Windows 7 Intermittant LAN Disconnect

I have about 20 Windows 7 laptops in a section of our office building.  About half of these laptops experience random disconnects about once a week that last for about 5 minutes.  During this time:
The laptop can ping its loopback address
The laptop can ping its ip address
The laptop can not ping its gatway address
After a few minutes is can hit its gateway again.  The interesting thing is these laptops are on the same vlan but dont experience disconnects at the same time.  There are also no errors recorded on the switch to indicate that the issue is on that
side.  The cabling has recently been punched down to a new patch panel and has been re-certification to boot.  What can I look at on the windows 7 side that could possilbly cause the random disconnect symtom?
Thank You in advance for any assistance.

Hi,
First, please check the following event log log before you try any suggestions.
In Event Viewer, click Applications and Service Logs, and then open Microsoft, 3.Click Windows, open Wired-AutoConfig, and then click Operational. 4.In the details pane, click the event to display the logged information.
Please update the motherboard (chipset) driver to see if the issue can be resolved. Also, bypass the router to check the result. If the issue persists, go into Safe Mode with Networking (Restart computer, press the F8 key when the boot menu pops up, select
[Safe Mode with Networking], and boot up) and check if the issue still occurs.
I also suggest you try the following steps.
1. Update the router’s firmware.
2. Temporarily turn off firewall and 3rd party antivirus on the machine. 
In addition, run the Troubleshooting tool by going to Control Panel -> Troubleshooting -> Connect to the Internet.
Hope it helps.
Regards,
Blair Deng
Blair Deng
TechNet Community Support

Similar Messages

  • Windows fax and scan disconnects prematurely then redials

    windows fax and scan disconnects prematurely then redials to SOME but not all of my contacts
    SO I have been using the dependable Canon FAX software through my MX860, same MS Contacts address book, same win8.1-64 fickle OS

    Hi,
    We can try to update the driver for your scan and fax and meanwhile, we can contact the manufacturer to update the firmware of your device.
    Also try to repair the Fax and scan components by turn off and turn on in Turn windows features on and off:
    If the issue persists, please help to upload the event log here for further research.
    Kate Li
    TechNet Community Support

  • Strange intermittent internet disconnect-reconnect... and another question.

    This has happened twice now and is fixed with a restart, but I'd like to know if I have faulty hardware. What happens is that I'll open my Macbook from sleeping and the internet will disconnect for 2 seconds, reconnect for 2 seconds, disconnect for 2 seconds, reconnect, repeat. This will continue UNTIL I restart the computer.
    I know it's not my internet, because it has NEVER happened to another computer in my house. I'm wondering if my Airport isn't causing issues with it...
    I also have serious issues with BOTH of my browsers freezing when I open from sleep. Like the computer takes a few minutes to figure out what it was doing and won't let me switch windows, open a new link or even click on the URL bar. I often have to Force Quit Safari or Firefox (whichever I'm using at the time) and restart them before they work. So now I'm thinking RAM issue?
    I can't bring send thing in till middle of May do to daily use for college, but I can bring it to a Genius Bar (which I'll probably do next week) and hope they can fix it in store. I'm just hoping you can provide some insight here. Help! Should I add some more RAM.. or just have it replaced?

    SA - Click on over to the MacBook forum in Apple/Support/Discussions. You will find many threads about MacBooks intermittently dropping connection. I did not see any mention of this happening with Wake Up or Restart, but that might be related. Looks like the new hardware/software combo is too sensitive or gets confused by other networks.
    No definitive solutions. Some router/Mac reconfigure may make a difference - fixed channel instead of automatic may help if you can choose one different from your neighbors' networks, and maybe different encryption will help.
    If it's a brand new book, you may be able to exchange and hope the next one does not have the problem.
    ManaLow

  • RV016 with 3 WAN Connections - Windows Messenger Intermittent problems.

    I have a RV016 Router with 3 internet DSL conections.
    Firmware version : 3.0.0.1-tm (Jun 6 2008 20:17:06)
    LAN IP :  192.168.11.254  /24
    WAN1 IP :  192.168.1.253  /24
    WAN2 IP :  192.168.2.253  /24
    WAN3 IP : 192.168.3.253   /24
    MODE: Gateway.
    Windows Messenger continually connects and disconnects. This behavior is permanent
    I only have problems with Messengers (all releases), web page access is correct.
    I check bandwith saturation and It's ok, I use less than 50% of each DSL.
    I configured the correct size of MTU for each DSL and the problem continues.
    Is there any way to set priority to this service?
    Is there any way to check if the "load balance mode" affect this kind of connections?
    I appreciate any idea.

