When I power on our ASA 5510 it just hangs on "Launching BootLoader...".
I've managed to get into ROMMON before it attempts to launch the bootloader and tried to restore an ASA image but it said disk0: failed to mount.I've copied the console output but am not sure if it is useful to diagnose the problem or not (and is quite long)
I have a Cisco ASA 5510 with a strange issue. When I power it ON, the following is the status of the front panel LED:
Power is OFF
Status is Amber
Active is Amber
VPN is Green
Flash is OFF
Also nothing comes up on the console. I suspected a Power supply issue and replaced it, but still it doesn't seem to work.I cant open up a TAC as I do not have a Smart Net contract.
The firewall on my RVS4000 appears to hang when ever I use Netflix. If I disable the firewall and re-enable it it works for a while and then stops again. My IP address is in the Approved Client IP Addresses so it is excluded from the URL filtering and Web reputation rules.
View 5 Replies View RelatedI'm having an issue, with an WS-SVC-FWM-1-K9.
The card doesn't boot properly, it tries to boot, but after a while the 6500 puts it in shutdown.
I've noticed that it has 2 RJ45 ports in the board, I've plugged my console cable, but i only get characters with the default serial configuration.
Any information about the port configurations? Is the port "PC Console" the correct one?
My ASA5505 is not boot up. I did upload ios from rommon mode with tftp and tftpdnld.It is uploaded successfully after reboot it stopped at cisco logo sing.
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
I deleted old ios and upload new but look same.
how to upgrade a Cisco Pix 525 boot rom from 4.0 to 4.3. Is it a physical chip or software upgrade? Is it needed to upgrade to latest IOS on Cisco Pix 525 to 8.0. Where can I find more information on it?
View 1 Replies View RelatedWe have Cisco Prime 4.2 installed Windows 2008 R2 server, I am facing problem when I am going under Report>Fault & events or any other section, the browser gets stuck in loading page and become unresponsive. If I restrart the Daemon manager service it works fine for some time and again start giving problem in two or three hours time interval.I also face the same problem when I go to Admin > Job browser window.Does any one face the same problem,I have changed the host name of thserver using script and also generated new SSL certificate and I tried with diffrent browsers but problem is still persisting.
View 1 Replies View RelatedI have 7604 router with FWSM module in module 3.First of all the FWSM CF has been damaged, not physically. I bought the new same compact flash (size, partnumber, etc.). Downloaded the software 3.2 for FWSM, and ASDM from Cisco website. I realized that the procedure of creating new CF for FWSM is quite diffucult: creating 1-5 partitions, where 1 - is MP, and 4th - application partition. According to cisco documentation - the default boot partition is the 4th, so I partitioned from 7604 the CF into 4 partitions (partition disk1: <1-4> maximum) and copied the software and ASDM to the 4th partition (disk1:3:). Removed the CF from the router and put it into the FWSM module.
View 1 Replies View RelatedI have an ASA 5505 that I was updating from frimware 8.04 to 8.41. Anyway, I went through the update procedure half-asleep and accidentally deleted the boot image right after I installed it (I used the CLI and put in the command del asa8*.bin then just hit enter a bunch of times, which of course means I deleted the old firmware too).
So now whenever I power up the ASA, I get the "Could not find boot file" error. Is there a guide somewhere that tells me how can upload another boot image to the ASA and set the ASA to boot it from teh ROMMON prompt?
I have a problem getting my ASA 5520 boot properly. I first though of a flash problem and did a flash erase in ROMMON, then it brought error 15 during boot (No images found in / Error 15: File not found). I then TFTPied and image from Rommon, when done loading the image and start booting, the system hangs and nothing else. Attached is the screen I got on my console during boot up. BTW, the system was in the same state before I undertook any of the above actions. I don't have a service contract, so I can't contact TAC.
