Cisco Firewall :: ASA 5505 Crashing Multiple Times During Day?
Nov 8, 2011
I have a problem with a ASA 5505. He is crashing multiple times during the day. I've setup a syslog server en I'd noticed that the last two log notification were:
2011-11-08 12:28:19 Local4.Debug 10.0.0.254 %ASA-7-711002: Task ran for 27016 msec, Process = Dispatch Unit, PC = 84745ce, Traceback =
2011-11-08 12:28:19 Local4.Debug 10.0.0.254 %ASA-7-711002: Task ran for 27016 msec, Process = Dispatch Unit, PC = 84745ce, Traceback = 0x084745CE 0x08474942 0x08475511 0x08475DB7 0x08475EDA 0x08508D9B 0x0850908A 0x083AB5B8 0x083A1D55 0x080655C1 0x08895A19 0x08895AD0 0x08952194 0x08978450
It's a 5505 with a 10 user inside host license, wich incidentally is more.
View 2 Replies
ADVERTISEMENT
Oct 18, 2012
I have a problem with an internet connection with a customer.They have a Zyxel 660 in bridge mode and the public ip is delivered to the eth0/0 outside interface of a 5505 ASA.They lose internet connectivity a couple of times per hour. What solves the problem immediately is disconnecting the ethernet cable from the eth0/0 and then directly plugging it back. Then it runs for 20-30 minutes or so.The isp doesnt't notice any errors on the dsl connection, only that they cannot ping the outside interface from time to time (duhhh)However, yesterday, when problem appeared for first time , I noticed that this Zyxel was very hot since it was placed on top of the ASA. Now it is set apart.In the meantime I already replaced all cables, but I think it's the Zyxel so I urged that the ISP send a new Zyxel.Though it sounds strange. [code]
View 4 Replies
View Related
Feb 20, 2011
I have a vpn connection with speed limit .. I want to connect to it multiple times to increase speed?
View 2 Replies
View Related
May 24, 2011
I have an ASA 5505 that I log into and currently only need a password to log onto the device. How do I set it up so a username is required as well?Another user needs to access the device. How would I set that up so they have to user their own credentials? I tried username apssword priv command and it does not work.
View 1 Replies
View Related
Dec 26, 2011
We have a working config with 1 external IP, we need to a second webserver (https) and it should be routed via a second public IP address. I already tried some suggestions from the community but haven't been able to find the solutions.
xxx.xxx.xxx.194 is going to the internal IP of 192.168.60.1 for OWA (https)
xxx.xxx.xxx.195 should go to a new webserver on 192.168.60.3
both server should be connected using SSL This is the current configuration :
ASA Version 8.3(1) !hostname fwdomain-name domain.localnames!interface Vlan1nameif insidesecurity-level 100ip address 192.168.60.250 255.255.255.0 !interface Vlan2nameif outsidesecurity-level 0ip address xxx.xxx.xxx.xxx 255.255.255.0 !interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5!interface Ethernet0/6!interface Ethernet0/7!ftp mode passiveclock timezone CEST 1clock summer-time CEDT recurring last Sun Mar 2:00 last Sun Oct 3:00dns server-group DefaultDNSdomain-name domain.localobject network obj_any subnet 0.0.0.0 0.0.0.0object network NETWORK_OBJ_192.168.70.0_26 subnet 192.168.70.0 255.255.255.192
[code].....
View 3 Replies
View Related
Sep 10, 2011
Attached is my updated ASA 5505 (8.4[2]) config. With this config, basically the "laptop" group works fine, but the leo and orion groups don't ever receive packets inbound. No DNS, nothing.
The laptop is windows, the other two are servers with two NICs. The interface cards are Intel Pro/1000s. I've been through everything including Vlan protocol conflicts and actually enabled the servers for 802.1(Q).
View 19 Replies
View Related
Jan 1, 2012
We have 2 Dell laptops and 1 Mac book all connected via a wireless router. Everything worked just fine until we got a Mac desktop which we connected via Ethernet cord for my husband's work. Now the wireless connection to our laptops disconnects at least 3-4 times per day and we need to unplug everything from the router and plug back in to get it to work again. The Ethernet connection to the desktop doesn't seem to have any issues.
View 7 Replies
View Related
Oct 6, 2012
I'm sitting around 6-15 feet away from my wireless router, and I keep losing wifi. I end up having to right click on the wifi icon in the bottom right corner and click Troubleshoot Problems. The problem which is found and fixed is "The default gateway is not available." During the troubleshooting, Intel My Wifi Technology gets disabled and then re-enabled, and things usually start to work again.ometimes I have to unplug the router to re-cycle it to fix the problem.When this happens is inconsistent - sometimes when I'm actively working, other times when I return from being away from my machine.[CODE]
View 5 Replies
View Related
May 22, 2011
I have 3 networks coming on DMZ (VPN) interface. Only one network is able to ping the DMZ interface. See below networks coming i on the DMZ.