    Changing the DSL connections to bridge mode is part one of the solution.  When they weren't in bridge mode, they were also acting as gateways/routers, probably also doing NAT.
    Now that they are in bridge mode, the rv016 has control of the connections and the routing.  Now that it has control, you can make the appropriate changes.
    I ran into a similar issue as yours when I had an rv082 at one of my businesses.  I had to access the state's web site to file sales taxes online.  But their system detected when my router used a different WAN connection than the one I logged in on, so it would kick me off each time the router used both WAN connections.  I could enable only one WAN connection each time I used their system (which would also work in your case with messenger), but that wasn't a real solution.
    For you the solution will be a port trigger range.  (For me the solution was to bind that destination site to a WAN connection.)  Go to Setup-->Forwarding in the rv016 web management.  You will see a section for port triggering at the bottom.  Here's a link to a site that goes more into detail on the ports that need to have triggers on them:
    http://www.electrictoolbox.com/article/networking/open-firewall-msn-icq/
    I don't have messenger setup, so I don't know the ports off-hand. This setup should allow any system connected (just as they are now) to properly use messenger.
    Let me know if you need any more help.

  • Frequent WLAN / Lan disconnects

    I have some strage problems with my Macbook Air WLAN connection:
    My Macbook Air from bougth end of 2010 with 10.5 and all updates hab no problems to connect by WLAN over my router to the internet. But I hade to replace my router and decided to replace it by a managable system. So my new router (IP 192.168.1.1) is now connected to a managed switch (Zyxel ES-2108G, IP 192.168.1.2) with a attached WLAN AccessPoint (Zyxel WAP3205, IP 192.168.1.3). So my notebooks connect by WLAN to my WAP and were routed through my switch to the router to the internet. This works perfect for my windows pc's as for my macbook.
    The only difference: my macbook looses internet connetion after several minutes. Sometimes it regains internet connection by himselft after several minutes, but the faster way ist to disable airport and reenable it. So to keep my macbook connected to the internet I have to disable/reenable airport every few minutes.
    I decided to analyze this problem:
    - There is no difference in the location, I have this problems even just beside the access point.
    - While my Macbook disconnects my PC-notebook keeps connected.
    - Airport doesn't loose conection, the WLAN connection is active all the time.
    - pinging the access point 192.168.1.3 i get answers and I cann access the web-configuration site of my access point
    - pinging the switch (192.168.1.2) or the router (192.168.1.1) I get no answers.
    - just after disabling/reenabling airport pinging router and switch they answer me again.
    This problem looks strange for me. Since the Access point is answering to my pings and I can access his web-configuation site all the time the Airport WLAN connection seems to work perfect. So I would suggest that the problem is the LAN connetion between WAP, Switch and router. But why does the connection to switch, router and internet can be reestablished only by turning Airport on and off while I leave WAP switch and router untuched?
    Many thanks in advance,
    Ben

    I have some strage problems with my Macbook Air WLAN connection:
    My Macbook Air from bougth end of 2010 with 10.5 and all updates hab no problems to connect by WLAN over my router to the internet. But I hade to replace my router and decided to replace it by a managable system. So my new router (IP 192.168.1.1) is now connected to a managed switch (Zyxel ES-2108G, IP 192.168.1.2) with a attached WLAN AccessPoint (Zyxel WAP3205, IP 192.168.1.3). So my notebooks connect by WLAN to my WAP and were routed through my switch to the router to the internet. This works perfect for my windows pc's as for my macbook.
    The only difference: my macbook looses internet connetion after several minutes. Sometimes it regains internet connection by himselft after several minutes, but the faster way ist to disable airport and reenable it. So to keep my macbook connected to the internet I have to disable/reenable airport every few minutes.
    I decided to analyze this problem:
    - There is no difference in the location, I have this problems even just beside the access point.
    - While my Macbook disconnects my PC-notebook keeps connected.
    - Airport doesn't loose conection, the WLAN connection is active all the time.
    - pinging the access point 192.168.1.3 i get answers and I cann access the web-configuration site of my access point
    - pinging the switch (192.168.1.2) or the router (192.168.1.1) I get no answers.
    - just after disabling/reenabling airport pinging router and switch they answer me again.
    This problem looks strange for me. Since the Access point is answering to my pings and I can access his web-configuation site all the time the Airport WLAN connection seems to work perfect. So I would suggest that the problem is the LAN connetion between WAP, Switch and router. But why does the connection to switch, router and internet can be reestablished only by turning Airport on and off while I leave WAP switch and router untuched?
    Many thanks in advance,
    Ben

  • LAN disconnects when removing USB device.

    Hi. So I have a concern about my fairly new MSI board. Model: Z97 Guard-Pro. Sometimes when I plug/unplug a USB device from the backpanel 3.0 ports (lowest down set), my LAN will disconnect. My router connects to the mobo via an Ethernet cable which becomes disconnected. However the LAN does not disconnect when I INSERT a USB device, only SOMETIMES when disconnecting. Nevermind, it disconnects when insert and disconnect.
    I then have to remove the Ethernet cable and plug it back in for it to recognise the Ethernet device. Sometimes it wont even recognise when doing that. I have to disable the adapter in Windows 7 and the re-enable for it to recognise. What can cause this issue?

