I'm monitoring 2 ASA 5585-x firewalls (in HA mode) using Cisco Prime LMS 4.2.1. The LMS server is connected to the firewalls on the inside interface.
My issue is that I keep on receiving Alert messages on Fault Monitor for both ASA firewalls listing all interfaces (except inside interface) as unresponsive.
My thought is that since the LMS server is not able to ping other active interfaces, it generates these alert messages.
My query is whether I'm thinking right? If yes, how can I prevent these unwanted messages from showing in Fault Monitor?
I have an ASA 5585 in transparent mode, multi-context. It seems that the option to configure a BVI in one of the traffic contexts isn't there. In other words, while I see the option to configure a bridge group interface in the admin context, no such option comes up in the traffic context. [CODE]....
I am attempting to replace my actiontec router with the Cisco 871 I have little expirience with CLI-IOS so I was trying to use sdm express that failed to load and when I finally got it to load it still didnt work and I ended up getting locked out of the router it was totally unresponsive. So I did a reset and now am attempting to use the Cisco Configuration Assistant to set up my wan connection but it have been loading security related data for 15 minutes and I have a feeling it's not doing anything at all. I don't understand what I'm doing wrong.... Any advice.... I just was trying to get a default set up that would give me internet access Im not trying to enable any of the security functionality at this point.
So I am an owner of this router for the last 2 years: TL-WR542G - Welcome to TP-LINK . Today it died on me. All of its leds are lightning up, but it doesn't provide a wifi network, and won't give me an interface when i try to access it through 192.168.1.1 on my desktop . There seems to be nothing I can do about it , I tried pushing the reset button on it's back but it does nothing at all.
Do I have any other options to get some life back into it?
I have an intermittent issue with a new WAG320N.Device is new (installed for 1 month now) and is running the latest firmware "out of the box".
Device was confirmed as working (recommended) via the ISP, as it uses a Broadcom chipset, so it works "more reliably" with the ISP's hardware which uses the same chipset.
Setup was painless and the router synced up fine and has been operating for a few weeks. However, twice in the past week the router has become unresponsive to ping over the LAN. Furthermore, the device's lights indicate everything is OK, however I have to reset the router (power cycle) and then it returns to normal.
WIFI is OFF. LAN IP is set manually, DHCP is OFF. The router is plugged into it's own UPS.
I have a Synology NAS that is connected to several IP Cameras through a SG300 switch. From time to time the IP cameras become "disconnected" at random When I reboot the switch, the access to cameras is re-established.
Problems: it requires an external device to reboot the switchall ports are shutdown while rebooting the switch
Q1 Is there a way to program the SG300 to reboot itself automatically every X hours?
Q2 Is there a way to automate the following process on the SG300 switch itself. ping a camera every 1 minutesafter three unresponsive ping, shutdown and restart the port to which the camera is connected
Background: Port forwarding external port 1234 to internal port 123 on a NAS appliance (ip 192.168.1.111) Successfully accessed NAS like this: [URL] Everything was working perfectly for several weeks Last week I changed the subnet to 172.17.888.x
Problem: Everything back to normal on the LAN except that port forwarding to the NAS no longer works.
Gerfingerpoken: I opened another port (1235) and forwarded that to the NAS (in addition to the original port). No success.
I tried a port scanner. The port scanner reported that port 1234 was open on the router, but didn't mention 1235. I repeated with yet another port. Same result: only port 1234 is reported open by the port scanner. Software rebooted the router, same result Hard reset (button) the router, still no change.
QUESTIONS: 1. How can I test if the router is actually forwarding new ports? (software tool?)
I found my CSC module installed in ASA 5510 unresponsive. I tried to recover / re-image the module with .bin file. but I think it is not possible to re-image because there is no rechability with CSC module, and session 1 command also doesn't work,
you can see the response here.
CS-ASA# session 1
Opening command session with slot 1.
Card in slot 1 did not respond to session request.
CS-ASA#
In this case how to enter into the module?
I removed and inserted the module and tried to reach to it .. but couldnt solve . I just wanted to know whether hardware is dead or not.
Every 25 minutes, sometimes sooner, sometimes later but usually on the dot I get limited access and the router interface becomes inaccessible for about 1-3 minutes. My problem is my room mate has left for the week and the router is locked in there. I am unable to connect hardwired or power cycle the router. I have the password for the connect and I just got the PW for the router interface. I also have remote capabilities. I have been trying many things to stop it from being so slow and unstable but basically even though my signal reception is 4-5 bars I am only averaging 11mbps speed. I am using a b/g alfa 1w adapter but this shouldn't be the cause of the slower speeds. I can only achieve 1-3mbps down on speedtest.net whereas before I was getting 6-12mbps down.
-UPnP Off. -NAT Firewall Open. -300mbps Max -Channel 1 no other channels within 5 channels near it. -WPA2-PSK [AES] -Default MAC Address -Automatic Configuring of all IP Addresses -MTU 1500 -WMM On.
Being limited by lack of power cycle and hardwired connect makes it a little harder. I know it's fixable without that though. Also there is no point of a hardwired connect unless I am upgrading the firmware (it already has the newest firmware by default) because I know it should work fine like that. I have tested connecting to other networks and I do not d/c on them. My own research has shown that setting a static IP resolves the issue. I am unfamiliar with exactly how to set this up for the router and the client and if it involves dealing with the ISP (Comcast)
My DSC-930L's web interface becomes unresponsive about an hour or two after power cycling my camera. It still responds to pings, and it still sends images to FTP when it detects motion, but I can't log into it via web interface, mydlink, or the iphone app. Power cycling the camera fixes the problem for an hour or so but then its right back to not working again.
