Cisco Firewall :: ASA 5550 Hangs At Booting System
Feb 4, 2010When I try to boot my ASA5550 it hangs at "booting system please wait". I have tried to reseting the ASA but this doesn't work. what to try as I cannot get to the rommon.
View 9 Replies
ADVERTISEMENT
Cisco Firewall :: ASA 5550 Hangs On Booting System And Stays There
Jun 16, 2011I've a Cisco 5550 which hangs on powering up and stays at " Booting System, please wait..." forever and it has a flashing green Status LED.
The steps I've taken so far are:
1. Consoled with a different computer and tried to send the break signals (didn't work)
2. Open up the unit tried to remove the RAM's and reseated them again.
3. Taken out the CMOS battery on the board and replaced it with the new one (no luck still)
What is the next step, or shall I assume that the unit is dead.
Cisco Firewall :: ASA 5550 Inside Interface Hangs
Apr 24, 2012the inside interface on our primary ASA seemed to "hang". It dropped all the packets it received. Because the interface didnt go down, failover didn't happen. Device's info;
-Cisco Adaptive Security Appliance Software Version 8.2(3)
-Device Manager Version 6.3(3)
-Hardware: ASA5550, 4096 MB RAM, CPU Pentium 4 3000 MHz
-Internal ATA Compact Flash, 256MB
-BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
I attached a capture picture shows that traffic didnt go to the roof when the issue happened. Why the interface would "freeze" randomly?
Cisco WAN :: 1841 Router Hangs Or Not Booting Up Properly
Jan 1, 2011I have Cisco 1841 Router with no WIC cards and USB.
Image is ipbase and on the flash. When it boots it gives the error and hangs - I changed the register value to 0x2142 but no change happened.
Following are the capture from the router .
System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Technical Support: [URL] (c) 2006 by cisco Systems, Inc.
Copyright
[Code]......
Random System Hangs Caused By Wifi Adapter
Nov 1, 2012Two years ago, a lightning strike fried my ADSL router and LAN port on the motherboard (ASUS A7V8X-X) of my now very old system. After that, I bought a Wi-Fi USB adapter (AirLive WL1600-USB) and disabled the fried LAN port. Since that moment, my computer kept freezing totally randomly for the past two years - it didn't matter whether I run a dozen of programs or simply leave the system alone. First I didn't know what's causing those freezes, until a week ago. You see, we were forced to cancel our ADSL account for four months, so I haven't used that Wi-Fi adapter for the entire summer (I disconnected it and uninstalled its drivers). During that time - not a single freeze for four months, no matter how great the system load or temperature. A couple of weeks ago, we activated our ADSL account again, so I plugged the Wi-Fi adapter in and installed its drivers - and the freezes started again.
View 3 Replies View RelatedLinksys Wireless Router :: X1000- System Hangs Up After 4 Days Of Runtime
Feb 12, 2013recently i bought a x1000 for my home network. I use the x1000 as router an wireless accessPoint between my WAN internet uplink an my home network...yesterday the router hang up completely. internet stoppp working. so i tried to access to x1000 to check if PPPoE connection was still active. But it did not load the webinterface. I tried to connect over WLAN and LAN. Both not working!
View 7 Replies View RelatedCisco Firewall :: ASA 5505 Firewall Booting
Jan 6, 2013when i am booting ASA firewall i am getting the following error.
<0>Kernel panic - not syncing: Attempted to kill init! and it stops and will not work. check below the whole log file
how can i solve this issue?
Log file:
Evaluating BIOS Options ...Launch BIOS Extension to setup ROMMON
Cisco Systems ROMMON Version (1.0(12)11) #4: Thu May 1 14:50:05 PDT 2008
Platform ASA5505
Use BREAK or ESC to interrupt boot.Use SPACE to begin boot immediately.
Launching BootLoader...Boot configuration file contains 1 entry.
[Code]...
Cisco Firewall :: ASA 5510 Not Booting?
Nov 12, 2012i have a ASA 5510 that gets the following error when trying to boot:-
<0> kernel panic - not syncing: Attempted to kill init!
Cisco Firewall :: ASA 5510 - Csc Module Hangs Up
Aug 15, 2011As i'm facing the issue with Cisco CSC module installed on ASA 5510, It hangs up and doesnt work sometime, so it is bypassing all the traffic without inspection through CSC module. After restarting ASA 5510 box, it works fine as it used to work. Now, My question is how can i refresh the module again without interrupting the ASA box/ and how can i avoid this problem forever? Because i cant interrupt the daily work due to this module problem by restarting the box again and again.