    Quote from: flobelix on 01-March-15, 19:05:06
    Does the same happen when you just just touch the lan connector?
    Just tried it now. Jiggled it left and right with some play in movement and it disconnected in Windows but that seems to be because the contacts aren't touching. Pushed it back in and it reconnected. However with the USB issue when I take the cable out and put it back in, sometimes the LAN adapter will still say disconnected. The LAN cable is not touched in any way and it will DC.

  • Using Safely Eject Hardware in Windows Vista Doesn't Disconnect iPod

    When I use the Safely Eject Hardware Option to eject my iPod in Vista, my iPod still says "Do Not Disconnect", whilst in Windows XP it will allow me to use the iPod afterwards.
    I know vista is got some compatability issues but does anyone else have this problem?
    Thanks.

    I thought I was alone with this problem. I recently went traveling last weekend, and began to think the X-Ray machines killed my iPod!
    Whenever I connect my iPod to any computer using the USB connection, Windows will not mount it as a removable drive. The cable is good, because the iPod is being charged but Windows will not recognize it.
    I have tried all the different USB ports, even on several different computers. Including my work, laptop, and my desktop. Windows will not recognize my iPod using the USB connection.
    I'm in the process of restoring my desktop computer after a hard-drive failure (lucky me all my vital data were on a separate drive), so my desktop has a nice clean install of Windows.
    My desktop has a firewire port, so I tried connecting to that port and Ta-Da, Windows recognized and mounted my iPod as a removable drive! Unfortunately my laptop nor my work computers do not have firewire ports.
    Can anyone explain why the USB function suddenly stopped working? Does this mean I need to restore and loose all my music from my iPod? I do not let iTunes manage my music, I do that all myself. I can put my music back onto the device but it will be time consuming. If anyone knows the answer to this USB problem, perhaps you can reply to this thread or contact me.
    Thanks,
    Joe Vill

  • Lenovo Yoga 13 Downgrade to Windows 7 Wireless Lan Driver & USB3.0 Driver

    Hey guys,
    I have purchased the Yoga 13 in U.A.E in last Feb. with AED4,999.00
    But some programms does not work with Windows 8. So I am using Windows7 with multi-boot.
    Guess you guys also have such problem.. eventually finding out the WIFI Driver & USB3.0 Driver.
    Now, I have succeeded in installing both of them.
    1. Wireless Lan Driver : Realtek RTL8723A Wireless LAN 802.11n USB 2.0 Network Adapter.
       The way I found this driver is... Download all the REALTEK driver in a designated folder.. of course uncompressed.
       And then using the contraol panel... updated the driver with the designated folder.
       Now it is working very well.
    2. USB3.0 Driver
      It was an easy game. I just have downloaded thee Intel USB3.0 Driver for Windows7... you could find it through google with easy.
      And just installed it. It works very well.
    => You could download the file at http://me2.do/xKBVnWo3
          (just put password : 4321 )
    If you guys have problem with above issues... or need the file let me know with my mail at xxxxxxxxxxx
    Anyhow, there are still two drivers I couldn't find.
    Jerry Bong
    Moderator note; e-mail address removed to stop the spambots getting it

    hi jerrybong,
    Thank you for Sharing this,
    This will really Help most of Yoga 13 users and Windows 7 fans,
    Kudos for this!
    Can you also let us know what are drivers you're still missing? Can you post the Hardware ID of those maybe we can help,
    Thanks and Regards
    Solid Cruver
    Did someone help you today? Press the star on the left to thank them with a Kudo!
    If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.
    Follow @LenovoForums on Twitter!

  • Windows client intermittent connection to PEAP WIFI backed off to ISE 1.2 wildcard cert

    I am setting up a topology whwere for the first time I am deplying ISE with a wildcard certificate.  This is on ISE 1.2 patch 6, WLC's running 7.6 and Windows 7 clients in AD.  The ISE policy is just to match on machine auth.
    The setting up of the wildcard cert went ok as guided by the CCO ISE 1.2 deployment/cfg guide.
    When it came to testing the client auth as always I start off with the PEAP settings of Validate server certificate off, just to confirm the WLC and ISE are playing ball.  They were, the auth passed.
    I then tick the Validate server certificate, make sure the CA (Windows AD) is in the Trusted Root Certification Authorities.  Retest and the client passes.
    If I then disconnect the wifi and reconnect, either manually or by doing a reboot, the next authenticaiton fails, but nothing has changed.  ISE reports that my Windows client rejected the server certificate.  Which is odd as it just accepted it.
    If I untick the validate the client passes, if i tick it again it will authenticate fine, once.  The next connection it will fail again with the client rejecting ISE.
    Anyone got any ideas?

