Cisco Firewall :: ASA 5505 - Randomly Stops Responding
Jun 5, 2012
I have an asa5505 with software version 7.2(3) that randomly stops responding. The firewall sits in front of a public facing webserver that handles a significant amount of traffic.I was wondering that would happen when the asa5505 reaches or exceeds the 4000 connections per second limit... i.e. would this possibly explain why my asa5505 stops responding and requires a power cycle in order to start working again. when it "crashes" it does not respond on either the outside or inside interfaces.
View 5 Replies
ADVERTISEMENT
Feb 26, 2013
My internet works fine but after a random period of time, usually 20-30 minutes the internet stops responding. I have ran a diagnostics test using the Intel PROset/wireless tools program and it states on the ping test that there is no response from the default gateway and the DHCP server.
View 3 Replies
View Related
Feb 26, 2013
We have a situation with 20 4410N's They are connected through a 2960 switch. They runned for about a year with no problems. We use the WiFi system with 10 cisco wireless ip phones, several workstations (5-10) and a few mobile devices.
Three weeks ago we took 10-15 iPads in commission (almost equally divided over the AP's), since then the trouble started. Several accesspoints stop randomly responding a few times a, day. We updated to the latest firmware (2.0.4.2), but that did not solve the problems.
Were using 3 SSID's WPA2 encryption and fixed IP's for the AP's. If we can't get a hold on this we have to replace all the AP's by other ones.
View 2 Replies
View Related
Nov 5, 2011
We have a Cisco 1811 which is running a number of different services. Let me try and explain how everything is working first.
On routed port 0, we have a statically configured fiber connection which routes a public /28. No BGP, etc just default routes. The /28 is divided into a two /29's, once of which is routed to Vlan3.
On routed port 1, we have a PPPoE DSL connection, with a single static IP.
Vlan1 is a 192.168.1.x subnet
Vlan2 is a 192.168.2.x subnet
Vlan3 is a y.y.y.x/29 subnet(the routed subnet)
Vlan1 and Vlan2 PAT the static fiber IP(not the other /29) along with the DSL. The other /29 is used for a few static NAT translations and SSLVPN
There is a zone based firewall in play, as well as a few route-maps to redirect traffic out certain interfaces on the inside.
The problem is, the fiber IP randomly stops responding to ping/ssh, however I can ping the interface IP assigned to Vlan3 from the WAN. DSL never loses connection in this manner.
I can normally reestablish "normal" connectivity by connecting to the DSL and bringing down the fiber and routed vlan in a specific order.
View 2 Replies
View Related
Aug 22, 2011
I have my firewall on IP 192.168.0.1 (for example, real IP is a class C address). I have a web server (Ubuntu 10.04, though this happened before with an 8.04 box as well) on ip 192.168.0.101. Everything will be functioning fine, and I won't have any issues for a while. Then, randomly I'll have problems getting to my web server, getting disconnected from SSH sessions. I go to one of my linux boxes and do an "arping -b 192.168.0.101" and I will get two responses, one from my firewall and one from the box, as illustrated below. The only way to correct the issue that I've run into is to reload the firewall, which will then behave properly again until it randomly decides to start answering ARP requests on the other IP again.
nwiadmin@vm-test-lx:~$ arping -b if-webdevint4-lxWARNING: interface is ignored: Operation not permittedARPING 192.168.0.101 from 192.168.0.168 eth0Unicast reply from 192.168.0.101 [xx:xx:xx:xx:xx:xx] 2.309msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 2.434msUnicast reply from 192.168.0.101 [xx:xx:xx:xx:xx:xx] 2.280msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 2.377msUnicast reply from 192.168.0.101 [xx:xx:xx:xx:xx:xx] 2.129msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 2.221msUnicast reply from 192.168.0.101 [xx:xx:xx:xx:xx:xx] 1.839msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 1.934msSent 4 probes (4 broadcast(s))Received 8 response(s)
Reloaded firewall
nwiadmin@vm-test-lx:~$ arping -b if-webdevint4-lxWARNING: interface is ignored: Operation not permittedARPING 192.168.0.101 from 192.168.0.168 eth0Unicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 2.839msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 1.935msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 1.758msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 2.733msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 9.568msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 1.931msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 2.283msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 1.756msUnicast reply from 192.168.0.101 [yy:yy:yy:yy:yy:yy] 2.070msSent 9 probes (9 broadcast(s))Received 9 response(s)
View 5 Replies
View Related
Sep 24, 2012
I've got some ASA5505 which run as EzVPN clients in NEM, connecting to a ASA5510 as head-end. The ASAs are configured with a CSM and AUS. But whenever they are getting a new configuration through the AUS they stop trying to establish an EzVPN connection to the head-end. After a "reload" they run with the new configuration and establish the tunnel as expected.