View 1 Replies View RelatedCisco Firewall :: PIX 515E Stop Booting Up?
Sep 18, 2011I have the following Pix 515E Firewall, that has been working good for a few years. But suddenly, the Pix stop booting up. The only thing that is happening is the power and network traffic led flashes and the active led is off. So my question is that is this symptom a hardware or software problem and is it fixable with either new parts; or is my firewall dead. I suspect that it is a hardware problem since the active led doesn't light up. I cann't even enter the ROM Moniter mode.
View 7 Replies View RelatedCisco Firewall :: ASA 5520 Hangs During Boot Process
May 8, 2011I have a problem getting my ASA 5520 boot properly. I first though of a flash problem and did a flash erase in ROMMON, then it brought error 15 during boot (No images found in / Error 15: File not found). I then TFTPied and image from Rommon, when done loading the image and start booting, the system hangs and nothing else. Attached is the screen I got on my console during boot up. BTW, the system was in the same state before I undertook any of the above actions. I don't have a service contract, so I can't contact TAC.
View 3 Replies View RelatedCisco Firewall :: ASA 5505 Not Booting Stuck On Error
Jan 16, 2011I am get stuck on this issue, i have asa 5505 which was working more than 4 months, after power recycle the firewall is not booting now, it gives the below error. i have tried to upload the new image however the story is same.
i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x40, address = 26 byte count = 1. Reason: I2C_UNPOPULATED_ERROR.
Cisco Firewall :: 5550 Firewall Set Up For Redundant Purpose
Mar 3, 2011i two 5550 firewall set up for redundance purpose . in failover we define two different ip add one for primary and one for secondary .interface Ethernet0/0 nameif outside security-level 0 ip address xxxx.0.0.0.1 255.255.255.0 standby xxxx.0.0.2!interface Ethernet1/0 nameif inside security-level 100 ip address 10.0.0.12 255.255.255.0 standby 10.0.0.11.default gateway for host will be 10.0.0.12 (primary fw address) however in case of failover , the secondary fw will be up with ip address that was assigned for primary .in this case the secondary ip add 10.0.0.11 is actually nerver used? similarly do i need to have two public ip address for outside (one for primary and one for secondary ) ? or in case if primary fails the secondary comes onlie and take the ip of primary fw . hence i only need to purchase just one ip address.
View 6 Replies View RelatedCisco Firewall :: 5550 Firewall Syslog Message
Feb 22, 2013I have cisco 5550 Firewall, one messages appear in syslog server from Firewall, (warning) i want to stop this message from appearing syslog traps.
View 2 Replies View RelatedCisco Firewall :: Secondary ASA 5550 Firewall Getting Down Automatically?
Apr 17, 2011I am having two ASA 5550 firewall running in active/standby mode. With in last two months our secondary firewall got down automatically 3 times. Firewall is running with IOS version 7.1.2. how to proceed further troubleshooting because there are not any logs on firewall.
View 3 Replies View RelatedCisco Firewall :: ASA 5520 - Copying Files To Flash Hangs / Reboots
Sep 8, 2011When I use ASDM or the CLI to copy (ftp) files from my management station to flash on my ASA5520. I get to 99% and then the gui or cli window hangs.
The ASA itself completely freezes i.e. no traffic in or out until I kill the transfer window and then it may reboot
[and yes, there is more than enough free space on the flash file system for the files]
ASA5520 V8.2(3) / ASDM V6.4(5)
Cisco Firewall :: PIX535 Booting With (Failed To Enable Checksum Capability)
Oct 18, 2011I recently bought one Pix 535 from ebay, it comes with software version 7.22 and I upgraded it to 8.0.4, during booting, this message always comes up: "Failed to enable checksum capability", like the following:
//output copy
------------------------------------------------------------------------------+| System BIOS Configuration, (C) 2000 General Software, Inc. |+---------------------------------------+--------------------------------------+| System CPU : Pentium III | Low Memory : 637KB || Coprocessor : Enabled | Extended Memory : 1023MB || Embedded BIOS Date : 11/28/00 | Serial Ports 1-2 : 03F8 02F8 |+---------------------------------------+--------------------------------------+
Cisco Secure PIX Firewall BIOS (4.1) #0: Tue Dec 5 17:35:26 PST 2000Platform PIX-535Flash=i28F640J5 @ 0x300
Use BREAK or ESC to interrupt flash boot.Use SPACE to begin flash boot immediately.Reading 123392 bytes of image from flash.
[code]....
I did copy startup-config from my existing Pix515E (8.0.4) to this PIX535, I did NOT pay attention if I had the same "failed to enable checksum capability" before image upgrade or startup-config change?how I can get over with it?