10.132.24.0/2410.132.25.0/2410.132.26.0/24 Only the 10.132.26.0/24 netork works as it is in the same range as the DMZ interface.
allowing the other two networks to communicate. I've attched the diagram and configs for your perusal.
View 1 Replies
View Related
Dec 23, 2011
I want to configure multiple DHCP pool on ASA. that I create like
int e0/2
no shut
interface Ethernet0/2.10vlan 10nameif inside10security-level 100ip address 192.168.10.1 255.255.255.0
interface Ethernet0/2.20vlan 20 nameif inside20 security-level 100ip address 192.168.20.1 255.255.255.0
dhcpd address 192.168.10.10-192.168.10.254 inside10dhcpd dns x.x.x.x y.y.y.y interface inside10dhcpd enable inside10
dhcpd address 192.168.20.10-192.168.20.254 inside20dhcpd dns h.h.h.h z.z.z.z interface inside20dhcpd enable inside20
I have following query...
1. int e0/2 work as trunk port, is it? any special confiduration require other than dot1Q?
2. How can I configure inside interface? is it like,
access-group inside_access_in_1 in interface inside10
access-group inside_access_in_1 in interface inside10
3. How can I configure static NAT ?
4. How can i configured inside route?
5. How can I configured default NATing?
6. On which interface I access ASA? currently using inside interface.
View 5 Replies
View Related
Sep 13, 2012
We currently have 2 different ASA 5505 connect to our ASA5510. We want to VPN connect the 2 5505's to each other while still mantaining connection to our 5520. I have attached pdf of what we have. What we want is to connect traffic between the two 5505's so that devices in either location can talk to each other while still mantainig connection to the 5510.
View 13 Replies
View Related
Jan 7, 2013
I want to know with an ASA 5505 w/ Security Plus License I get up to 20 VLANS/Named Interfaces.I have a customer that is getting a new subnet of external IP addresses from their service provider and a different default gateway to accomodate re-hosting their datacenter at their main office instead of at a Colo. My question, when building out their new DMZ, can I have multiple route 0.0.0.0 commands?
Example.
Current Default Gateway 1.1.1.X
Internal hosts 192.168.1.0 use and are natted to 1.1.1.X
New Default Gateway for DMZ Servers 2.2.2.x
Internal hosts still use 1.1.1.X, but server hosts in 192.168.1.3 should use 2.2.2.X -- there are also a bunch of pre-existing static NAT rules for these servers such as 2.2.2.30 translates to 192.168.1.30.
I think I would accomplish this by using the following:
route inside 0.0.0.0 0.0.0.0 1.1.1.X
route DMZ 0.0.0.0 0.0.0.0 2.2.2.x
Would this be correct?
View 2 Replies
View Related
Sep 13, 2012
We currently have 2 different ASA 5505 connect to our ASA5510. We want to VPN connect the 2 5505's to each other while still mantaining connection to our 5520. I have attached pdf of what we have. What we want is to connect traffic between the two 5505's so that devices in either location can talk to each other while still mantainig connection to the 5510.
View 1 Replies
View Related
Sep 8, 2011
Is it possible to two or more public IP Addresses bound to a Cisco ASA 5505 running 8.4(2).
View 9 Replies
View Related
Jun 10, 2011
I am setting up a Cisco ASA 5505 first time for My organisation, I usually setup Cisco Router, I have 10 Static IP, & Have 6 Server (S-1, S-2, S-3, S-4, S-5, S-6), Traffic Should be pass through the ASA and is distributed to the destination server that is specified in the packet. LAN servers can be separated into discrete networks for security. For example, a private LAN for internal traffic accessed only via remote dial-in VPN sessions and Want to Configure DMZ for Server (S-4, S-5, S-6) that allows public web traffic.
I have Attached My Network Diagram I have some question,
1:- Can we Configure Multiple Static IP On ASA 5505 ?
2:- If Diagram is wrong what change need to be done ?
View 2 Replies
View Related
May 14, 2012
We've read everything about inspecting SIP packets and allowing them to pass through on port 5060, the default SIP port. However, our setup requires the ASA 5505 to allow SIP on ports 5060, 5160 and 5260.
Is this possible with the ASA 5505? If it's not, it would be a blocking issue for us to move forward with ASA appliances. We are currently investigating in a lab environment and really having difficulties configuring it to facilitate full SIP functionality.
