I am switching a switch connecting to the ASA5550 tomorrow. My current switch is using fiber connecting to the ASA. The new one only support copper. If I switch between fiber to copper on the ASA (change media-type command on interface) will it cause a down time? I have VPN tunnel on the ASA and don't want the session to reset.
View 2 RepliesAny Cisco command similar to Junipers monitor interface interface type / number. It's handy seeing real time interface stats. monitor interface?
View 5 Replies View RelatedIs there a command that can be used to view what type of SFP module that is installed in Catalyst 3750 switch?
View 6 Replies View RelatedI've got a ASA 5550 firewall interface failover issue. (File attached).
when I shut down the inside interface Gi 1/1 of the left firewall(Active firewall), It failed to failover. but when I shut down the Gi 1/12 of the Core 1 switch, The firewall failover very well.
I followed this guide but I was not able to failover. [URL]
how can I configure so that when the Gi 1/1 or Gi 1/0 interface goes down, it can failover ? Code...
I'm having a problem with a context, I have two CISCO ASA 5550 (failover) and also we have the CISCO CSM to monitoring it, but since some weeks is showing a memory usage of 100% but then it drops until reach zero and then again the graphic goes up. This is the second time that the graphic shows this
I also check this on the CLI and i'ts fine because is showing the real percent, so my question here is why is showing this kind of behavior, I mean it was working fine before.
In the other hand I checked the secondary device and this is showing a 99% of used memory, but as the other one this graphic doesn't drop
I also checked via CLI and it says that it had the 99% memory used , Is there a way that i can put more memory on the context or what do you suggest that I can check on my firewalls.
Is it possible to use ports from 2 SFP and 2 RJ45 Interface on ASA 5550 Module 1.
View 5 Replies View Relatedthe inside interface on our primary ASA seemed to "hang". It dropped all the packets it received. Because the interface didnt go down, failover didn't happen. Device's info;
-Cisco Adaptive Security Appliance Software Version 8.2(3)
-Device Manager Version 6.3(3)
-Hardware: ASA5550, 4096 MB RAM, CPU Pentium 4 3000 MHz
-Internal ATA Compact Flash, 256MB
-BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
I attached a capture picture shows that traffic didnt go to the roof when the issue happened. Why the interface would "freeze" randomly?
I am normally only doing IOS config. I have little problem when trying to setup this unit.,It boots ASA software 8.0.4 fine.,When i go to enable mode and into configuration mode and try to configure ip on an interface i have a problem.,
ciscoasa(config)# intciscoasa(config)# interface manciscoasa(config)# interface management 0/0ciscoasa(config-if)# ?,Interface configuration commands: default Set a command to its defaults description Interface specific description dhcp Configure parameters for DHCP client duplex Configure duplex operation exit Exit from,interface configuration mode Interactive help for interface subcommands no Negate a command or set its defaults shutdown ,Shutdown the selected interface speed Configure speed operationciscoasa(config-if)#
I did try to upload the new software 8.4.2 from rommon using TFTP. ,It boots 8.4.2 fine, but have same problem as in 8.0.4.,I did try to create a user haveing priv 15 and logging on as that user. It gives the same.,The firewall is not in transparent mode.
I've recently set up a LAN-2-LAN VPN tunnel to a 3rd party service provider who uses RFC 1918 private addressing internally and cannot perform NAT on their side of the tunnel. In order to avoid conflicts with our address space I've had to implement DNAT for the address on the 3rd party network that users at my end must access. The tunnel terminates at my end on the outside interface of an ASA-5550 running 8.4.2. While the ASA has 8 interfaces at security levels between 0 and 100, DNAT only need occur for traffic flowing from inside (100) to outside (0).
The following (redacted) addressing applies:
Address of the server on the 3rd party provider network: 192.168.2.155
Mapped address of server as seen on the network at my end: 10.168.2.155
I've currently implemented DNAT using object NAT as follows:
object network remote-server
host 192.168.2.155
nat (outside,inside) static 10.168.2.155
This works as expected, however in examples and discussion I've seen, it appears that the typical way to configure NAT for this scenario is with manual NAT as follows:
object network remote-server
host 192.168.2.155
object network remote-server-mapped
host 10.168.2.155
nat (inside,outside) source static any any destination static remote-server-mapped remote-server
Is there any reason why I should consider using the manual NAT method rather than the object NAT method in this scenario?Are there any technical reasons why using object NAT in this manner should be avoided?
I am currently doing some research (for my employer) into creating multi-context sub-interfaces on a Transparent ASA 5550.
I have not been able to find any details on this subject which state it is or it is not possible. This will be used for Syslog logging.
We purchase a new 3945 router and a NM-1A-T3/E3 card. We would like to use the T3 funcationality so we enabled the command card type t3 1 (slot1), reboot the device.After reboot the sh ip int brief command should show the serial interfaces e.g serial1/0.In this case it doesn't, it shows the Gigi interfaces and ATM1/0 no serial interfaces.I've also tried upgrading to the latest IOS from cisco.
View 2 Replies View RelatedI have a Cisco 5510 which has remote access VPN configured.Now I have new block of IP address, is there a way I can just change the outside interface IP so that people can remote in without doing anythng else?Or if I coulds be taught to create a new one.Or best way to approcah this issue?For example: it was 67.64.x.x now I need to change to 64.44.x.x.