View 1 Replies
View Related
Nov 21, 2012
A client has an ASA 5505 with a base license. The version information and configuration is attached. In 8 hours, sometimes less and infrequently more, it becomes inaccessible. All connections are dropped and the only way to access the device is through a console connection. The WAN interface (VLAN 3) is connected to Verizon FIOS. The interface was set to 100 MBps and full duplex, but I just changed it to auto on both the speed and duplex to see what would happen. The LAN interface (VLAN 1) is also set to 100 MBps and full duplex It has not been changed.
The last time it happened logging was running, but nothing in the log indicated a problem. In fact, the last log entry was a couple of hours before the lockup (there's little or no traffic on the ASA while the problem is being diagnosed).
View 3 Replies
View Related
May 24, 2012
One of our hospitals keeps reporting that their internet is going out for a while than comes back up, sometimes they even have to reset the ISP modem for this it to work again. I upgraded and switched ISP to Time Warner Cable and figured it would essentially solve the issue, but there are still reports of internet outage and our new ISP has confirmed multiple times that their end is still up. Our ASA 5505 was configured by a previous employee, but when looking at the running config I noticed that the Interface for our ISP is NOT set to Duplex Full and Speed 100.
interface Ethernet0/5
switchport access vlan 2
View 3 Replies
View Related
May 24, 2012
One of our hospitals keeps reporting that their internet is going out for a while than comes back up, sometimes they even have to reset the ISP modem for this it to work again. I upgraded and switched ISP to Time Warner Cable and figured it would esentially solve the issue, but there are still reports of internet outage and our new ISP has confirmed multiple times that their end is still up. Our ASA 5505 was configured by a previous employee, but when looking at the running config I noticed that the Interface for our ISP is NOT set to Duplex Full and Speed 100.
interface Ethernet0/5
switchport access vlan 2
View 1 Replies
View Related
Apr 2, 2013
After upgrading our Cisco MSE to 7.4, the appliance does not stay connected to the network. Once the appliance is restarted, layer 3 echoes occur for about 2 minutes and then stop. The only way to get it to respond again, is to restart the appliance. Again, after a few minutes, it stops responding. I've checked the switch, and there is no port security set up on it. I've checked ACL's, and other potential culprits to no avail. The MSE interface is set up, and the device is configured.
View 12 Replies
View Related
Sep 29, 2011
Whenever I try to play an online game like Warcraft 3, the router stops responding to my computers sent packets. While still in the game, if I try to connect to a website the page isn't found. However, soon after exiting the game, I can access websites again.
The entire time while I was having the problem, I'm shown as still connected to the internet (not even showing the yellow ! sign for limited access). I ran a ping test to google.com while experiencing the problem and it said it could not find it. I checked the status of the connection, and it appears as though my computer is still sending packets normally, but the router is just unresponsive.
View 5 Replies
View Related
Sep 21, 2010
I reconnected 4 laptops today on 2 different WAP4410n APs. The user will let me know if they get disconnected. Yesterday I even reflashed the firmward on them. Also in order to reconect to one of the Waps I had to cycle the power.
The laptops are different One is a Dell Latitude c840 w/ Links wireless card and the other is a IBM t41 i believe.
View 7 Replies
View Related
Apr 15, 2012
I have two MWR 2941's in a lab environment awaiting deployment in a SAToP environment. They are both running the latest IOS, mwr2941-adviprank9-mz.151-1.MR3.bin. After being up for about 4 days they both stop responding to telnet attempts. I do not get a reject message - it just goes to a blank secreen with a flashing cursor. The only way to fix it is to reboot. I read that an older IOS had a similar bug on the MWR1941 but I cannot find anything about the 2941 having issues such as this.
View 4 Replies
View Related
Sep 21, 2010
Just bought 2 of these (wish I had seen this thread before). They shipped with the latest firmware already on them, so must be a very recent manufacture. I am having the exact same problems as above. It seems to be almost exactly 24 hours for me and the access point stops passing traffic. At first the latency goes very high (2200ms - 3800ms) right before it stops passing traffic. You can still ping the access point from the 802.11 side for a while, but nothing from the wired side, it just goes braindead. Once I was able to get the management interface up over the wireless while it was in this state and rebooted from the management side. It did not solve the issue, I had to unpower it and restart it (PoE Powered). I have only configured one of them due to these issues. I think they are going back. Here is how the access point arrived (yes, I just rebooted again for the 8th time).