    I have had a similar issue consistently with 1.2 on both pathc 5 and 6 (not sure about earlier one). Basically what I am seeing is the client rejecting the Server cert when validate is unticked. Most of the time the client connects just fine a few seconds later but some clients need a reboot to fix it. As a rule I put this down to client issue but not 100% sure some times.

  • Windows 7 'File server' disconnects when XP machine connects to network

    Hi guys,
    We have a small office setup here, we have two Windows 7 machines, three Windows XP machines and one Windows 7 machine that acts as a fileserver (folder sharing and an SVN repository).
    Every morning, I turn up to work, turn on my Windows 7 machine and the system works fine, but, as soon as one of my collegues turn up and boot up their Windows XP machines, the fileserver disconnects. The only way to get the fileserver up and running is
    to restart it, this is obviously tedious and irritating. It only happens when an XP machine connects to the network and not when a Windows 7 machine connects.
    Does anybody have an experience with this sort of issue or have an suggestions to resolve it?
    Thanks, Simon.

    Firstly, I am a Tier III Computer Technician/Software Programmer/Network Engineer who has been working on MS OS' since DOS3.
    Secondly, Someone named Alex Zhaozx gets the ID10T award as he marked this as a solution. Alex... How is posting a MS OS license a resolve? 
    There is no resolution posted here.
    For understanding, all references to Windows 7 will be marked as TRAP7 in the following info. After reading, you will understand why.
      The other major note Simon has not mentioned, is that when the "disconnect" happens, all Windows XP machines can still interface with each other over the network perfectly (accessing each others Shares and drive mappings with zero network connection
    issues). The TRAP7 machines can interface will all facets of each of the TRAP7 and Windows XP computers on the network with zero connection issues. It appears MS has placed a condition or timer to cause the disconnect to XP on introduction to the network. Simon
    is slightly incorrect is his statement this only happens when a XP machine is booted, as it happens on all connection methods (whether it be wake from sleep and attempt to reconnect or access TRAP7 share/drive, idle computer attempting to access TRAP7 share/drive,
    Windows XP computer attempting to access files on the TRAP7 file server for the first time, after each have been up and running independently (on the network) perfectly for hours...
    We have a larger scope than Simon with 45 machines and 17 of them being Windows XP, the others are TRAP7 (32 and 64 bit varied) with 1 on Vista (The beginning of the end for MS OS'). 
    I have been searching all MS sites and the other techie sites for a resolve and there has not been one "valid" resolution to this problem they have caused. Or was is my fault for using Windows 7 on a near perfect network?
    C'mon maaaan. (intended for Bill Gates) Get this resolved or get out of the OS game, there are so many better OS's out there. Stop TRYING to DO things and start DOING them the right instead.
    Belief: This is an issue caused by MS with full intention of forcing everyone to fully convert all at once because they are not getting the money they used to, as the global economy is now whacked. You notice... They have never stepped up to say anything
    in this post. They just quickly made an attempt to brush this under the carpet.
    BTW Alex Z: When you are ready to step up and get involved, let me know. I will get you any technical information you need to get this resolved.
    John

  • Windows 8 L2TP VPN disconnects at 60 minutes

    I have 5 windows 8 machines across various domains all configured with 8-10 L2TP VPN setups to various clients networks.  Most of them are to Sonicwall firewalls but a couple are to other firewalls.  My Windows 8 machines consists of both upgrades
    from Windows 7 and fresh installs.  Either way every one of my L2TP connections will disconnect at 60 minute increment, regardless of activity or inactivity, which never happened on Windows 7.  I have looked everywhere on the Sonicwalls (all of them
    are on the most up to date firmware) and there is no setting for disconnecting after 60 minutes.
    The issue must be with Windows 8 - just looking for a registry hack or hotfix that will fix this problem.
    Michael E. Wheeler

    I also have the same problem but my timeout happens at 49 mins 54 seconds everytime. I recently switched to Windows 8 and I am facing lots of issues with the VPN.
    Initially I had installed the VPN version "CISCO VPN 5.0.07.0290-k9" and my VPN would disconnect every 3 to 4 mins. Then later browsed to get the "most compatible" version of VPN "5.0.07.0440-k9" . Now also the same problem perisists. but a small improvement.
    Incase I am keeping my access to the Server IP active, working on the sever and not on the local system, then my connection is active for a longer time. If I work on my local system  the connection disconnects within a minute. 
    Since I had to work on my local system also, I did a continuous ping on the Command Prompt and then I can now work on my Server thro VPN and also on my local system for 49 mins. I was searching for a solution when I stumbled on this chain. I am not alone,
    but could not find a solution. I hope someone from Microsoft looks at this thread and give a Fix build. 
    Please post any alternative solution to bypass this issue.
    Regards
    Kiruthiga Kuppuswamy

  • Windows 7 crashes after disconnecting iPhone 3GS iOS 5 with BSOD 1000007e?