View 3 Replies View RelatedI'm running (C7200P-ADVENTERPRISEK9-M), Version 12.4(24)T4, RELEASE SOFTWARE (fc2) on a Cisco 7204VXR (NPE-G2). Currently, the router has about 200 VLANs configured on dot1q subinterfaces.
Now, the router hangs everytime we try to add a new Vlan.
Is there a well-known bug with the IOS version?
I have some issues with win 7 64 bit pro. I have 3 computers on a cat 5 wired home LAN using a DGL-4500 router and in yhe same homegroup. All are gigabit capable. 2 are regular PCs, one is an HTPC. All have the latest drivers.1) File transfers never exceed 12% of the network capacity.2) If I transfer from computer A to computer B's public folder, I can transfer 1GB in a few minutes. However, if I attempt to copy/paste a file from Computer B's public folder to computer A, computer A takes forever "discovering" the file, then gives some absurd transfer time, say 11 hours for the same file.3) If however I go to computer B and paste the same file into Computer A's public folder, the transfer takes only a few minutes.
4) If at any point during scenario #2 I right-click B's public folder from A during a transfer, I get the spinning circle forever which 90% of the time results in Explorer hanging and requiring the process to be killed/restarted.
Hanging up our cordless phones briefly interrupts our wireless connection. Just long enough to be disconnected from online games.We are using DECT 6.0 Vtech phones (definitely not 2.4 ghz phones)We have verizon FIOS internet (not DSL)I've tried changing channels in the modem with no success.
View 5 Replies View RelatedI have a client that has a newer Dell T310 - 8GB - Xeon 2.4, SBS 2011. Just went to a clients to move the office from one building to the other, couldn't log into the server so went to the terminal and saw the machine wasn't responsive in windows - users still able to access files and Quickbooks. I had to force shut down the machine.Now I fire it up, it gets to the login screen, and when I log in it gets stuck on the welcome screen. I can get into safe mode, i do not see any errors in event viewer that jump out. Hard drive lights are blicking like crazy at the welcome screen. But still can't get into it, and then the machine seems to lock up.
View 19 Replies View RelatedI'm using a Cisco 2821 router to provide temporary Internet access for a private network of about 300 users for a conference at a hotel. The hotel has provided me a public IP address for the WAN side. On the LAN side I have a 10.x.x.x /8 subnet with the router providing DHCP and NATing (overload) across the WAN interface.
Users can pick up an IP address and access the web. Light web pages such as Google tend to load without issue, however if a user does something that takes more time, such as streaming a Youtube trailer or opening an RDP session, the connection will freeze.
It doesn't appear to be related to bandwidth availability. Pings return on average 10-15 ms. However, I will get a request time out about every 10th continual ping. Steaming video will load about 4-6 seconds worth of data, then will appear to freeze without dropping. Doing something like speedtest.net will send a large amount of data then will hang, without ever ending the conversation.
This doesn't happen when I plug a laptop directly into the hotel public Internet line. They also don't have issues with their network similar to this.
I do not have any ACLs, etc. loaded. The router is basically wide open as far as I can tell. I don't see the router resources getting used much at all.
i have 2851 router and it is hanging when i login on it while it is hanging it gives me the following error message: [code]
View 2 Replies View RelatedI received a new 2504 today, I consoled on and powered it up. I see the boot sequence starting all the services. Unfortunately that's about all I can do - i try to terminate the Auto-install script but even pressing the Enter key has no effect. I can ping the 2504 but HTTP just times out. The console cable and terminal software are fine (I use them daily on a number of Cisco devices). I have done a factory reset but the same thing happens.
So, I'm thinking the unit needs to be RMA'd ?
This is what is on the current session :- [Code] ........
I have 3 locations connected with MPLS connectivity … 2 mbps , 2 mbps branches and 4 mbps and I have Cisco 1841 router ?Last few days I am facing problem that Cisco 1841 router’s Lan port suddenly stop working and connectivity get disconnected.In this stage branch offices can reach up to CISCO 1841 WAN port.
