Cisco Firewall :: ASA5540 Dropping Packets On Large FTP Transfer

May 23, 2011

I am attempting to FTP to a remote site through a IPSEC tunnel.When I am transfering large files the ASA5540 is showing syslog errors stating "connection timeout".  What I think is happening is after about 1 hour the firewall is closing the connection control port for the FTP session and neither end is notified so eventually the transfer is stopped.What do I need to modify in the FW to accommodate these larger files?

View 1 Replies


ADVERTISEMENT

Cisco Firewall :: ASA5505 Dropping Packets

Apr 30, 2013

I am  having an issue where the ASA is dropping packets on the vlan  interfaces. I have it as a dedicated router/firewall for a 100mb connection .
 
Vlan1 is the internal networkVlan2 is the network to cable modem
 
Eth 0/1 is connected to a 2960G switch with hard coded 100mb Full  Duplex at each end, this is the inside interface. Eth 0/0 is the  connection to the cable modem, this is the outside interface, set at  auto at both ends.
 
Im getting on the vlans eg. 51253 packets dropped however network  traffic isnt impacted and everything runs fine, as well as 46532 switch  ingress policy drops.
 
Example;
 
ciscoasa# sh int vlan1Interface Vlan1 "inside", is up, line protocol is up Hardware is EtherSVI, BW 100 Mbps, DLY 100 usec MAC address 70ca.9b36.ab80, MTU 1500 IP address 10.x.x.x, subnet mask 255.255.255.0 Traffic Statistics for "inside": 43250588

[Code]......

View 1 Replies View Related

Cisco Firewall :: ASA 8.2.4(4) Seems To Be Dropping Valid TCP SYN Packets?

Feb 28, 2012

We have a setup with a MS-TMG - ASA (8.2.4(4) in routing mode) - (internal) Router - FWSM - Router - Exchange with NLB.  We have now the problem that IMAPS is not really working through this setup. It works from internal (without ASA and TMG inbetween), but not reliably through the internet. There is a rule on the ASA which permits the ports from the TMG to the Exchange NLB address.We opened a case with Microsoft and they told us that not all tcp-syn packets are received by the Exchange server which were sent by the TMG.Thus I sniffed on the ASA with a packet capture and indeed, a lot of syn packets were on the interface to the TMG, but not anymore on the interface to the internal router.This ASA also filters all other internet<->company traffic, so there's a lot of stuff running.
 
Maybe it's dropped in the ASP, or is the capture maybe not valid?Here the show asp drop:

ASA01-Internet# sh asp drop
Frame drop:  Invalid TCP Length (invalid-tcp-hdr-length)                                  1  Reverse-path verify failed (rpf-violated)                                  319  Flow is denied by configured rule (acl-drop)                            477077  First TCP packet not SYN (tcp-not-syn)                                   10212  TCP data send after FIN (tcp-data-past-fin)                                 41  TCP failed 3 way handshake (tcp-3whs-failed)                               824  TCP RST/FIN out of order (tcp-rstfin-ooo)                                 1419  TCP SEQ in SYN/SYNACK invalid (tcp-seq-syn-diff)                             6  TCP SYNACK on established conn (tcp-synack-ooo)                              1  TCP packet SEQ past window (tcp-seq-past-win)                              821  TCP invalid ACK

[code]....

View 9 Replies View Related

Cisco Firewall :: 871 - Default Class Map Is Dropping All Packets

Aug 21, 2012

I have a Cisco 871 router that used to have Access list based security. now I am trying the ZBFW for the first time.  I thought I had a pretty good program until I found all my traffic was getting dropped. This is my first stab at ZBFWs and I am a bit confused esp with the default class part.
 
The router is for my house and thus also has to have priority for gaming. I will add the gaming and voice QOS once I get it working,
 
Guest VLAN has access to 2 IP's in Data for printing. Cisco871#sh run

Building configuration...
  
Current configuration : 8005 bytes
!
version 12.4
no service pad

[Code].....