View 1 Replies View Relatedwe have two Cisco ASA 5510 in failover configuration.We tried to change the public IP address on the Outside interface of the primary device but it didn't works. The new IP is not reachable from Internet nor pingable from device on the same LAN.The new IP address is in the same subnet of the old IP.
From the switch on which the ASA is connected and from another Cisco PIX we can see the ARP entry. In the analysis, on the old public IP address there was a VPN site-to-site and Webvpn defined.We tried also to shut/no shut the interface and reboot the device.
(my connection is a wired cable/DSL modem btw, using a second temp connection to troubleshoot)Last night, my connection was all fine and dandy until I got up this morning. Instead of having access to it and it being set as a home network, it was set to unidentified and public and I now have no internet access on the network. I can't change the network type either, it's stuck as public.[CODE]
View 1 Replies View RelatedWe've recently shut down an interface on one of our ASA 5510s as we no longer use that service provider. The dashboard, however, still insists on showing traffic usage on this interface. How do I change the dashboard to display a more meaningful interface?
View 7 Replies View RelatedI have all the PS3 and Activision ports. What numbers go where in the router's port forwarding screen. My ISP says that the PortStart and Base Host Port should be the same numbers and the PortEnd should be the number at the end of the range (10070-10080 for ps3). I'm going with that for the PS3 TCP numbers, but don't know which numbers to put in for the PS3 UDP or the Activision TCP and UDP.
View 8 Replies View Relatedcan i change my nat type from type 3 to type 1
View 19 Replies View Relatedhow to change network type in win 7
View 4 Replies View RelatedChanging the NAT Type 3 to NAT Yupe 2 or 1 because I can't play with some of my friends on Playstation3
my router is: Cisco E4200
have listed all ports udp and tcp i have disabled UPnP i have changed mtu to 1364 and tried 1365. i have rebooted both router and modem. still no success. Cant seem to change nat type 3 to nat type 2. i am use a WRT120n wireless router
View 1 Replies View Relatedchanging my nat type to open i have tryed so many solutions and none of them worked?
View 9 Replies View RelatedI dont know or understand how to change my nat type. I have the e3000 linksys router. My ps3 is running wireless off it. I want to change form nat 3 to 2
View 1 Replies View RelatedRecently Ive been having issues with connecting to games on my PS3, Ive been trying to do things like Port Forwarding like I did on my old router but the way this router is set up is extremely different. On this router it seems there is no Port Forwarding it's now Port Triggering and it seems to require more info than Forwarding does.I should mention Im using a Router from Centurylink and I have no Admin powers, I can still go in and do things with ports but how I would change my NAT type or Port Trigger
View 1 Replies View RelatedChanging the NAT Type to open because I can't play with some of my friends on Playstation.
View 1 Replies View Relatedhow to change my nat from moderate to open so i can play xbox without any problems. But the weird thing is my nat used to be open but it changed to moderate and i have recently bought the linksys e2000 and it was open at first but not anymore.
View 9 Replies View RelatedI have my dap-1522 connected to my dir-655 in bridge mode. I was having intermitant connection problems with the dap-1522, so I updated the firmware to 1.41 for version A1. Now when I go to change the connection type to dynamic ip and save, it reverts back to static ip, which makes this thing useless for my network. Why won't it save?
View 6 Replies View RelatedI'm trying to change my NAT type on my PS3 from strict to open. My router is a WRT120N and I'm using cable internet
View 4 Replies View RelatedI'm trying to change my NAT type on my PS3 from strict to open. My router is a WRT120N and I'm using cable internet. it down so I can understand what you're saying.
View 2 Replies View RelatedSo currently I'm having issues with changing my nat type to open for my ps3. I've tried to use DMZ and port forwarding to change the nat type, but sadly I couldn't get this to work. Most the guides on the forums are for xbox's which wouldn't work for a ps3. Any handy guide to change my nat type to open for my ps3?
View 5 Replies View Relatedneed to know how to change media state from disconnected to connected
View 1 Replies View RelatedHow to change my NAT type from moderate to open for xbox 360. Belkin n450 dual band
View 1 Replies View RelatedOur ASA 5510 is running 8.0(5). We recently upgraded the license from base to security plus. By doing so the capacity of the the external port Ethernet0/0 and Ethernet0/1 should increase from the original FE to GE. But, we were still seeing 100 Mbps on our Ethernet0/0 interface. We figured that out that the provider switch is only supporting 100 Mbps which is a bottleneck for us.The provider will be upgrading there switches to 1 Gb switch.
We will have to swap the switch connections now from 100 Mbps to 1 Gb switch.What commands should we be familar ourself with?Though this will be doine in our maintenace window.All the transaltions/connections will be dropped in our production environment so we are kind of scared.
I am connecting the inside interface to an upstream switch and therefore will need to assign a static IP address to the inside address as I did below:
#sho int ip brief
Vlan1 123.123.123.123 YES manual up up
I will also use this to manage the ASA. I am having a problem with the network configuration of the inside interface as I can't ping the gateway and/or the in IP of the inside interface.Do I need to add any routes?