Cisco Firewall :: Downloading From Apple Mountain Lion App Store Hangs 2901 Router
Jul 25, 2012I have a repating 2901 router failure when people attempt to download Apple Mac OS X Moutnain Lion upgrade from App Store.
The 2901 just hangs following getting a series of ZBFW packet drop failures:
001928: Jul 26 22:37:18.783 UTC: %APPFW-4-HTTP_PROTOCOL_VIOLATION: HTTP protocol violation (0) detected - session 192.168.223.109:49310 184.25.254.67:80 on zone-pair ZP-PRIVATE-OUT class ccp-protocol-http appl-class ccp-http-blockparam
[Code].....
Cisco Firewall :: ASA 5550 Two ACL From Outside To Inside
May 13, 2011I have ASA5550 ruuning Version 8.3(1) with inside and outside interfaces as below [code] On the inside : I have a server (10.20.10.36) that need to be accessed from an outside host (Y.Y.131.34) , so I have the below NAT/ACL rules. [code] is it right that I have to add two ACL entry for outside host to the NATed IP of the inside server , then again add another ACL entry from the same outside host to the private IP of my inside server o get this communication done?
View 7 Replies View RelatedCisco Firewall :: ASA 5550 With IOS 8.0(2) Crashes
Jan 31, 2012we had just installed our ASA 5550 with IOS 8.0(2) a couple of week ago.
2 interfaces from each slot are being used ie 0/0 for Branch users comming via MPLS cloud , 0/1 for internal LAN users comming form Core Switch & 1/0 for Server farm LAN , 1/1 for Internet (outside)
the first 3 interface are considered inside with sec set at 100 while the 1/1 is outside with sec at 0.
Last night it suddenly started dropping all connections without any warning or any noticible log form the ASDM logging.
the connection drop would happen for 2 - 3 minutes and would work fine for the next 15 minutes or so..
after conencting the console , we found out that the IOS would suddelny go abrupt and show this display ...
TP-ASA(config)# TP-ASA(config)# TP-ASA(config)# Thread Name: Dispatch UnitPage fault: Address not mapped vector 0x0000000e edi 0x24d184b0 esi 0x0000000d ebp 0x1c6ceaf8 esp 0x1c6ceae0 ebx 0x09e965e0 edx
[Code]....
Cisco Firewall :: 5550 - How To Do NAT Exemption With V8.4
Oct 4, 2011I have looked in the books I have (Cisco ASA, PIX and FWSM; ASA 8.0) and googled a good bit but can't seem to find any specific mention of how to do NAT exemption with v8.4. It seems NAT exemption (NAT 0 access-list) was deprecated. Using ASDM, there's no corresponding menu item for this that is obvious.
We have public addresses inside the ASA and want to allow in/outbound connections using these IP's without NAT. The ASA is a 5550.
Cisco Firewall :: ASA 5550 IPv6 Compatibility?
May 21, 2013I need to understand if ASA 5550 ver 8.2(1) is comptible with IPv6, if not what is the upgrade path to make it IPv6 compatible. The requirement is dual stack of IPv4 and IPv6 should run in the same HA cluster and later will shift IPv6 completely.
The existing infrastructure is equipped with ASA with HA Active/Active mode. The command output for required details are attached here in txt mode.
Cisco Firewall :: High CPU Utilization On ASA 5550?
Mar 10, 2013I have Active Standby ASA5550 setup with VPN premium license. A few days back we had a requirement of SSL VPN connection for and we got a temporary from Cisco for same, this license expired and the ASA reverted to it's original license. 3 4 days after this we saw a sudden increase in CPU utilization (upto 90% + -5%) on the ASA during production hours but were not able to figure out the reason, in order to restore the services we failovered the firewall to secondary and everything worked fine. We were suspecting one of the following but there were no logs for any of this
1. The ASA hardware was haivng problem
2. Some client was doing a DoS attack to bring down the ASA (no logs for this as well).
We took a downtime to look further by failovering the ASA back to primary and it worked fine without any issues ruling out the 1st option. We also came across a licesing doc [URL]
Downgrading any license (for example, going from 10 contexts to 2 contexts).
# Note If a temporary license expires, and the permanent license is a downgrade, then you do not need to immediately reload the security appliance; the next time you reload, the permanent license is restored.
As per this doc, sooner or later a restart was required on the ASA. We restarted secondary ASA and everthing was fine but when we restarted the primary ASA by swtiching over to secondary some of the server (not all) in the DMZ stopped working (even ICMP unreachable) and only came back to normal when the primary ASA was restored and working fine (with failover).
