Cisco VPN Disconnects on Eero

i switched to an eero 6+ 3 pack back in early September from a TPLink Deco m5 3 pack that had been rock solid for years just a tad slow.

about a month and a half later i noticed my work Cisco anyconnect VPN connection was randomly dumping me, giving me a DNS error and forcing me to reboot my PC to get it to come back. working with my company help desk they blamed my ISP. i did have some issue with the ISP that were resolved, issues in the pole fixed, new wires run, numerous modems swapped (3rd one now) but now my modem logs are perfect no issues signal levels are perfect.

problem is i keep getting the random disconnects from my VPN and i have to reboot my machine to reconnect. my computer has strong signal, i’ve turned off ipv6, tried the guest network etc and still have the issue. no other devices on my network have this problem and when i use my mobile hotspot i do not get disconnection issues.

eero software is up to date. for now i’ve tried moving one of the nodes to be a bit closer to my work laptop (it normally is in the same room just about it 10 ft away) and i have my work machine connected to it via ethernet cable.

any ideas what the issue could be? i would love to be able to use wifi instead so i can move the node back and also enable being able to work elsewhere in the house but i’m stumped as to what the issue could be.

it’s worth noting i also connect via wifi in the office (without vpn) and don’t have any issues.

Edit- after trying plugged into one of the leaf nodes with ethernet it worked all day. i then tried connecting to an old airport express that is on the network by also using an ethernet cable and it also worked all day. i think for some reason it is occasionally bouncing between eero units causing the disconnection. i was able to rerun some existing ethernet cable i had run a few summers ago but never ended up using to a spot near my wfh setup and out a ethernet jack that is connected to the main eero. not an ideal solution but it’ll work

Using AnyConnect on a couple eero Pro 6 networks here, no issues. I have had the occasional tunnel hiccup in the past where persistent connections going down the tunnel would randomly TCP reset, but it hasn’t occurred in a couple months, and was probably more from our flaky VPN concentrators than anything.

I am not sure what to suggest. Does it happen wired purely over ethernet with absolutely no wireless hops? Does it happen wired to a leaf node as you describe? If you isolate it to Wifi only, you could be on a noisy control channel or something, and soft resetting the eero’s may help, but it’s a shot in the dark.

AnyConnect on Pro 6e here. Computer connected via wifi, never had an issue. I do have local DNS caching on though.

I had VPN issues (or rather my child did) and I traced the issue to being on the guest network in a “grey area” between APs. Each time it changed which AP it was on, it would drop the VPN connection because it was now on a “different” guest subnet. Some VPNs are very sensitive if the security is “too aggressive”.

You didn’t mention your ISP in your post. I had similar issues with Anyconnect on Frontier FIOS 6 to 8 months ago. I switched from default Frontier DNS to Cloudflare DNS and this fixed my issues I was having. Never happened again for me after making the DNS change. My company recently moved from Anyconnect to Global Protect so just relaying my past experience with it.

Good luck.

thanks for the reply, trying wired to a leaf node and it worked fine after i switched it over (about 7 hours). i don’t have a great way of testing wired to the main eero since my desk is not close.

my old deco had a “channel analyzer” where it would set the channel based on what a test ran sounds like eero tries to do that dynamically and may not always be successful.

i’ll try wired to a leaf node for a few more days to see. i also have an apple airport express that i could use as a wireless to ethernet bridge that i can test (although that had failed previously but i was also have ISP issues at the time)

thanks i’ll give that a shot as well as testing connected to the leaf via ethernet. maybe i’ve got a bad eero in the mix or despite what my company says my work laptop is messed up i’ll try eero support and my help desk again depending on how my testing goes.

thanks! if that is the same cause of my issue then it sounds like wiring in should hopefully resolve it. fingers crossed!

good call my isp is Cox. i actually tried flipping to cloudflare’s dns already as one of the various steps i tried earlier.

Yeah if wired to a leaf node is fine, it’s clearly Wifi-specific. AnyConnect is very sensitive to any kind of transient network partition or interrupt, even ones you’d never notice otherwise that last for only fractions of a second.

eero ACS should choose the best channels for the environment, but no, it’s definitely not perfect. A soft reset on the gateway followed by leaf nodes should reset channel plan to default and force ACS to reevaluate things, so it’s something to try in the future if you feel like it.

Edit: It also strikes me as odd that you have to reboot the entire machine when the issue occurs. AnyConnect should automatically reconnect if there is a network partition. If this is a PC maybe try updating the Wifi card drivers too.

My eeros all have wired back haul, so the wired back haul itself wasn’t a solution in my case. What fixed it for my kid was making sure they were on the primary SSID so that they remained on the same subnet when they changed APs.

yeah it is very weird any connect gives me some sort of DNS resolve error and it take a reboot to resolve it. i don’t have admin accesss to my machine so i’ll have to follow up with my help desk some more.

also prior to moving it the leaf wuss wired to the main one via ethernet (and a switch)

interesting thanks! i haven’t used the guest network feature until someone said to try it so i did and it didn’t fix it so i turned it back off. worked fine today wired into a leaf node but it’s really not a great solution since i had to move my leaf node from a sport where there’s a wired connection from the main node so speeds are about 1/3 what they are normally.

for tomorrow i’m trying to connect it via ethernet to an airport express which is connected wirelessly. hopefully the laptop sees it as a normal ethernet connection.