I have configured a vlan interface on a 3750 switch. there is aprox 4Mb active traffic flowing through the interface, but when I do a "show interface vlan (vlanid)" the output show zero bits in and zero bits out. Its a typical L3 config with one IP on the vllan interface acting as the gateway for the VLAN devices. Is this a normal behaviur ? and if so is there any way to get the traffic in/out stats. The end PC/devices are connected to this switch via an L2 TRUNK and I dont have access to the L2 switch on which the actual devices connect. so cant get the real time stats of those interfaces.
Facing issue with 2960G switch , where its do not display "logging trap informational " in show running and show startup .where its showing all other levels from 0 to 5 and 7 after configuration and save commands. [code] after config getting saved , it do not shows in show runn or in show startup while for all other levels it do show the config lines .I tried the same on 12.55.SE release also but its same results . Is this a limitaion of this platform, is there any doc explaining the same for reference. [code]
My Netgear wireless router had been working just fine and then inexplicably stopped allowing wireless internet access. My modem is fine. I contacted my internet service provider, and no luck. I unplugged the router's power source and plugged it back it in. Still not working. I switched the power on and off. Nothing. I do not know what to try next.
Region : France Model : TD-VG3631 Hardware Version : V1 Firmware Version : ISP :
I tried to upgrade a TD-VG3631 that came with firmware version TD-VG3631_V1_120929 to the latest TD-VG3631_V1_130108 version.[url]...Is there a recovery procedure to flash back a firmware?
I got a refurbished EA4500 (directly from Cisco) last week. I have been having a few issues, which I have found (not too great) workarounds for. However, the latest issue has me stumped, and is unacceptable.Whenever I am transferring files between 2 computers, I get kind of OK speed (5 MB/s). However, while this transfer happens, no other device can connect to the net. Actually, even trying to go to router home page (192.168.1.1) times out.The clients still say they are connected to the router, but I just can't get anywhere.As soon as the file transfer finishes, everything goes back to normal.EA4500 replaced a WRT54G. Never had any problems with that router. It was such a workhorse. Just needed to upgrade to a n-router.I am on the latest non-cloud firmware.I have reduced the MTU size to 1200. Not sure that matters.
Does the 5585X supports BGP ? What if someone wants to use Antivirus + IPS feature in that . I have seen IPS modules for 5585X but looks like the antivirus module is not avaliable for 5585X
I want to configure Qos for 2 diffrent Vlan 2 , each vlan for 2 mbps bandwidth .(VLAN details VLAN 10 (10.10.x.x /24) and vlan 20(20.20.x.x/24) Is any difference regarding initials configuration B/w ASA 5520 and 5585
We are working for a client move from PIX 525 to ASA 5585-X, SSP10. This is a production environment and very critical migration. What are the gotchas which we should be aware off?
We have installed 5585-x in active/active mode with transparent firewall. We have created two virtual sersors for vs1 and vs2 in IPS module and linked with ASA context C1(vs1), C2(vs2) and admin(vs0).
As firewall is working in transparent mode, we have bridge IP address for context C1 10.1.1.1 and for context C2 10.2.2.1.
I have added default routed for context C1 10.1.1.2 .It is in the outside of asa and SVI on switch.For the other context C2 10.2.2.2.
IP address range for the IPS module and what should be the gateway for IPS module.AS the traffic is coming from outside and going to inside interface of ASA.
I have a pair of ASA 5585 configured with 2 contexts, C1 & C2, C1 is active on ASA-1 & C2 is active on ASA-2 i did failover test, ping was initiated to host residing behind ASA-1 in context C1 i powered of ASA-1 then both context became active on ASA-2, however during this failover.i saw 4 ping packets drop..
I have three different VRF on Nexus 7k, and we want those should be extend to Cisco ASA 5585 IOS 8.4.5.We had used the trunk port on Nexus 7k to ASA connectivity... and Dynamic protocl OSPF is running , both are in same area of OSPF,We are making subinterface on firewall for each VLAN.... in this scnerio only one VRF connectivity is working.. but other VRF are not pingable from ASA.
Currently, we allow /24 into our DMZ as follow: [code] Now, if we need to extended the /24 to a bigger scope ( range of 15 class C networks ) : can I just re-used the static route or should I use a ACL to allow traffic? This is on a ASA5585
I have a new 5585x with only basic ip information on it. I can't get the ASDM to load from any interface. Browser just says cannot load page. I upgraded to 9.1 and ASDM 7.11-52. (Also did not work before I upgraded) I can ping the managment 0 interface and can tftp data to and from it. Also unable to telnet to the management interface. [code]
Any document in which is specified who may ACE rules are supported in an ASA5585-SSP-20?I need to compare this an other several specification versus a FWSM. I found the information for the module, but not for the ASA 5585-X..In the data sheet this information is not specified.
we have replaced a PSU in an ASA 5585 and after it, when we want to see the new PSU serial number, strangely appears the old one instead of the new one. Do we have to do anything in order to get the inventory updated?