View 1 Replies
View Related
Sep 23, 2011
I have an ASA 5505 running 8.2(1), that is configured with three interfaces as follows:
Inside (security 100) 10.0.0.0 /24
Inside 2 (security 100) 192.168.0.0 /24
Outside (security 0) internet
Inside is connected to my internal network, inside 2 is connected to the network of a sister organization, outside is outside.
I'd like to be able to route between from inside to inside 2, and have NAT translate me to inside2's address.
I have inter-interface traffic configured, and when I use a NAT exemption, I can route fine. But the resources on network 2 must see my request as coming from the inside2 interface IP.
View 2 Replies
View Related
Feb 12, 2013
This is for an ASA 5505 with the base license...I have a situation where I will not have one interface in my outside VLAN, but instead I want to have interfaces 1-7 in my outside VLAN and interface0/0 in my inside VLAN.
Is this supported with the Base license, and if so how would I do this? Do I still just need to assign one IP address to the outside VLAN?
Or will I need to upgrade to the Security Plus license and put each interface in a separate outside VLAN, so in essence I would have 7 outside VLANs each with the same security level (0)?
My situation is that I have several partner networks that i want to "aggregate" thru my one ASA 5505. So each outside interface represents a separate partner (outside) network, each of which I want to get to from my inside network. Hence the many outside to one inside.
View 5 Replies
View Related
Mar 22, 2012
btw- I don't know all the correct technical terms, so I will try to describe them as best as I can.
My internet at home keeps disconnecting. It disconnects when I go upstairs (we have a small house), it disconnects when I'm more than 5 meters away. Sometimes when I'm right next to the modem it disconnects. But not only does it disconnect, it also ask me once again for my internet password (as it is protected with one).
Things I've noticed:
-This has been going on for some while (about a year ... I'm a really patient person). It does it with my and my brother's macbook Pro (Mac Os X 10.5.8) but it doesn't with my father's Toshiba
-We switched to bell's fibre optic, so the modem should be working fine
-my internet works beautifully when I'm at my grandmothers house (who also has the new Fibre optic) and works well at my school's university
-Once a few months ago I decided to do some searching and found out that my computer kept changing some kind of IP name or whatever (not sure exactly what) but it kept saying: "BELL_account_name_0 has disconnected so it reconnected to BELL_account_name_1", and then _2, _3 once I found it was up to _150 !!
I am pretty handy with computers but I'm not used to Mac's settings. Everytime I try to do the Network Diagnostics sometimes it works first shot, sometimes I have to re run the same Diagnostics and it will work 20 tries later (like I said I am patient). But I know that Network Diagnostics is NOT THE ANSWER. It's just a temporary patch, I want to solve this problem completely so I won't have to deal with it in the future.
View 9 Replies
View Related
Jan 3, 2013
My internet connection is being dropped multple times a day. I have to run the troubleshooter each time and the connection is restored. How do I figure out if this is some setting in my wireless adapter or if it is the wireless adapter itself?
View 2 Replies
View Related
Dec 28, 2012
For the last several months, but progressively worse, my internet drops due to the DNS Server not responding. This happens across my whole network and the only fix I can come up with is to reset the router every time it does this. At this point I am thinking a new router is in order (but do not have the money atm), I am using a D-Link DIR-625 V. C1 Firmware 3.08 router and a Motorola SB6120 modem. Is there another permanent fix for this problem is or my router on it's last legs? Would setting a new DNS Server on my router work?
View 11 Replies
View Related
Oct 4, 2012
I want to configure multiple DHCP configuration on ASA 5505. I tried to create sub interface for different IP Pool but it was not configure on ASA 5505. is it possible to create subinterface on ASA 5505?
ASA 5505 IOS version: 8.3(1)
License: Security Plus
View 4 Replies
View Related
Aug 13, 2012
Our current cable ISP is having issues providing us with consistant connectivity. I would like to bring in a second ISP to allow my users to choose where they will connect to. There will be two dns names and i just want to to be able to choose between them.
Is this possible on the ASA5505? supporting two ISPs at one time for VPN on both?
View 3 Replies
View Related
Jun 9, 2013
We have a RV082 V03 being used as a gateway that was bought in mid 2011. The firmware version that came with it was v4.0.0.07. Up until we upgraded to firmware v4.2.1.02(Upgraded in Jan.2013), we would have to restart the router once every month due to loss of internet connectvity and it locking up. After I upgraded it to the 4.2.1.02, it gradually starting increasing from rebooting the router once a month, to once a week, then to multiple times a day. Today, I upgraded the firmware to the latest version being v4.2.2.08 and it has not froze up since the upgrade, but then again, it happens randomly through the day so it might not happen until tomorrow morning so we will see how this goes. During the time when it looses connectivity, I CANNOT get to the web gui or even ping the RV082 device. The lights on the RV082 are blinking like it is working though.This router is not even 2 years old yet and cannot believe that it would be dying already.