    Ever since i have update iOS 5 on my iPhone 3GS after disconnecting the usb cable my windows 7 system crashes with BSOD 1000007e and restarts and this happens all the time. When it is connected no issues only after disconnecting you get this BSOD 1000007e. It was not an issue on iOS 4.3.5? I have updated all the drivers and removed all the softwares which can cause a problem also i have disconnected all possible usb devices now my webcam, bluetooth are connected internally so i hv no option to remove them? what shud i do different here?
    =====================================
    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7601.2.1.0.256.1
      Locale ID:    16393
    Additional information about the problem:
      BCCode: 1000007e
      BCP1:    C0000005
      BCP2:    82C4658A
      BCP3:    8AF40B78
      BCP4:    8AF40750
      OS Version:    6_1_7601
      Service Pack:    1_0
      Product:    256_1
    Files that help describe the problem:
      C:\Windows\Minidump\102211-18408-01.dmp
      C:\Users\iMyPc\AppData\Local\Temp\WER-47393-0.sysdata.xml
    Read our privacy statement online:
      http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
    If the online privacy statement is not available, please read our privacy statement offline:
      C:\Windows\system32\en-US\erofflps.txt
    ==========================================================

    Instructions on restoring the phone as a new device are found in the iPhone User Guide
    http://manuals.info.apple.com/en_US/iphone_user_guide.pdf

  • Grey "Character" pop up window flashing intermittently over everything?

    Hi
    I was drafting an email earlier and I clicked on the "Edit" menu option and then on the "Special Characters" option in the dropdown menu. The pop up window containing the Special Characters options did not open, instead a grey pop up window of the same size began to flash intermittently on whatever screen or program I am using. The timer is visible in the centre of the screen and the word "Characters" is visible at the top of the window...
    I tried a restart but it did not solve it.
    Any thoughts would be very much appreciated.
    D

    Hi Tom
    I just want to say thank you very much for solving my Mac issue.
    My first mac was bought as a present from NJ when I was over visiting my girlfriends Mother, Thanksgiving 2008.
    I live in Ireland where we have no Mac Store : (  I am always concerned that something like yesterday's issue would arise (thankfully this was the first time).
    Sure, we have approved service agents etc but there is nothing like the reassurance of walking into a Mac Store for your appointment with an expert, that is, until yesterday when I realised the power of the Apple Support Communities.
    People like you give non techie Mac lovers a great peace of mind and freedom to enjoy the experience safe in the knowledge that we have somewhere to turn if we get stuck!
    Again I am very grateful.
    Slan agus go raibh mile maith agat
    Declan Brennan

  • Electricity supply failure stops Windows 8 intermittently from next startup, tell me procedure of stopping hanging of Windows 8.

    Electricity supply failed and now intermittently Windows 8 stops, Windows 7 (dual boot) doesn't hangs also corrects from problems automatically, why Windows 8 starts problemed after electricity failure and woudn't correct itself?
    (Intel motherboard DZ75ML-45K and Windows 8 are not at all compatible, default drivers of Windows must not be answer.)

    Electricity supply failed and now intermittently Windows 8 stops, Windows 7 (dual boot) doesn't hangs also corrects from problems automatically, why Windows 8 starts problemed after electricity failure and woudn't correct itself?
    (Intel motherboard DZ75ML-45K and Windows 8 are not at all compatible, default drivers of Windows must not be answer.)
    I am successful for trial and error correcting problem, other dual boot operating system with Windows 8 (64 bit), Windows 7 Enterprise (32 bit), made unknown corrections internally for Windows 8 eliminating problem of hanging of Windows 8 because of electricity
    supply failure.

  • AnyConnect pre Windows login connects and disconnects for some users

    Hi,
    I have Cisco VPN AnyConnect (version 3.1.0310) clients with a connectivity issue which manifests as follows:
    A user boots their Windows 7 SP1 laptop up.
    Before Windows login, the user clicks "switch user" and enters their Cisco AnyConnect credentials (this connects OK).
    Once the VPN tunnel is established a user logs into Windows.
    At this point, 1 of 2 things happen:
    1. Most users VPN connection stays connected and user GPO processing\logins work as normal
    2. For a minority of users, the VPN connection disconnects and then reconnects. The VPN disconnect and reconnect causes connectivity issues with mapped drives and Outlook (most likely due to GPO processing not applying as the VPN tunnel wasn't established at the required time).
    There are no known commanalities between problematic users - all users are in the same OU and laptops are in the same OU, so they should be getting the same AD settings. The same user can login 14 times OK, but may experience this issue on the 15th occasion.
    Within the profile xml file (stored in c:\program data\) the key "AutoConnectStart" is set to false for user controllable and default value. The XML policy settings are being applied correctly (we've checked Event ID 3010 within the Cisco AnyConnect Windows logs).
    What we have noticed from using the back end Cisco monitoring client is that users who experience connection issues, connect pre windows login OK, but once they're logged into Windows the Cisco VPN AnyConnects seems to try and re-connect, which causes the current VPN tunnel to disconnect and re-connect. This disconnect and re-connect for users seems to cause issues with logon and GPO processing.
    So far, the only rock solid way we've found of stopping this disconnect and re-connect behaviour is by configuring a system deny permission on registry key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run". This key contains an entry for Cisco AnyConnect VPN. Unfortunately setting a deny on the individual node value isn't possible and if the key is deleted or modified the system re-creates it. I'd rather avoid setting a system deny on the key for all users.
    Any advice on how troubleshoot and diagnose this problem is appreciated.
    Thanks