View 1 Replies View Related

Cisco Firewall :: 5510 Inspect SIP Dropping Request Message Packets

Mar 17, 2011

I have 2 ASA 5510 firewalls at 2 different sites. Both running on version 8.0.4. Users are using an Instant Messaging type of application provided by a local telco here which is able to send and receive SMS using SIP (from the packet capture that I've done).
 
When users use the IM in site A, they are able to send and receive text messages via the IM from behind the firewall. However, when the users are in site B, users are able to send out text messages but not able to receive them.
 
I noticed that when I remove "inspect sip" from site-B's global policy map, users from site-B can successfully receive text messages. I have confirmed that it is the firewall that drops the packets as I have captured the inside and outside interfaces of site-B's ASA and I can see the incoming sip "request: MESSAGE" packet on the outside interface but I do not see the packet exiting the inside interface.
 
I have cross check both firewall configurations, and I do not see anything suspicious commands relating to sip that might cause this issue. Is there any command to troubleshoot why the sip inspection is dropping the sip packets on site-B?

View 15 Replies View Related

Transfer Large Files Over Wireless LAN?

Dec 21, 2012

I have to transfer upto 50G of data over a Netgear 300 Mbps N300 router between too laptops both connected wirlessly to the same router. However, I get only 200 - 300 kbps when I transfer data? I get a faster speed when I download files off the web.

View 3 Replies View Related

Cisco :: Ping Not Working With Large Size Packets?

Jul 3, 2012

I am connecting a cisco device with huawei device. The issue is when i ping with normal size packets (56 bytes) its ok. But when i increase the packet size above 1500 it doesnot works. MTU on both size is configured as 4096. I have also checked by varying MTU size, but still the same.

View 1 Replies View Related

Connect Two Computers To Transfer Large Files?

Mar 8, 2011

I have a laptop I use at home and a mini laptop that I travel with. I record TV shows with the laptop and move them to the mini to watch them on the road.the programs are about 3 gb for a half hour show, 7 gb for an hour. I've been moving them one or two at a time on an 8 gb card, but that's kind of a pain. It takes 5 mins for each half hour show.I have a wireless home network, but that takes an hour to move one half hour show.Is there a faster way to move the files from one computer to another? Like ethernet cards or something?

ETA: I have windows 7 on both computers.

View 1 Replies View Related

Failing To Transfer Large Files Over Network?

Nov 24, 2011

I'm trying to transfer files from my wired desktop to my wireless laptop, and smaller files seem to transfer okay. Whenever I try to transfer a really large file, however, the internet and connectivity totally drops on my desktop (which is giving the file) and causes the laptop to lose the file. The desktop computer stays offline for about 1-2 minutes afterward before it either starts up again on its own or I reset the network adapter. I suppose it's important to note as well that the file transfer can fail at the very beginning, in the middle, or even at the very end, but my desktop computer always loses its connection whenever the interruption happens... but sometimes it can successfully get almost all the way through the file transferI tried following some of the steps in this case to confirm that I can ping and do all that jazz to my laptop and all of the services are running, since our problems seem similar. I've disabled all firewalls as well. However, since one computer is actually wired to the router, I don't think the solution will be quite the same

View 13 Replies View Related

WRT54GL - Can't Transfer Large Files Over Network

Feb 16, 2011

Router: Linksys WRT54GL
Main PC wired
HTPC Wireless
Win7

I am trying to transfer some blu-ray rips from the Main PC (wired) to the HTPC (wireless), but after 20-30 minutes it give me this error message and it can no longer locate the HTPC. i made sure the HTPC didn't so to "sleep" mode..

Something wrong with my home network or is it time to get a new router/adapter? everything else seems to work fine, except trying to transfer these huge files (10GB-20GB).

View 12 Replies View Related

WRT150-N - Why Can't Transfer Large Photos Across Wireless Network

Dec 28, 2011

I've got a home network running on a Linksys WRT150-N router. The network consists of 2 desktops running Windows XP SP3, and a laptop running Windows 7. I am able to transfer various files without a problem between and among all machines, EXCEPT when those files are beyond a certain size (less than 1 MB or so transfers fine). Most of my photos are in the 2 MB - 3 MB range, so I have to run around like an idiot with a thumb drive to transfer them.