View 3 Replies
View Related
Jan 5, 2013
Region : Sweden
Model : TL-MR3420
Hardware Version : V1
Firmware Version : 3.12.21 Build 120523 Rel.37880n
ISP : Ownit
I am having problems with my TL-MR3420 router, it disconnects WIFI all the time. This occur several times a day and is very annoying.
I have quite recently upgraded to the latest firmware but the problem seem not to have been resolved. It also seem that it is mostly the WIFI service that is the problem. The usage of wired routing is working even when the WIFI is disabled.
View 3 Replies
View Related
May 25, 2011
I have an ASA 5505 with the security plus software and I'm trying to find out how to assign 2 public IPs to the outside interface and have each IP routed to a separate internal VLAN. For example, IP 1 = X.X.X.1 routed to 192.168.1.0 and IP 2 X.X.X.2 routed to 192.168.2.0. I was told this was possible and I've been trying to find configuration examples, but I can't seem to get anywhere and now I'm getting desperate because I'm scheduled to install it this weekend.
View 1 Replies
View Related
Jun 22, 2011
I'm stuck at asa 5505 nat, port forwarding configuration Here is what i need:
host1: 192.168.1.1 service tcp/100 >>>>> public ip 1.1.1.1 service tcp/100
host2: 192.168.1.2 service tcp/200 >>>>> public ip 1.1.1.1 service tcp/200
host3: 192.168.1.3 service tcp/300 >>>>> public ip 1.1.1.1 service tcp/300
So people from remote just need to use 1.1.1.1 public ip to access all the ports on three different inside server.I can do this on my old ASA 5505 with 8.0(4). Looks like there're lots of change from 8.0 to 8.4.
View 7 Replies
View Related
Sep 24, 2011
I switched from a DLink DIR-655 to a Buffalo WZR-HP-G300NH recently and have been having problems keeping a wireless client bridge connected. The bridge in question is a Linksys WGA600N, and though it has been as solid as a rock with the DLink I find myself resetting it often to reconnect the device to my network under the Buffalo. The bridge has been flashed and reflashed to its latest FW and the router has been flashed with different versions of DD-WRT (Buffalo's versions and vanilla DD-WRT versions; currently on vanilla DD-WRT v24-sp2 build 14896), yet I'm still experiencing the same problem. Fuddling around with the some of the wireless settings like the wireless channels on the router seems to keep the bridge connected a little longer than usual, however once it disconnects the frequency of drops goes up again. Other wireless clients on my network don't seem to have this problem with exception to another bridge (WHR-HP-GN) that I returned due to becoming catatonic to both wired and wireless connections.
View 4 Replies
View Related
Feb 13, 2012
I have 2 x 5510's in active/standby mode, things look fine until the active one needs to be failed over and I realize the standby one is dead. I never notice as the lights on the ASA look good, I only nice as I can't telnet or console onto it, how can I debug this issue?
View 1 Replies
View Related
Nov 28, 2011
If I ping a NAT'ed IP address configured on an ASA 5505, is it handled at the firewall (as far as priority) as if I were pinging the firewall interface itself, or the end device? The reason I ask is I am seeing waves of ping latency that I can relate to data transfers, but the nothing is even close to being maxed out as far as CPU, memory, or bandwidth. My guess is this is being handled by the ASA in software instead of in hardware.
View 0 Replies
View Related
Dec 19, 2012
I've set up a standard site-to-site VPN between 2 ASA 5505s and the VPN is working fine for traffic between these ASAs and computers which are in the same LANs.but when I'm trying to connect to computers which are in another VLAN I have a problem.
View 1 Replies
View Related
Apr 30, 2011
we just bought brand new Cisco ASA 5510.We are using it in transparent mode, only for firewalling.But we have problems... This device reboots itself several times in day. Actually throughput is around 5 Mb/s and connection number is around 200.
View 3 Replies
View Related
Dec 9, 2012
I have a ASA5585 running 8.4 that is redirecting Internet http to a websense server via GRE.The integration is working fine, except when a user PC sends a large packet (~1500 bytes).With WCCP/GRE headers, the user packet is too large to be transmitted to websense, so the ASA fragments the packet in two and transmits both to websense.
A sniffer trace confirms that both fragments reach the websense server, but the TCP packet is never acknowledged.User-side TCP retransmits the large packet three times over 15 seconds, and eventually retransmits fine with smaller packets. The 15 second delay is of course not acceptable.Users and Websense server are both on the Inside interface.
We are considering imposing browser proxy to websense (which works fine), but would prefer not, considering the increasing diversity of devices.
View 4 Replies
View Related