    I've attached some log files in case someone is particularly keen eyed at spotting issues (all data is anonymized)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58124
    10.5.128.21
    8080
    Built inbound TCP connection 123678229 for outside:172.16.12.17/58124 (172.16.12.17/58124)(LOCAL\jpk789) to inside:10.5.128.21/8080 (10.5.128.21/8080)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58122
    10.5.140.210
    443
    Teardown TCP connection 123678214 for outside:172.16.12.17/58122(LOCAL\jpk789) to inside:10.5.140.210/443 duration 0:00:00 bytes 11971 TCP Reset-O
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    51368
    10.5.141.155
    53
    Teardown UDP connection 123678191 for outside:172.16.12.17/51368(LOCAL\jpk789) to inside:10.5.141.155/53 duration 0:00:00 bytes 110
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58123
    10.5.12.182
    88
    Built inbound TCP connection 123678217 for outside:172.16.12.17/58123 (172.16.12.17/58123)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    62455
    10.5.141.155
    53
    Teardown UDP connection 123678189 for outside:172.16.12.17/62455(LOCAL\jpk789) to inside:10.5.141.155/53 duration 0:00:00 bytes 430
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58122
    10.5.140.210
    443
    Built inbound TCP connection 123678214 for outside:172.16.12.17/58122 (172.16.12.17/58122)(LOCAL\jpk789) to inside:10.5.140.210/443 (10.5.140.210/443)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    56197
    10.5.141.155
    53
    Built inbound UDP connection 123678212 for outside:172.16.12.17/56197 (172.16.12.17/56197)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58121
    10.5.12.179
    389
    Built inbound TCP connection 123678196 for outside:172.16.12.17/58121 (172.16.12.17/58121)(LOCAL\jpk789) to inside:10.5.12.179/389 (10.5.12.179/389)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58120
    10.5.12.199
    80
    Built inbound TCP connection 123678195 for outside:172.16.12.17/58120 (172.16.12.17/58120)(LOCAL\jpk789) to inside:10.5.12.199/80 (10.5.12.199/80)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    51368
    10.5.141.155
    53
    Built inbound UDP connection 123678191 for outside:172.16.12.17/51368 (172.16.12.17/51368)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    62458
    10.5.12.182
    389
    Built inbound UDP connection 123678190 for outside:172.16.12.17/62458 (172.16.12.17/62458)(LOCAL\jpk789) to inside:10.5.12.182/389 (10.5.12.182/389)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    62455
    10.5.141.155
    53
    Built inbound UDP connection 123678189 for outside:172.16.12.17/62455 (172.16.12.17/62455)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:19:30
    IPSEC: An inbound remote access SA (SPI= 0x67ED9B28) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    6
    Oct 30 2013
    10:19:30
    IPSEC: An outbound remote access SA (SPI= 0x9C00507E) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    6
    Oct 30 2013
    10:19:30
    Group User IP <75.12.34.56> AnyConnect session resumed connection from IP <75.12.34.56>.
    5
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 SA UP. Reason: New Connection Established
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x7041 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x7040 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703f could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703e could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703d could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703c could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703b could not be processed. Error: Unknown/Unsupported Attribute
    6
    Oct 30 2013
    10:19:18
    172.16.12.17
    64287
    10.5.12.182
    445
    Teardown TCP connection 123673186 for outside:172.16.12.17/64287(LOCAL\jpk789) to inside:10.5.12.182/445 duration 0:02:01 bytes 14605 Tunnel has been torn down
    6
    Oct 30 2013
    10:19:17
    172.16.12.17
    64278
    10.5.141.144
    445
    Teardown TCP connection 123672510 for outside:172.16.12.17/64278(LOCAL\jpk789) to inside:10.5.141.144/445 duration 0:02:15 bytes 9237 Tunnel has been torn down
    6
    Oct 30 2013
    10:19:14
    172.16.12.17
    64273
    10.5.140.231
    445
    Teardown TCP connection 123672368 for outside:172.16.12.17/64273(LOCAL\jpk789) to inside:10.5.140.231/445 duration 0:02:16 bytes 7297 Tunnel has been torn down
    6
    Oct 30 2013
    10:19:04
    172.16.12.17
    54449
    10.5.141.155
    389
    Teardown UDP connection 123672541 for outside:172.16.12.17/54449(LOCAL\jpk789) to inside:10.5.141.155/389 duration 0:02:01 bytes 366
    6
    Oct 30 2013
    10:19:04
    172.16.12.17
    137
    10.5.141.155
    137
    Teardown UDP connection 123672421 for outside:172.16.12.17/137(LOCAL\jpk789) to inside:10.5.141.155/137 duration 0:02:04 bytes 486
    6
    Oct 30 2013
    10:19:00
    172.16.12.17
    138
    10.5.141.155
    138
    Teardown UDP connection 123672424 for outside:172.16.12.17/138(LOCAL\jpk789) to inside:10.5.141.155/138 duration 0:02:01 bytes 177