Hardware Version:Rev.12Software Version:2.0.0.5Local MAC Address:00:13:60:FF:AF:F0System Up Time:0 hour:34 min:35 sec
View 18 Replies
View Related
Mar 21, 2013
I'm facing a peculiar problem while accessing the switch (regardless of the mode - L2 / L3) once I connect a WiFi router provided by the ISP (Local make). The Switch stops responding on the web based console as well as ping. The network remains up but hosts' stop responding to ping packets to each other too. Only way I get control of the switch again is by rebooting it.
Switch is operating at its default IP: 192.168.1.254 and the plugged in router has a hard coded IP of - 192.168.1.1. I've taken a cable from the router (from its Ethernet port) and I've plugged it in to the router.
Just for the sake of it I've plugged the router cable in the link ports too but the switch stop's responding.
View 4 Replies
View Related
Feb 26, 2013
I recently installed six of the WAP4410N v2 models, firmware 2.0.4.2
View 2 Replies
View Related
Sep 21, 2010
After a day or so it just stops responding. I recently bought 3 of these to my office.
Running 2.0.0.5 etc.
View 1 Replies
View Related
Aug 31, 2012
Roughly once an hour my games will simply just stop responding, most notably on League of Legends everything else continues to happen around me uninterrupted but I cannot move my character nor can I use any abilities for about ~4 seconds and will do the same for literally every online game I have played.It doesn't seem to cut out my internet but when it happens on occasion it will crash a Skype call for about the same duration the unresponsiveness occurs.I have Optimum Online and a Linksys wired router with Windows 7.
View 2 Replies
View Related
Apr 18, 2013
I am trying to determine why Comcast Business Class modem configured with a static IP (IPV4) works with a laptop or Linksys Cable modem but not with a Cisco ASA 5505. After a few minutes, the 5505 stop passing web traffic. I am able to ping the default gateway even though I can not surf the web. Restarting the 5505 and the Comcast modem, web traffic flows for a short period of time, then stops. I can connect inside the firewall via ASDM 7.1.1 and via SSH. I can not connect via either from the outside. Comcast tech support indicated their router is working and is configured in bridge mode. I swapped out the 5505's memory, and then with another 5505. Nothing seems to resolve the issue. I am trying to determine if the 5505 or the Comcast router is not configured correctly.
Here are the parameters: The 5505 was reset to default factory settings via the command: config factory-default. Configured the outside interface with static IP Address followed by the no shutdown command, then removed DHCP features from outside interface. Added Comcast DNS servers, default route, ntp servers, configured DHCP features on the inside interface. Enabled HTTP/SSH (inside & outside interfaces) and ICMP echo-reply (outside only).
I believe the Comcast modem is not configured correctly. The show version and show startup output are below.
ciscoasa# show version
Cisco Adaptive Security Appliance Software Version 9.1(1)
Device Manager Version 7.1(2)
[Code].....
View 5 Replies
View Related
Nov 2, 2011
I have a Cisco 2911 router with 4 T1 connections. Two are set as a multilink and the other two are for two other locations. The router will run fine, but after a month I cannot ping the gigabit ethernet 0/0 interface. I would have to manually reboot the router to get it to respond again. Before I noticed a lot of interface discards which would shutdown the 2911 and a manual reboot would be needed, but for this time it isn't the case. Where would I start with this the memory and cpu usage are fine.
Here is the config:
Current configuration : 2905 bytes
!
version 15.0
[Code].....
View 2 Replies
View Related
Aug 26, 2012
I bought a pair of SG200-08 switches a month ago and noticed that after a couple of weeks (give or take) the web interface stops responding (today being the 2nd time this happened). I am on v1.0.5.1 of the firmware on both switches. I can ping the switches just fine. I've run a port scan against then showing that port 80 is open. When I browse to either switch using IE9.0 or Chrome (v21) both show page loading however it remains blank - eventually the browser times out. I've tried multiple machines (just in case of port blocking) however always the same result.
To correct this I power cycle the switches and the web interface starts working.On the switching side, both seem to be working as there doesn't isn't any network impact (from what I can tell) however not being able to access the web interface is very irritating, not to mention making me wonder what else isn't working.
View 3 Replies
View Related
Sep 21, 2010
I have 2 of these in a Bridge between 2 buildings. Cisco support replaced them with 2 BRAND NEW units after 6 weeks of waiting, that do the same thing. Spent so many hours on these turds it is insane. the thing goes down with the wind, tinker with it and maybe you will be up for a few hours or days then back to down again. Thinking it has something to do with the firmware or a power saving thing. Works great when it is up though. I am still trying stuff to get it to work stable. To much money invested in them now to start from scratch but they wanted budget equipment in place and not Cisco Aironet.
View 3 Replies
View Related
Sep 10, 2011
How to fix our LMS 4.0 high CPU issues?. It takes lots of resources and also some time stop responding.
View 7 Replies
View Related
Sep 21, 2010
With over 45,000 views, something must be wrong. Like many of the others here, we can't work out what's wrong with our network and why the cisco 4410n behaves so badly.
Our experience is just like everyone elses. At some point in time, mainly between 1 day and 1 week, the router just stops responding. The problem appears to be on the LAN side, as quite often when it fails, the wireless is still active and clients are associated. Some time ago I was Cisco certified, so I have had faith in Cisco products. I also sold them for a living, which made it a natural choice, but I am struggling to come to terms with my purchase here.
I had tried:
All the latest firmwares from March until now (including the latest) Full resets of the device, including "reset to factory defaults" Pegging the autonegotiate to fixed 10/100 Changing channels on the wireless (although as mentioned, it appears LAN side issues)
This thread has given me different views. Other sites also talk about changing beacon settings, but I'm not sure that's the right way to go.I would consider syslogging the results and getting extended debug happening, but when the problem happens and the device hangs, LAN is lost so the messages are also lost.
I find it hard to believe that so many people can have this problem and no one at Cisco can reproduce the fault. So, here's a pretty simple network for Cisco to experiment with which clearly has the problem:
Flat GBit network
Dlink DGS-1016D 16-port GB switch (unmanaged)
4-5 wireless clients (mainly iPhones & iPad)
The volume of traffic is low - no huge file transfers. The expected uptime is between 3-6 days. As a matter of interest, I also tried POE to drive it using a TP-Link injector. The device worked perfectly, but the problem did not seem to be affected.
It might be heading towards time to log a call on this. I was hoping the vast number of existing callers would have given the support staff enough to solve the problem, but it appears Cisco is none-the-wise on the fault, let alone the solution.
As a matter of interest, maybe a good interrim solution would be for Cisco to use the watchdog timer to ping a known address and perform a soft-reset if the address (on the local network) did not respond after a period of time. This atleast would stop people having to crawl under desks and pull plugs to reset the device as it has no power switch.
I have a "Generation 2" device.
View 2 Replies
View Related
Sep 21, 2010
I have the same problem with my two WAP4410N connected to my Cisco SRW2024 Gigabit switch.It appears that there would be a time where the PHY's between the WAP and the switch are hung.The lights on the Gigabit switch are constantly flashing.
It is until I disconnect and reconnect the network cable between the WAP and the Gigabit switch that the problem is momentarily solved. Then it seems like another high traffic usage of the WAP will cause the connection to hang. This solutions is totally unacceptable as I am not willing to open my wiring closet every time to fix this hang. Also I've lost precious data between my client and server because of this hang!
I don't think the problem is with the Gigabit switch as I have other Gigabit devices connected to it and I never get them to hang like the WAP.
I saw on the release notes (although the firmware has not been posted) that there is a problem with the WAP Gigabit PHY. From the release notes, it seems the firmware will have an option to take down the speed of the WAP Gigabit PHY from 1000BT to 100TX. This would be a shame if this is the final solution as one main reason for purchasing the WAP4410N is its Gigabit capability.
Being a networking PHY designer who had also worked on other Cisco products, I'm surprise that this problem had not been resolved in their qualification and interoperability lab.
View 1 Replies
View Related
Feb 15, 2012
Is there any plan to release an updated firmware for 521w? Or is this done? I currently have .24 firmware but still having lockup issue.
View 9 Replies
View Related
Feb 4, 2013
I have two 3560G 24p switches, connected to each other via two links in Etherchannel. From one of the switches i retrieve SNMP info about port status and traffic for these two ports. That works great, until i pull out random cable. The switch responds with ifOperStatus = 2 and traffic drops to zero for that partikular port, as it should. But a some of seconds later it stops responding to my snmp reguests for ~ 5 seconds. That causes problems as my watchdog sets an alarm as it thinks the connection to the switch has been lost. (It checks switch uptime is increasing all the time)
If I set a delay on the watchdog on my monitoring system of 15sec, it works. But it ain't that nice to have a delay of 15 sec if the connection really is lost.
