwo error message for every 30 Seconds.
LBSSF detected duplicate master[0003a0889463] and going to SLAVE


One of my friend told me that try with out encryption enabled but no differents.

I have searched in google but didn't got any solution. I am hlepless now. If any of you guys have encountered this kind of issue before could you please help to fix this issue...

Thanks

Dove
The administrator has disabled public write access.

Re: VPN 3030 load balancing 5 years 2 months ago #37481

  • Dove
  • Dove's Avatar
  • Offline
  • Distinguished Member
  • Posts: 198
  • Thank you received: 1
  • Karma: 2
I am back after a long time... :)

I have fixed this issue and thought to post the solution it would help someone else..

All I did is very simple.. :)

In our infrastructure the VPN concentrators are connected behind the firewall. The outside interface of VPN concentrators are configured with private IP address.. All I did initially was just created a one to one NAT for VIP address as I was assuming only the VIP address would be visible to user (just like how load balancer works) but that is not the case. We need to create the the Static nat for both VPN Conc.. Outside IPs.

In total I have created 3 NAT for

1 for VIP
2 For VPN Concentrator Outside interface (VPN Device A and VPN Device B)

Phew....carelessness... dragged this issue for long time to fix...


:)

Dove
The administrator has disabled public write access.
The following user(s) said Thank You: Chris

Re: VPN 3030 load balancing 5 years 2 months ago #37485

  • TheBishop
  • TheBishop's Avatar
  • Offline
  • Moderator
  • Posts: 1719
  • Thank you received: 8
  • Karma: 5
Glad you fixed it, and we appreciate you sharing the solution
The administrator has disabled public write access.

Re: VPN 3030 load balancing 5 years 2 months ago #37486

  • Chris
  • Chris's Avatar
  • Offline
  • Administrator
  • Posts: 1446
  • Thank you received: 13
  • Karma: 8
Thanks for sharing the solution with us Dove - highly appreciated!
Chris Partsenidis.
Founder & Editor-in-Chief
www.Firewall.cx
The administrator has disabled public write access.
Time to create page: 0.079 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup