Cisco Cisco Virtual Managed Services 1.02 Troubleshooting Guide
10. Service Chain Troubleshooting
319
SSL VPN URL domain-name resolution issues (DNS)
The SSL VPN URL as displayed in the portal must resolve to a valid IP address. This can be validated using
tools such as nslookup.
tools such as nslookup.
During service instantiation, NSO will register the ASAv outside IP address and hostname in DNS using the
DNS Updater package (see NSO DNS Updater). If this step does not happen during service creation or the
hostname registered by NSO to DNS does not match that URL displayed in the portal name,resolution will
fail.
DNS Updater package (see NSO DNS Updater). If this step does not happen during service creation or the
hostname registered by NSO to DNS does not match that URL displayed in the portal name,resolution will
fail.
IP reachability issues
If DNS name resolution is successful and the ASAv is up but the resolved IP address is not reachable, then
standard network reachability troubleshooting techniques should be applied.
standard network reachability troubleshooting techniques should be applied.
SSL Certificate Issues
If there are problems with the SSL certificate installed on the ASAv the client will present the user with a
security warning as shown below.
security warning as shown below.
Figure 10.3 Anyconnect SSL Certificate Security Warning