    6
    Oct 30 2013
    10:18:58
    172.16.12.17
    63666
    10.5.141.155
    389
    Teardown UDP connection 123672316 for outside:172.16.12.17/63666(LOCAL\jpk789) to inside:10.5.141.155/389 duration 0:02:01 bytes 366
    6
    Oct 30 2013
    10:18:58
    172.16.12.17
    53105
    10.5.141.155
    389
    Teardown UDP connection 123672300 for outside:172.16.12.17/53105(LOCAL\jpk789) to inside:10.5.141.155/389 duration 0:02:01 bytes 366
    6
    Oct 30 2013
    10:18:47
    172.16.12.17
    61715
    10.5.12.182
    389
    Teardown UDP connection 123671945 for outside:172.16.12.17/61715(LOCAL\jpk789) to inside:10.5.12.182/389 duration 0:02:01 bytes 312
    6
    Oct 30 2013
    10:18:43
    172.16.12.17
    54262
    10.5.12.179
    389
    Teardown UDP connection 123671801 for outside:172.16.12.17/54262(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 355
    6
    Oct 30 2013
    10:18:42
    172.16.12.17
    57911
    10.5.141.156
    389
    Teardown UDP connection 123671777 for outside:172.16.12.17/57911(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:01 bytes 365
    6
    Oct 30 2013
    10:18:40
    172.16.12.17
    123
    10.5.12.182
    123
    Teardown UDP connection 123671670 for outside:172.16.12.17/123(LOCAL\jpk789) to inside:10.5.12.182/123 duration 0:02:01 bytes 136
    6
    Oct 30 2013
    10:18:40
    172.16.12.17
    58107
    10.5.12.179
    389
    Teardown UDP connection 123671639 for outside:172.16.12.17/58107(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:40
    172.16.12.17
    58825
    10.5.12.179
    389
    Teardown UDP connection 123671633 for outside:172.16.12.17/58825(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:02 bytes 355
    6
    Oct 30 2013
    10:18:39
    172.16.12.17
    60424
    10.5.141.156
    389
    Teardown UDP connection 123671611 for outside:172.16.12.17/60424(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:01 bytes 365
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    56635
    10.5.141.156
    389
    Teardown UDP connection 123671566 for outside:172.16.12.17/56635(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:01 bytes 365
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    61204
    10.5.12.179
    389
    Teardown UDP connection 123671558 for outside:172.16.12.17/61204(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 355
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    50615
    10.5.12.179
    389
    Teardown UDP connection 123671545 for outside:172.16.12.17/50615(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 355
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    57940
    10.5.141.154
    389
    Teardown UDP connection 123671537 for outside:172.16.12.17/57940(LOCAL\jpk789) to inside:10.5.141.154/389 duration 0:02:02 bytes 313
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    57939
    10.5.141.156
    389
    Teardown UDP connection 123671536 for outside:172.16.12.17/57939(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:02 bytes 366
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    64495
    10.5.12.182
    389
    Teardown UDP connection 123671532 for outside:172.16.12.17/64495(LOCAL\jpk789) to inside:10.5.12.182/389 duration 0:02:02 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    62965
    10.5.12.182
    389
    Teardown UDP connection 123671521 for outside:172.16.12.17/62965(LOCAL\jpk789) to inside:10.5.12.182/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    54994
    10.5.12.179
    389
    Teardown UDP connection 123671514 for outside:172.16.12.17/54994(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    54993
    10.5.12.179
    389
    Teardown UDP connection 123671513 for outside:172.16.12.17/54993(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    63390
    10.34.140.104
    389
    Teardown UDP connection 123671483 for outside:172.16.12.17/63390(LOCAL\jpk789) to inside:10.34.140.104/389 duration 0:02:01 bytes 385
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    63389
    10.33.140.104
    389
    Teardown UDP connection 123671482 for outside:172.16.12.17/63389(LOCAL\jpk789) to inside:10.33.140.104/389 duration 0:02:01 bytes 384
    6
    Oct 30 2013
    10:18:10
    IPSEC: An inbound remote access SA (SPI= 0x5650EE30) between 75.12.34.56 and 80.21.182.245 (user= jpk789) has been deleted.
    6
    Oct 30 2013
    10:18:10
    IPSEC: An outbound remote access SA (SPI= 0x42DBDD66) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been deleted.
    6
    Oct 30 2013
    10:18:10
    Group User IP <75.12.34.56> AnyConnect session lost connection. Waiting to resume.
    5
    Oct 30 2013
    10:18:10
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 SA DOWN. Reason: peer lost
    6
    Oct 30 2013
    10:17:42
    172.16.12.17
    64250
    10.5.141.186
    445
    Teardown TCP connection 123671908 for outside:172.16.12.17/64250(LOCAL\jpk789) to inside:10.5.141.186/445 duration 0:00:57 bytes 454851 TCP Reset-I
    6