Is there anything I can adjust on my router or for my network settings that will allow me to share larger files?

Additional Details The error message I get is different for Windows 7 or XP. On the remote XP machine, it says "Cannot copy filename: Access is denied. Make sure the disk is not full or write-protected, and that the file is not currently in use." Obviously, none of those conditions is true.

More random symptoms:

It seems that the problem is limited to JPG files, and appears to be affecting only the vast repository where I keep all my photos. I've got all my photos stored in a main directory, then in sub-directories by Year, then by Date. e.g. PHOTOS 2011 2011_12_25

Moreover, this problem does NOT appear to have much to do with file size. Some large files will copy, while others will not.

It's very random. Some sub-folders are filled with readable pictures, while others are unreadable. But this follows no discernible pattern based on file date -- and they were all taken with the same camera. Smaller files seem to always be readable, even when larger ones in the same directory are.

View 6 Replies View Related

Transfer Large Files Over A TP-Link 340G Mapped Network Drive Get Corrupted?

Feb 17, 2011

I have a Gaming Computer, with a 2x2TB RAID-1 setup, which I use to store .iso files ripped off my game's / movie's disks..Most of the time I'm on my laptop, I have set up a Network Drive to this RAID-1 setup, but when I try to transfer files from the Gaming Computer to my laptop via a network connection, either by wireless G, Ethernet 100mbps, or Ethernet 1gbps, my files get corrupted, this usually happens to larger files e.g over 1GB..But when I transfer the same files to my external hard-drive the files work properly....My computers is networked by a TP-Link 340G....

View 4 Replies View Related

Wireless Internet Connects But Doesn't Transfer Packets

Nov 30, 2011

As the topic states, the wireless card finds the signal without issues, but then does not transfer any packets after it connects. Only one computer is having this issue, all others connect perfectly fine. Also, there was no significant change to the computer recently, the problem seems to have sprung about randomly.

[code]...

View 8 Replies View Related

Cisco WAN :: 3945e Udp Packets Are Dropping

Dec 13, 2012

I have a NAT setup. Some of my udp packets are dropping. How to find more about the NAT to find whether it missed anything or not. the router is 3945e. [code]

View 3 Replies View Related

Cisco VPN :: VPN To Juniper ISG 1000 Dropping Packets

Aug 1, 2012

I have ASA 5510 with 8.4 connected to ISG 1000, when traffic is passing the VPN tunnel is working fine, when the traffic stops, ASA will drop the packet but the VPN tunnel on ISG still up .When new traffic started from ISG side, it will drop, as the tunnel is not up on ASA side.

View 2 Replies View Related

Cisco WAN :: 800 Router Dropping SMTP Packets

May 29, 2012

We have a cisco 800 series router between the internal network and the WAN. the problem is we are unable to receive some of our mail due to dropped packets by our router. the conversation between the two servers stops at the point were our server responds with the command 250 2.1.5 user@mydomain.com | 354 Start mail input; end with . i was able to trace the packet, using Packet Export, on the internal interface but not on the external interface. Also i have noticed that the external interface has about 160,000 unknown protocol drops while the internal interface has 0.

Is there anyway to find out way the external interface is dropping the packets.

View 4 Replies View Related

Cisco Switches :: SG300 Is Dropping Packets?

Apr 10, 2012

We have a customer who we sent to Cisco to replace some aging Dell switches. They purchased 5 SG300-52’s for 2 different networks. Their production LAN has 2 “live” switches and 1 spare. The 2nd, a development LAN has 1 switch and 1 spare. Their primary production SG300-52 has GE1-8 VLAN’d off as VLAN2 for public IPs. The untrusted (WAN) interfaces of 2 x ASA-5510’s, 1 x ASA-5505, and 2 x RV082 v2’s are connected to GE2-6. GE1 is the uplink to the co-location center’s Cisco switches. GE7 & 8 are spare ports. Each SG and device port is hard coded for 100/Full.
 
One of the ASA-5510’s and the ASA-5505 maintain a site-to-site VPN (the development LAN used to be in a different facility hence the VPN). Recently the developers have stated the performance is horrible. I noticed ping traffic loss from PCs on the dev side to servers on the production side in the order of 20-30%. I assumed it was a VPN issue so I opened a ticket with Enterprise TAC (all the ASAs and the SGs have either SmartNet or extended support contracts). TAC determined the problem happened even if you ping from inside the ASA to the untrusted side of the other ASA thus eliminating the VPN as the culprit.
 
The 2nd ASA-5510 has the AIP module and was not even live until this weekend. Turning it up and giving it a basic config returned the same results. #ping x.x.x.x repeat 100 will drop 20-40 packets. I have no security enabled on the SGs and even tried using the spare SG300-52 this weekend in place of their primary with the same result. I’m to the point of returning one of the Dell switches to production, but this cannot be a good sign. I’m also a bit frustrated that I’ve yet to figure out how to get Cisco Enterprise to speak with Cisco Small Business on this. The customer has over $10k invested in Cisco equipment and Cisco isn’t jumping in to figure this out.
 
The latest rep wants a packet capture from the SG300’s VLAN2 but there are no PCs there to do this with and the manual doesn’t even talk about doing this. How we can do this as well as get the 2 divisions working together to fix this? BTW, the RV082’s exhibit the SAME exact problem. I can ping from ANY device on VLAN2 to any other device and drop packets. Copying a simple 1MB file over the VPN can take minutes where it should take 1 second. I can reproduce this for 24/7.

View 8 Replies View Related

Cisco Routers :: RV082 Dropping Packets?

Feb 14, 2013

It appears we might have an issue with our RV082 (v4.2.1.02) dropping packets during the teardown of many TCP conversations.  I have attached two packet captures of what I believe is the same conversation.  One is from outside the router (Wireshark using an Ethernet Tap) and the other is from the client inside the router (SLES11SP2 running TCPDump).  These are both very small captures 9 packets and 18 packets and I'm hoping it will identify the problem.
 
It appears that the RV082 is prematurely closing the natted port used to communicate with the host outside the network.  The host sends a FIN, ACK packet, to which the client responds with an ACK,  However, when the client then sends his FIN,ACK sequence, it never makes it outside the router.  The client sends a total of 9 FIN,ACKs trying to contact the outside server, but none of those appear to make it through the router.
 
Is the router slamming the door prematurely?  (I've been fighting with this problem for 3 weeks now!)
 
Inside Capture:
----------------------
No.     Time                       Source                Destination           Protocol Length Info
1 2013-02-13 19:32:37.827942 192.168.1.45          38.113.116.214        TCP      76     35975 > http [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=635644783 TSecr=0 WS=128

[Code].....

View 19 Replies View Related

Cisco VPN :: Srp527 VPN Tunnel Dropping Packets Intermittently

Dec 12, 2012

We have a Cisco ASA and recently purchased a cisco small business srp527 router.  It is connected to our ADSL2 connection and is working fine.  I have configured the device with an ipsec tunnel using an ike profile and the tunnel is created successfully with packets traversing the tunnel.  However packets are being dropped intermittently, with no cause.  The link is currently not being utilised, there is no load on the network however when I ping Google and any address subject to the rules of the tunnel i notice that a single packet is dropped every now and then.

View 0 Replies View Related

Cisco WAN :: 1811- MTU 1500 - Router Dropping Certain Packets

Dec 15, 2011

I seem to be having an issue where certain very packets are being dropped/lost by my office router. The reproducible situation is, when I attempt a DNS zone transfer from my linux bind DNS server (A.A.A.A) to any server on my network behind NAT (Y.Y.Y.Y) the first packet (Seq 1) of the response is lost. The client making the query asks for first packet (Seq 1) to be resent, and the DNS server attempts to resend it repeatedly, but those are lost too.

View 10 Replies View Related

Cisco Switching/Routing :: Why C2960 Is Dropping Packets

Dec 26, 2012

We have a customer who uses about 20 x c2960's switches for access layer and 2 x c3560e for distribution layer. C2960's uses C2960-LANLITEK9-M , Version 12.2(58)SE1. Everything was working fine. Now we got information, that sometimes there are problems with connectivity. Customer tries to reach internet.
 