( I have changed 2 different router assuming router problem but issues remain same, Hence No hardware problem )
I have a 2911 router hanging/freezing at random times, could work fine for a week then crash, or sometimes, could only go a few hours, completely random with timing. The onyl fix is to manually pull the power and reinsert.When this happens, all services/access stop working, including nothing on console access.This was on 15.2.1.T1 which im aware, has a few bugs, so i upgraded to 15.2.1.T2.The issue continued, so I swapped out the 2911 with a brand new one. The issue is still present.
One interesting thing, is when the router crashes/freezes, all lights appear to remain on working as usual, but when i unplug any of the ethernet links, the lights still continue to remain flashing and on for the ethernet LEDs, even once i have fully removed the cat6 cable.
I'm using two WRV210 Linksys Cisco Routers to create a tunnel between two places with a pppoe adsl internet connection.I made several tests with new 2.xxx and old 1.7xx firmware, and nothing changes.Try to reset to factory defaults, and nothing changes.I have two problems:
1) The router crashes after a time working, usualy around 24 hours, sometimes more, sometimes less. The lights still flashing, but nothing happens, no VPN traffic and no ping response from the router, and of course, no internet access. I could see just that the router works a bit hot, but, I think that is normal.
2) The VPN IPSEC was configured, and both configurations are identical. All value are the same, I am using the dyndns service. So, the VPN quickly connects and I can ping and access remote computers. Windows Folders, VNC, IT'S REALLY WORKS FULL. WORKS REALLY FINE. PERFECT.
BUT, when the router crashes, as I've told on problem 01, after remove the power cord and insert ir again, the VPN don't reconnect.On log's, I could see that it's say that has no preshared key. [code] But, it worked before. Nothing changes, nothing, the router just restarts. No configuration was lost, (I checked the VPN IPSEC TAB), but says that have no preshared key,The unique way to restablish the connection is go on the VPN IPSEC TAB, and change symetrical any configuration, as change MAIN MODE to AGGRESSIVE on both routers.So, now are as MAIN. Tomorow probably it will crash, so, I will have to restart both routers, and change to AGGRESSIVE. So, when it happens again, i will have to back to MAIN.
My Cisco 2960 Switch hanging problem (does not work or LED light), when i removed SFP module slots its working fine.
View 1 Replies View RelatedI have some problem with the ASA 5510 ver 7.0(6). My manager wants to keep this as backup. tried lots of things but still users not able to access internet nor can i ping anywhere.For example when i ping 4.2.2.2 i dont get any reply.The runing config is below for ur ref :
HQ-ASA-01# show running-config
: Saved
:
[Code]......
I need to create a firewalled segment that not only separates hosts from general population, but also from each other. The solitary confinement of firewalled segments.I know that I could create a bunch of sub-interfaces, one for each host or group that needs to be isolated, but I'd really rather not have to do that if possible. 1) It could become a management nightmare between ACLs and sub-interfaces and 2) it's a waste of IP addresses.s there any way that I can create a bunch of separate VLANs behind the firewall and have them all terminate at the firewall, using a single firewall IP address for the gateway?
VLAN 1 - hosts 1.1.1.5 and 1.1.1.6VLAN 2 - hosts 1.1.1.7
Firewall DMZ Interface - 1.1.1.1VLAN 3 - hosts 1.1.1.8 and 1.1.1.9
This way, the hosts are isolated and can't talk to each other unless they're on the same VLAN.I'm working with an ASA 5510 running 8.2.4(4).
I have a ASA 5510 firewall with CSC module and Security Plus license for CSC module.Will you tell me how to configure my firewall to send emails to particular mail ID when someone login into the firewall or any virus attacks from outside.
View 6 Replies View RelatedWe were having a discussion of ios firewall vs. asa for smaller clients(less than 50). On using ios firewall(zbf or cbac)and an asa 5505/5510. One of the arguments brought up on using ios firewall on the router is that a router will do an ip sla failover. I have configured a number of isr's for this and i know it works good.