The reboot was done by shuting down the physical link between the Core switch and ASA inside individually.
I am not sure what could be the issue that the servers in the DMZ wen unreachable.
Cisco Firewall :: ASA 5550 - Two Different Syslogs Servers?
Aug 9, 2010In my Cisco ASA 5550, I need to set two different syslogs servers, and I need to send the system logs to the first one (only admins login/logout), and the traffic logs and all the rest (informational level) to the second one. Do you know if is it possible or not and, if yes, how to configure it?
View 6 Replies View RelatedCisco Firewall :: ASA 5550 Active / Standby With SSL VPN
Jun 12, 2011I would like to work with two ASA's 5550 in HA (Acitve-Standby) like perimetral firewalls and also work with another ASA 5540 but like a SSL VPN Remote Access to end users.Which will be the best topology to this scenary?. Perhaps i need to put the ASA 5540 SSL VPN together with the ASA's in HA directly in a port.
View 1 Replies View RelatedCisco Firewall :: How Many Outside Interfaces Are Allowed On ASA 5550
Apr 26, 2011I am using an ASA5550 for a complex secure network that has at least six "outside" networks. Each "outside" network is assigned to a specific port each set at level "0". I also have a DMZ, set to level "50". I am having difficulty with passing traffic from a host in the DMZ to all but one of the "outside" networks. Is there a limit to the number of "outside" interfaces? I will provide a redacted config file as soon as possible.
View 3 Replies View RelatedCisco Firewall :: ASA 5550 - URL Filtering Using Web Sense?
May 10, 2013i have Cisco ASA 5550 and i want to do URL filtering using Web sense,can i use Micorsoft Forefront TMG2010 as websense server to do that?
the idea is to filter the HTTP & HTTPS URLs,if the Micorsoft Forefront TMG2010 is not suitable,refer to suitable Websense URL filtering server?
Cisco Firewall :: ASA 5550 Sending Reset With TTL Of 255
Oct 3, 2011I have the following problem, right now we have an ASA 5550 connected to the client´s side. A reset is being received on the client´s side, but when we run the sniffers on both extremes of the network, we can see that the reset is not being sent by the server´s side.
We have narrowed it down to the 5550 ASA, but have found no bug that matches the description.
The characateristics of the reset packet are the following:
- It is the only packet with a TTL of 255.
- Both server and client have very different window sizes, and the reset packet even though has the server´s ip and port as source of the packet, it has the client´s window size.
- It has a correct ack number.
-Before the reset is received, there are a couple of retransmissions of the last packet sent.
- We´re handling a VPN tunnel between both servers.
Cisco Firewall :: Does 5550 Contains Built In CSC / IPS Modules
Feb 7, 2011i m looking for asa 5550 product.Part # ASA5550-BUN-K9 - Cisco ASA 5550 Appliance with SW, HA, 8GE+1FE, 3DES/AES
1) does 5550 contains built in CSC / IPS modules.? why i m asking because the "quick refrence guide " indicates that expansion slots are not available.
2) can asa 5550 natively protects natively against networks attacks against virus / worms etc with out CSC OR IPS MODULE.?
Cisco Firewall :: ASA 5550 To ASA 5555-X Migration
Apr 23, 2013I am about to carry out a migration from ASA 5550 to ASA 5555-X, however I cannot find any detailed document or reliable tool for this migration.
View 4 Replies View RelatedCisco Firewall :: ASA 5550 Cannot Logon With ADSM
May 22, 2012I cannot logon with adsm anymore.when I run adsm, I type in my pw, and the screen keeps displaying "contacting the device". No timeout, just stays this way.I've updated the java version, no luck.I can connect with SSH with no problem. device = asa5550, 8.2(1) asdm 6.2(1) [code]
notice that there is no "with cookie-based authentication" here -- is this relevant?
Rebooting the device is not really an option.
Cisco Firewall :: ASA 5550 Flags E Connection
May 2, 2012I have an issue were thousands of connections on the ASA are marked with flags E, below is a visual of the connection. Any ideas what could cause this marking? Also, I can't grasp what the meaing of an outside back connection (ie flags E).
TCP DMZ:X.X.X.X/139 Inside:X.X.X.X/1828, flags E, idle 9h37m, uptime 9h37m, timeout 15s, bytes 0
Cisco Firewall :: Link Aggregation On ASA 5550?
Jan 10, 2011i'm installing a Firewall Cisco ASA 5550 with 8 Gigabit interfaces.
I have installed firmware 8.2.3.
Is it possible to make link aggregation on ASA to have more bandwith?