View 2 Replies
View Related
Jan 17, 2011
Bought a Cisco RVL200 (latest firmware included - I checked), and I've set it up to serve as the gateway/firewall for my home network. I also intend to use the VPN functionality when travelling as well as serving up content from a web server behind it. All of this seems to work the way it is intended (after quite a bit of fiddling).
The problem however is that if it comes under any sort of load it simply stops responding - physically it looks alright with the expected leds being lit, just as it would when functioning normally. It does not display the management interface, nor does it even respond to ping (which it does when it works). If I start up a bittorrent client on any of the machines on the internal network and add a torrent to something popular like Ubuntu Linux it'll usually start downloading and then after 5-15 minutes the RVL200 will have stopped responding. Tried adding QOS settings to limit the computer running the client or downprioritize this type of traffic, but that does not seem to have any effect.
View 1 Replies
View Related
Mar 30, 2011
My router is running the stock 1.21 firmware and it has been fine for almost a year before the wireless suddenly stopped working. I reset the router and restored my previous configuration. After the reboot, the SSID is visible and I can connect to it but there is no internet connection. Also the router becomes unresponsive, i.e. timeout trying to access the router configuration page. After trying out different settings it seems that enabling WPA2+AES is the cause.In the mean time, I am running an open wireless network and everything seems fine. Is the hardware faulty? I am reluctant to update the firmware because of a negative experience with another router (same model).
View 2 Replies
View Related
Feb 9, 2013
I run a AirPort Extreme router. I have my F9K1106 range extender set up and working. works awesome. I get home from work the next day and the range extender seems to fall asleep , it won't pass any traffic. I power cycle it and its back up and running. this happens everyday no fail for a week now.
View 1 Replies
View Related
Aug 18, 2012
I am trying to set up ADSL and WiFi in a country home. I have bought a DLink DSL-2640 modem-router for this. The device is connected to the ADSL, everything works fine. The device has a WiFi AP capability - I have set up the WiFi and I am accessing the network from 2 different iPads, 2 PCs and an Android phone. After a few hours of work I begin to notice that one of the iPads is taking to long to load pages - it even can't load the router's web interface. This goes on for 5-10 minutes or so, then it passes away. Same stuff happens to Android, but rarer. PC has this problem occasionally also, but rarest of all.
I am assuming that this is a problem of the device - ADSL and WiFi might be too much for it. I got a dedicated WiFi router (TP-Link WR740N), connected it to the DLink and turned off WiFi on the D-Link.
Same stuff happens. After a while the Internet stops responding - I can't load the router's web interface. Goes on for 2-10 minutes and passes. WiFi is functional, I can disconnect and connect a device, device obtains an address through DHCP.
I updated both devices to the latest official firmware. I tried switching WiFi channels, switched the router to g-only mode. EM interference is very unlikely since it's a country home and there are no wifi networks around.
View 2 Replies
View Related
Jul 29, 2011
As of two days ago my DIR-655 seems to have stopped loading webpages every 10-30minutes for periods of up to 5-15 minutes, as in they the reloading icon will constantly be circling and the webpage remains blank, no error or anything until it says failed to load on my web browser (tried multiple browsers such as Safari, Chrome, IE and Firefox). This problem occurs on every computer on my network, laptops (both Mac and PC) and desktops. When this problem occurs all lights on modem and router seem to be normal no signs of anything going down but I originally thought that this affected wired and wireless but I seem to have narrowed it to culprit being the wireless. When connected to the PC I can browse for an indefinite amount of time without the webpages failing to respond, however when I connected to WiFi through Airport on a Macbook Air my webpages start to begin failing to load around 5-10 minutes of browsing which affects all computers connected to the network (essentially all computers failing to respond to the internet during this outage).
Interestingly when this problem occurs, if I am connected to Skype or Aim it will stay connected and I can still chat with people but I will not be able to sign onto AIM if the problem occurs before I sign on and I try to sign on during the outage. If I am streaming a video from justin.tv or ustream it still continues to stream during this "outage".I have the revB of the DIR-655 and have tried resetting the modem, turning off the firewall, upgrading firmware to 2.03NA from 2.01NA and setting the MTU to 1400 (default 1500) with nothing working. I am using Time Warner Wideband ISP and have connected the modem directly to my PC and for the 30minutes or so that I tested the web browsing it seemed fine and did not have any errors.
View 14 Replies
View Related
Oct 11, 2012
Router randomly stops working and sometimes reconnects by it self and sometimes I have to manual reset the router. Also I only get 2-3 bars wireless. Is my router not configured properly or damaged?
View 2 Replies
View Related