View 1 Replies View RelatedI would just like to to open UDP port 123 in the ASA 5510 Firewall so that our Primary Domain Controller could use this port to sync time with an external time source. We have already added an access rule for this port under the firewall configuration in ASDM 6.4 and this port was also allowed in the inbound and outbound rule of the PDC's Firewall but it seems that it was still blocked.
View 23 Replies View RelatedI am quite new to firewall, in my company one asa 5510 firewall is there.I configured inside, outside, dns, dhcp and nating.I need to config bandwidth limit (1Mbps) for inside port and I restruct like facebook, youtube and pornsites..And I heard that some subscription is required, really is it required?
View 1 Replies View RelatedI have an ASA 5510 in a live environment. Up til a short while ago I could access this via the ASDM and ssh. However I can no longer connect to it via eithier. When I access It via SSH I get a disclaimer saying the following
*** You have entered a restricted zone! Authorized access only!!! Disconnect immediately if you are not authorized user! ***
It then cuts me off.
When I try to access the ASDM I get the following
The firewall is running all its services without a problem and I can ping the device without any issues. Also none of the config (to my knpowledge has been changed). I set up a console session and http server enable is still there with
http 192.168.200.0 255.255.255.0 inside
I have just configured identity firewall on our ASA 5510.I have 3 nodes that authenticates against Active Directory, using the Windows Server 2008 R2 builtin Network Policy Server: A laptop, a stationary PC, and a Android Phone. All 3 nodes are authenticated using the same user/password.
Now, in ASDM -> Monitoring -> Properties -> Identity -> Users, I can see two of the nodes with my user name attached to it, namely the laptop and the stationary PC.But not the Android phone.
Then it dawned on me. To set up the ADAgent properly, you have to apply 2 group policy entries. Unfortunately, those 2 entries are applied to the Computer Configuraton part of the Group Policy.This means that your COMPUTER has to be a member of your domain for USER IDENTITY to work.So my Android phone and other nodes not a member of the AD Machine Store will never be detected by identity rules, and can roam the network free.
I'm trying to install an ASA 5510 transparent firewall using ASA version 8.4(3)9 but I don't understand how traffic will ever pass through my firewall if both interfaces are on the same sub net(V lan) as the host and it's default gateway? The reason I'm doing this is were installing UAG (or Direct Access) and the UAG appliance need to have public IP's but still be behind a firewall (see attached diagram).
Looking at the documentation (which all seems to be for 5505's running 8.2) it almost seems like i need to have the transparent firewall 'in-line' to the ISP router?, but this router services another IP address range on another v lan for other (routed) firewalls (not shown on diagram) so putting it 'in-line' is not possible. Surely this can't be the case can it? If not how is it supposed to be cabled up and configured so packets go through the firewall?
I currenty have 2 cisco 5510 firewalls one of the firewals is completly dead but contains a Cisco ASA SSM-10 can i remove this card and just place it into a working unit, will i have any problems doing so.
View 1 Replies View RelatedI am unable to see 4th interface on my firewall i.e fastether0/3 on my firewall ASA 5510.
Below is the output.
ciscoasa# sh int ip br Interface IP-Address OK? Method Status Protocol Ethernet0/0 x.x.x.x YES CONFIG up up Ethernet0/1 x.x.x.x YES CONFIG up up Ethernet0/2 unassigned YES unset administratively down down Internal-Control0/0 127.0.1.1 YES unset up up Internal-Data0/0 unassigned YES unset up up Management0/0 192.168.1.1 YES CONFIG up up
This is my first time to use the Cisco ASA 5500 family. I have a request from a user to create an access rule, to allow all LAN traffic to Destination IP address 165.241.29.17, 165.241.31.254 with Destination TCP port 5060,5061,5070 and UDP port 50000-52399.
View 9 Replies View Related