    Oct 30 2013
    10:17:20
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123673268 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:17:19
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123673244 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:17:18
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123673218 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63060
    10.5.141.155
    53
    Built inbound UDP connection 123671551 for outside:172.16.12.17/63060 (172.16.12.17/63060)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63010
    10.5.12.182
    88
    Built inbound TCP connection 123671549 for outside:172.16.12.17/63010 (172.16.12.17/63010)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63009
    10.5.12.182
    88
    Built inbound TCP connection 123671548 for outside:172.16.12.17/63009 (172.16.12.17/63009)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63008
    10.5.141.156
    389
    Built inbound TCP connection 123671546 for outside:172.16.12.17/63008 (172.16.12.17/63008)(LOCAL\jpk789) to inside:10.5.141.156/389 (10.5.141.156/389)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    50615
    10.5.12.179
    389
    Built inbound UDP connection 123671545 for outside:172.16.12.17/50615 (172.16.12.17/50615)(LOCAL\jpk789) to inside:10.5.12.179/389 (10.5.12.179/389)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63007
    10.5.12.182
    88
    Built inbound TCP connection 123671544 for outside:172.16.12.17/63007 (172.16.12.17/63007)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    55425
    10.5.141.155
    53
    Teardown UDP connection 123671487 for outside:172.16.12.17/55425(LOCAL\jpk789) to inside:10.5.141.155/53 duration 0:00:00 bytes 164
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    50614
    10.5.141.155
    53
    Built inbound UDP connection 123671543 for outside:172.16.12.17/50614 (172.16.12.17/50614)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    56263
    10.5.141.156
    53
    Built inbound UDP connection 123671461 for outside:172.16.12.17/56263 (172.16.12.17/56263)(LOCAL\jpk789) to inside:10.5.141.156/53 (10.5.141.156/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    60708
    10.5.141.155
    53
    Built inbound UDP connection 123671460 for outside:172.16.12.17/60708 (172.16.12.17/60708)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    56982
    10.5.141.156
    53
    Built inbound UDP connection 123671459 for outside:172.16.12.17/56982 (172.16.12.17/56982)(LOCAL\jpk789) to inside:10.5.141.156/53 (10.5.141.156/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    64548
    10.5.141.155
    53
    Built inbound UDP connection 123671458 for outside:172.16.12.17/64548 (172.16.12.17/64548)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    60827
    10.5.141.156
    53
    Built inbound UDP connection 123671457 for outside:172.16.12.17/60827 (172.16.12.17/60827)(LOCAL\jpk789) to inside:10.5.141.156/53 (10.5.141.156/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    64207
    10.5.141.155
    53
    Built inbound UDP connection 123671453 for outside:172.16.12.17/64207 (172.16.12.17/64207)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123671443 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123671442 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123671441 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:34
    IPSEC: An inbound remote access SA (SPI= 0x5650EE30) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    6
    Oct 30 2013
    10:16:34
    IPSEC: An outbound remote access SA (SPI= 0x42DBDD66) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    5
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 SA UP. Reason: New Connection Established
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x7041 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x7040 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703f could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703e could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703d could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703c could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703b could not be processed. Error: Unknown/Unsupported Attribute
    6
    Oct 30 2013
    10:16:34
    Group User IP <75.12.34.56> AnyConnect parent session started.
    6
    Oct 30 2013
    10:16:34
    DAP: User jpk789, Addr 75.12.34.56, Connection AnyConnect: The following DAP records were selected for this connection: ContosoPolicy
    6
    Oct 30 2013
    10:16:34
    AAA transaction status ACCEPT : user = jpk789
    6
    Oct 30 2013
    10:16:34
    AAA retrieved default group policy (DfltGrpPolicy) for user = jpk789
    6
    Oct 30 2013
    10:16:34
    AAA retrieved user specific group policy (useGroup1s.Grp) for user = jpk789
    6
    Oct 30 2013
    10:16:34
    AAA group policy for user jpk789 is being set to useGroup1s.Grp;
    6
    Oct 30 2013
    10:16:34
    AAA user authentication Successful : server = 192.168.7.4 : user = jpk789

Maybe you are looking for