SW11#sh int fa0/18       
FastEthernet0/18 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is e8ba.806a.4412 (bia e8ba.806a.4412)

[Code].....

View 7 Replies View Related

Cisco WAN :: Dropping Scavenger Packets On ASR 9000 During Congestion

Aug 6, 2012

I am trying to find a solution using modular QOS when there is congestion in circuit we drop packets with WRED which are marked with a DSCP value of say AF21. I can drop those traffic completely in case of congestion.  I was thinking to allocate 100% bandiwth to rest of the traffic.

View 1 Replies View Related

D-Link DIR-655 :: Dropping Packets While Gaming On Computer

Mar 27, 2012

I bought a DIR-655 a less than a year ago on amazon, and it was working great up until about 4 weeks ago. Ive noticed that it has been dropping alot of packets while I am gaming on my computer. I would run about 95-98 ping usually and now it jitters every 5-10 mins or so from 95-98 to up to 500. It is really troublesome during games and I dont know what to do. Ive tried disabling QoS and still nothing. I run on wireless G and N with auto 20/40 mhz. Standard WPA(personal) and it was running absolutely great until now. I know its the wireless because I have hardwired it into my laptop, both from the router and just the modem itself with no problems whatsoever. I dont know what to do about it.

View 3 Replies View Related

Cisco Application :: ACE Module A2(3.5) Is Dropping Packets And Closing Connection

Jul 26, 2012

I have a ACE module A2(3.5) installed, I am having a connectivity problem between two servers in my network. I have captured some traffic on different points in my network and from capture it seems like the problem is with this ACE module or somehow it is closing the connection.

View 6 Replies View Related

Linksys Wireless Router :: E3000 Dropping Packets On Any Channel But 1

Jul 24, 2012

My E3000 has about 60% packet loss if the channel selected is anything other than 1.  I can't enable 5GHz or even 40mhz 2.4GHz channels without dropping 60% packets.

View 9 Replies View Related

Cisco Switching/Routing :: 3750v2 DHCP Snooping Not Working Dropping Packets

Jan 9, 2013

I recently installed DHCP snooping on a 3750v2 switch (Version 12.2(55)SE4) and configured the uplink(Po2) as a trusted port. The problem is that clients cannot receive an IP address. When I disable DHCP snooping it is working properly. DHCP snooping is configured correctly but I don't have an idea how to resolve it. [code]I tested the solution on the same kind of hardware switch and firmware and it worked out fine. What is causing the clients not to receive an IP address from the DHCP server?

View 10 Replies View Related

Cisco Switching/Routing :: 3750X Switches Dropping Packets On Uplink Interface?

May 9, 2013

We have a remote site that is using 3750X switches as layer 2 switches back to our home site.  The uplink port is showing dropped packets but the utilization on the link is never about 10%.  We have a 100Mb circuit to this site.  Our speed tests and iperf tests are not showing any issues that we can see.  However the port is still droping packets.  It is not dropping at a high rate but they are dropping.          
  
switch#sh platform port-asic stats drop gi1/1/4
  Interface Gi1/1/4 TxQueue Drop Statistics    Queue 0      Weight 0 Frames 0      Weight 1 Frames 0      Weight 2 Frames 0    Queue 1      Weight 0 Frames 52876      Weight 1 Frames 2      Weight 2 Frames 0    Queue 2      Weight 0 Frames 0      Weight 1 Frames 0      Weight 2 Frames 0    Queue 3      Weight 0 Frames 0      Weight 1 Frames 0      Weight 2 Frames 1330874    Queue 4      Weight 0 Frames 0      Weight 1 Frames 0      Weight 2 Frames 0    Queue 5      Weight 0 Frames 0      Weight 1 Frames 0      Weight 2 Frames 0    Queue 6      Weight 0 Frames 0      Weight 1 Frames 0      Weight 2 Frames 0    Queue 7      Weight 0 Frames 0      Weight 1 Frames 0      Weight 2 Frames 0switch#
         
Is there a way to capture these dropped packets to see what they are?  We do have VOIP phones at the site and are using Qos.

View 5 Replies View Related

Cisco WAN :: 3750 And 4507 / 1Gbps Link / Sweep Ping Dropping Packets?

Dec 29, 2010

We are testing a new 1Gbps WAN circuit between 2 sites. We have cisco 3750 and 4507 on each end. Every time we run extended ping sweep ranging from 36 to 18024 bytes the packets are being dropped randomly once the size goes above 1500 bytes. Our ISP claims Demark to Demark test are clean and they don't want to acknowledge the problem, they blame our switches. To prove the problem is not on our end we've put different switches at each end, still facing the same issue. Ping success rate is around 98 to 99 percent.

View 11 Replies View Related

Linksys Wireless Router :: WRT120n Dropping Incoming Fragmented IP Packets?

Oct 13, 2011

I am trying to use my WRT120n as access device  for an IP Centrex service using SIP protocol. My SIP phone is located right behind the router.My problem is sometimes the router is dropping incoming calls because signalling packets are fragmented at IP level. So I cannot receive those calls.Is there a way to enable the router to accept these packets?

View 9 Replies View Related

Cisco Firewall :: ASA5540 - EAL4 Transparent Firewall Config

Mar 14, 2011

I am configuring an ASA5540 firewall for a client, only difference to usual being that it is to run in Transparent mode. I have looked through for an EAL4 transparent firewall config guide but found nothing and therefore assumed that the usual one would be used.The clients security bod has now come back and insisted MAC filtering should be used but I can find no reference of this anywhere. Does MAC filtering is required to make a transparent box EAL4 compliant and if so where I can find documentation supporting this?

View 1 Replies View Related

Cisco Firewall :: VPN Between ASA5540 And Router

Sep 10, 2008

I had a working vpn configuration between a local and a remote router; the remote router is not under my administration.Now I moved the vpn termination from my side to an ASA5540 software version 8.0(3). The tunnel is up but there is no reachability. The "show crypto ipsec sa" on the ASA shows encapsulated packets but NO decapsulated packets! Routing and no_nat are properly configured.

View 28 Replies View Related

Cisco Firewall :: K-value Mismatch With EIGRP On ASA5540

Mar 7, 2011

I have an ASA- 5585X (v.8.2.4) directly connected to an upstream 6509, which is running EIGRP. I configured the ASA for EIGRP with same AS# and network numbers and no auto-summary.   Here are the log messages I got:
 
Mar  8 15:11:08: %PIM-5-NBRCHG: neighbor 164.72.178.28 UP on interface Vlan150 (vrf default) Mar  8 15:11:08: %PIM-5-DRCHG: DR change from neighbor 0.0.0.0 to 164.72.178.28 on interface Vlan150 (vrf default)
Mar  8 15:11:11: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 164.72.178.28 (Vlan150) isup: new adjacencyMar  8 16:16:08: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 164.72.178.25 (Vlan150) isup: new adjacency
Mar  8 16:18:54: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 164.72.178.25 (Vlan150) is down: K-value mismatch
 
I lost my SSH connection to the upstream 6509 and couldn't get it back. Luckily I didn't lose my ASDM connection to the ASA, so I disabled EIGRP and went to look at the logs on the 6509.
 
What causes a K-value mismatch, and how to I rectify the situation?

View 1 Replies View Related

Cisco Firewall :: ASA5540 Configured With Standby IP

Aug 6, 2012

I have this 2x ASA5540 firewall and notice the it is configured with a standby ip. The firewall is run in Active/Passive mode.However, the standby ip of this firewall is not point to the secondary firewall and vice versa for the primary firewall. [code]

1) May i know how is this configuration valid in the first place? I have checked through the configuration. None of the configuration is related to this ip address.
 
2) Can we remove this standby ip address on both the firewall and correct to the correct primary and seconadary ip address in both firewall?
 
3) We tried to use this ip address but cannot be used ? Is it related to the configuration of the standby ip address.Do note that the ping to this ip address x.x.x.120 is unreachable.

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved