Cisco Firewall :: Dropping Important Connections On 887VAMG?
Mar 5, 2012
I've got a problem on 887VAMG router. It drops important connections. As customer wants to have a firewall I created ACL and ip inspect rules ,but the router drops their connections to cloud and some websites are not opening. So I removed ACL and most ip inspect rules just to test if it effects that. And left only ip inspect http urlfilter. But still they have those problems, so I'm really stuck how to configure that firewall. The below some dropping connection review:
%FW-6-DROP_PKT: Dropping tcp session due to RST inside current window with ip ident 13968 tcpflags 0x5014 seq.no 1629693318 ack 1687676045
000049: Mar 6 11:49:21.324: %FW-6-DROP_PKT: Dropping http session <ip>:1766 69.171.242.12:80 with ip ident 26247 tcpflags 0x5018 seq.no 264144210 ack 642133125
000050: Mar 6 11:50:00.774: %FW-6-DROP_PKT: Dropping http session <ip>:4708 69.171.242.12:80 with ip ident 2425 tcpflags 0x5018 seq.no 3819869211 ack 1862176018
000051: Mar 6 11:50:52.515: %FW-6-DROP_PKT: Dropping http session <ip>:2599 173.194.34.90:80 due to RST inside current window with ip ident 22909 tcpflags 0x5014 seq.no 899975979 ack 92642430
6Jun 24 201118:08:44209.85.213.5458623174.141.xx.xx25Deny TCP (no connection) from 209.85.213.54/58623 to 174.141.xx.xx/25 flags RST on interface outside I am getting this error in my asdm logs whenever I try to send an email with an attachment. Regular email go through fine. If I send a 1mb file it seems to go through after several attempts. If I send a 5mb file it might go through anywhere between 4-15 hours. It doesn't matter where I send from. Sometimes it will say ACK or RST ACK on interface instead of RST. The ASA is running 8.3.1 code. I have tried inspect ESMTP and removed it, tried sysopt connection timewait. I am at a loss.
Trying to add inside routes on an ASA 5505 to point traffic to another gateway for other connected networks is resulting in the following error 6Sep 16200 819:13:5810601510.184.236.1265003810.170.54.1823389Deny TCP (no connection) from 10.184.236.126/50038 to 10.170.54.182/3389 flags RST on interface insideI believe the problem is due to the Asymetric tcp connection and the ASA is dropping the connection because it only see one half of the traffic.Is there a way we can stop the firewall dropping the TCP connections on the inside interface? i've tried removing the threat managment which didnt work.Annoying thing is were putting the ASA 5505's in to replace old Watchguard soho firewalls only the watchguards forwarded the traffic no problem at all.
I currently have the default inspection engine configured in my firewall to inspect http traffic. I noticed that the ASA will drop packets when visting legitimate websites. I've tried googling for a workaround but have been unsucsselful. How can I exclude some websites or IP's from being affected by the inspection engine?
A lot of the time webpages hang up and don't load.. errors out etc.. I keep unplugging the router and plugging it back in and this makes it a ton better for a little while.. however.. I can play games like BF3 on 64 man servers and not lag/spike/disconnect or anything.. I am baffled as to why I am having such issues with web browsing
There are some unknonw issues with ciscoworks LMS 3.2 on a solaris server. Many important processes like [code] and many others (around 40 processes were in shutdown state).When I try to start the processes from the Console window by "Managing processes" option, they still remain down with the same status.I tried to stop and then start the daemon manager, with the below commands: [code] After this, when I run command to check processes status (attached for your reference), I can still see those processes down.
I just recieved a new RV180 yesterday and it will not connect to my switch. Router was updated to the newest firmware, reset to factory settings. I did change the ip and ip range. Router works fine with one computer attached direct. As soon as I connect my sf300-24P to it, the WAN and LAN lights all light up and then go out. Only the WAN will light back up. I have no connectivity to the router. I plug the laptop to the router directly and no LAN lights come on and can not see the router with arp -a.
I have my RVS-4000 configured using static IP addresses in the LAN configuration. The users use DHCP to get their addresses (for the most part, a couple may have static IPs set on the computer). I have the maximum number of DHCP users set to 1 to restrict the ability of people to log in to the system. That one address is locked down.
The internal address of the router is set to 182.168.2.1. It doesn't conflict with anything on my network. I have 35 static IPs. About half of them are uing IP Based ACL to limit their access time but that doesn't seem to bear any relationship to what drops off.
Almost daily one or more of the users will lose their IP address and a hard reset of the router is required. The user this happens to seems random and it may be more than one but seldom all of them. The network includes Windows7 (Home & Pro), a FreeNAS, Macs (Leopard and Snow Leopard), iPad, iPods, an iPhone and an AirPort Extreme used as a WAP (DHCP is disabled). The AirPort is plugged directly into the router and has a staic ip on the RVS-4000 but is set to DHCP. It seems to be the most common problem child.
I have 2 AP541N's set up using a WDS bridge, broadcasting a single SSID. I am using WPA-PSK for the bridge and WPA/ WPA2 and CCMP (AES) on the SSID. I only have around 75 (Mac, PC, iPad, iPhone and Android) devices that use wireless. Some are laptops that roam around from AP to AP, and are using LAN when they are not roaming. I have increased the roaming agressiveness on PC clients and this doesn't seem to have resolved the weak connection. At most, I have 50 clients trying to access the wireless at one time. My problem is that they keep on dropping the connections and have real problems reconnecting once it's dropped. After 4 or 5 tries, they may or not be able to reconnect.
Deployed 3 of these as WAPs. No repeaters. They are spaced at least 50 feet apart over three offices, each in a server or switch room.
Across multiple laptops, and multiple WAPS, the wireless will function fine for a while with good bandwidth..then the connection will simply drop. By simply resetting the connection on the laptop or turning the wireless off then on, the connection typically returns, at least for a period of time before it drops again.
I’ve tried these configured as three separate SSIDs on identical channels, as well as one SSID for all three with different channels (preferred for a seamless wireless), and the behavior does not change either way.Based on some other threads, I tried forcing the LAN port speed to 100 mbps, but the problem persists.
Randomly the internet connection for either my, my son's , or my husband's pc drops. This also can happen with the X-box. The router lights indicate it is working and the rest of the connections will be fine just randomly any one of ours will fail until we reset the router. Two of the pc's are wired, one is on a plug (devlo) and the xbox is wireless. I phoned BT, our isp, who sent an engineer out. It turned out the BT rep told the engineer I had reported no dial tone on my phone line and if I had allowed them to investgate this fictitious fault it would have cost me £150 for a call out.
I've got a DIR-651 that does one of two things regularly:
1--drops all wireless connections momentarily, then re-establishes them (happens multiple times a day)
2--drops all wireless connections and has to be reset (happens every 0.5-2 days)
#1 wouldn't be a big deal, except that I keep VPN connections on two systems and have to re-establish them every time this happens. I should probably also note that this happens even on the weekends, when those two systems are not VPN'd in.
It has done this since day 1, and the firmware update did not work.
What HW version is your router? A1 What FW version is currently loaded? 1.01NA
What ISP Service do you have? Cable What ISP Modem do you have? Stand Alone What ISP Modem make and model do you have? Scientific Atlanta 2203C
Ensure DNS IP addresses are being filled in under Setup/Internet/Manual? done Turn off QoS options. done Turn off Advanced DNS Services if you have this option. done Turn on DNS Relay under Setup/Networking. done Setup DHCP reserved IP addresses for all devices on the router. done Ensure devices are set to auto obtain an IP address. done Set Firewall settings to Endpoint Independent for TCP and UDP. done
What wireless modes are you using? mixed B/G What security mode are you using? WPA-Personal What wireless devices do you have connected? 3 laptops, 1 desktop, 2 Blackberries, 1 printer Any cordless house phones? yes, DECT 6.0. Did not interfere with previous Netgear or 2Wire routers. Any other WiFi routers in the area? up to 5 others, but they are all far away and my house has thick stone exterior walls
I'm having a problem with my clients dropping the network connection constantly throughout the campus. I am using a Cisco 5508 controller and the APs are LAP1141N. At first I thought it was a roaming issue but I tested with only 1 AP and the problem persisted, I can tell you that we don't have interference problems and that our old linksys APs used to work without flaws.
I have a cisco RV180 hooked up to a cisco cable modem and Cox service.
The basic symptoms of the problem are that every 10 minutes or so external connections will hang. This lasts maybe 20-60 seconds. If you're loading a website when this happens, various parts of it won't load and firefox will sit and spin indefinitely (it seems) until you manually stop the loading and click the reload button.
When this is happening I can still connect to the routers webserver and dashboard that auto-refreshes every 10 seconds. It seems perfectly fine. My initial theory was that something was broken on the Cox end of things, but after swapping out the RV180 with an old on-q router we had laying around, we haven't seen the problems.
Some other differences I've noticed between the on-q and the rv180:
* with the rv180 traceroute to external hosts shows a big delay (500-600ms) at the hop right after the router. With the on-q, it's 12ms.
* when I ping the ip of that hop with the large delay, with the on-q I get no responses. With the rv180 I would get these strange host redirect messages that make it look like that ip is redirecting to itself. There would be 1 or 2 of those redirect responses, followed by 3 or 4 errors, and every packet would be listed as an error in the ping summary.
I have recently setup one stand alone aironet 1140 with mostly default settings with WPA key. but, it seems sometimes it's dropping the connections. hardly 15 users are connecting to aironet at the moment.
A couple of days ago, after a suggestion in a old forum post (rv180 dropping connections every 10 minutes or so) I tried increasing the various session timeouts. This didn't seem to affect anything for the first day, but last night the router started becoming unresponsive (not responding to pings, but maybe continuing to route established connections.) After a couple minutes the router would be pingable again, and as soon as i could I reverted the changes I made to the session timeouts. That didn't seem to fix the problem. Logs showed many many warnings saying "nf_conntrack table full, dropping packet."
Then as soon as I got on the phone with small business support the problem seemed to correct itself. The only thing we changed was decreasing the MTU to 1472. It is strange that the MTU would make a difference all of the sudden, isn't it?
Our AP541N-E-K9 keeps dropping all WLAN connections and will not allow us to connect via WIFI. I have to switch the unit off and on but even so sometimes it will take 10 mins for the WLAN to accept new connections. Nothing has changed on the network for months as it is a very basic scenario ie Draytek DSL Router -> Cat5e cable -> AP541N-E-K9, thats it! The AP is really only used for guest access and may have about 15 staff connected via WIFI at any one time.
After 5 years of services my DIR-655 begun acting up yesterday; first of it begun by getting REALLY slow, it could take up to 25 seconds to login into the software and up to 30+ seconds just going from one menu to another, on some instances connection (wired) to the router was lost. This morning it started dropping all connections, wired or not; first my iphone then my WDTV, after that it's been pretty much random connections. On one given moment wired works but not wireless, then wireless works but not wired and sometimes I get both but for 3 or 4 minutes.I've reset the router to factory settings, plugged/unplugged, changed cables, network adapters on desktops and the problem persists.
my configuration; ADSL2+ @ 21Mbps comes in via Telstra. Fibre optic cable trunk to main road, copper to the house, total distance 246m, hence good speeds. The phone is connected to a dual port filter with a phone and fax connected through double adapter to one port, and DSL-526B connected to other port.DSL-526B connected to DIR-655 Hardware A4, firmware 1.30. The two are set up in bridge mode, with a static IP. The DIR-655 connects to a DGS-1016D and a DGS-1008.I am running WIndows 7 ultimate x64 w/8GB ram, I5-2500K, and all MS patches.
four days ago I reinstalled my windows system. At that time, I uninstalled Tablet PC components and Windows search. I use FreeDownload Manager for my download needs, and it includes a BitTorrent client. I installed the latest version.From that point on, whenever I download any torrents the connnection to the internet resets and takes about 1 - 3 minutes to re-establish itself. I have tried going back through the several versions of the program to get back to the version I was running before I re-installed all to no avail.
I replaced the cable between wall socket and filter, replaced filter, replaced phone cable, also to no avail. I have tweaked the program settings now with only three half open connections, and I've reset the modem donezn of times. I've reset the DIR-655, and done factory resets on both and reconfigured them. Nothing has worked. I use MAC address filtering and I have ACLS which block access to various sites because of kids, and I use OpenDNS web content filtering too.
I'm building my own home server based on Ubuntu with 4 drives in RAID 10. Its primary purpose will be NAS and backup.Would I be making a terrible mistake by building a NAS Server with a single Gigabit NIC?
I know the absolute max I can get out of a single Gigabit port is 125MB/s, and I want this NAS to be able to handle up to 6 computers accessing files simultaneously, with up to two of them streaming video.
With Ubuntu NIC-bonding and the performance of RAID 10, I can theoretically double my throughput and achieve 250MB/s (ok, not really, but it would be faster). The drives have an average read throughput of 83.87MB/s according to Tom's Hardware.
The unit itself will be based on the Chenbro ES34069-BK-180 case. With my current hardware choices, it'll have this motherboard with a Core i3 CPU and 8GB of RAM. Overkill, I know, but this server will be doing other things as well (like transcoding video).Unfortunately, the only Mini-ITX boards I can find with dual-gigabit and 6 SATA ports are Intel Atom-based, and I need more processing power than an Atom has to offer.
I would love to find a board with 6 SATA ports and two Gigabit LAN ports that supports a Core i3 CPU. So far, my search has come up empty. Thus, my dilemma.Should I hold out for such a board, go with an Atom-based solution, or stick with my current single-gigabit configuration?
I know there are consumer NAS units with just one gigabit interface (probably most of them), but I think I will demand a lot more from my server than the average home user.
I am getting crazy with our Cisco Linksys RV016. It handles 3 simultaneous connections to the internet using 3 ISP. All our company goes to the internet using this cisco linksys RV016, our corporate switches are connected as clients to the router. Sometime ago, this router started to drop POP3 connections to our network, when this problems is present, all users get Receiving' reported error (0x80042108) in Outlook 2007-2010. Currently i have setup POP3 service to use the First ISP connection, but when this problem is present, the only way to eventually resolve it is to switch the link POP3 Service from the First to the Third ISP, sometimes it works immediately, sometimes don't. We are using this router since 2007 but this problems started to arise from this month.
Our switch is the latest firmware available is Cisco website, this is the Firmware Version: 3.0.2.01-tm.
We have a newly-purchased RVS4000 v2 with firmware v2.0.2.7. Its intended role is as a gateway between our local network of wired workstations and a Cisco 2800 series Integrated Services Router, which is at the receiving end of our T1 line. It is configured with static IPs on both the LAN and the WAN side. It does NOT serve DHCP for the LAN. Ever since I installed it, I have had repeated complaints from users of Vista and Win7 workstations that they lose internet connectivity about every 20 - 30 minutes or so. The only solution is to unplug the workstation's CAT5 cable, count to 30, and plug it back in. Then everything's hunky dory for another 20 - 30 minutes. Meanwhile, all our Windows XP and Linux workstations enjoy uninterrupted internet access. The router/gateway we replaced (a DLink DIR-130) never had this problem.
Basically i got a belkin(on a tight bufdget) wireless n modem(f548633) last week. and when i first set it up it was fine except it disconnectiong everytime ia setting was changed on it and taking ages to reconnect to it.
anyway in the last 2 days its started dropping connections to anyone using the wireless. thing is it doesn't completely disconnect it just goes down to around 5kb transfer but when trying to acces the router through IP it doesn't load unless i disconnect and reconnect. i could deal with this at first as it was once every few hours but now its happening every 5 minutes. i plan on sending it back but thought i'd have one last ditch effort at working this out. my security log shows alot of ACK sends to my IP.
02/07/2011 23:26:08 sending ACK to 192.168.2.4 02/07/2011 23:26:08 sending ACK to 192.168.2.8 02/07/2011 23:10:15 sending ACK to 192.168.2.8
I have my RVS-4000 configured using static IP addresses in the LAN configuration. The users use DHCP to get their addresses (for the most part, a couple may have static IPs set on the computer). I have the maximum number of DHCP users set to 1 to restrict the ability of people to log in to the system. That one address is locked down.
Almost daily one or more of the users will lose their IP address and a hard reset of the router is required. The user this happens to seems random and it may be more than one but seldom all of them. The network includes Windows7 (Home & Pro), a FreeNAS, Macs (Leopard and Snow Leopard) and an AirPort Extreme used as a WAP (DHCP is disabled). The AirPort is plugged directly into the router and has a staic ip on the RVS-4000 but is set to DHCP. It seems to be the most common problem child.
my e4200 updated with latest 1.00.1 firmware is constantly dropping connections from the outside to existant lan servers running low traffic services when my machine is using torrent or internet gaming.( call of duty modern warfare )
For a few weeks now, my router has been dropping WiFi connections, seemingly at random. When trying to watch BBC iPlayer is terrible, as it keeps dropping every 5 minutes.
Tonight my iPod Touch (iOS5) was connecting okay, while my son's iPod Touches (iOS3 and iOS4) would not. My MacBook Pro would not connect either.
The only to get things working again, is to turn the router off for a few minutes and turn it on again.
I have a new EA 6500 and it works OK but ever few days it drops all connections. If I reset the router it will start working property but a few hours or a few days later it will drop all connections again. I have installed the latest firmware. Unless there is a fix I plan to return the router to linksys.
A few weeks ago I began having issues with my 615 arbitrarily dropping connections and so on which turned out to be an overheating router, due to sudden hot weather here in the UK, and I just wanted to share how I solved it. My solution was to dremel a hole in the case just big enough to fit a small, silent 12v brushless fan I salvaged from a wrecked computer's PSU, which would then rest on the PCB without any real fixtures. I even drilled some small holes in the side of the case for air to exit. This was fine though because the router is never moved around. Rather than solder the fan onto the power jack socket connections inside to use the unit's own supply, I used an old, disused multi-adaptor and ran the fan cables out of a small hole at the back. The benefit of that was that it didn't add any strain to the router's PSU as this was already under some load after messing around with transmit power in dd-wrt. Another small advantage is that I get voltage control on the fan for slowing on cooler days.
I have two Windows 7 Ultimate computers and around 10 Windows XP (Home and Professional, SP2 and SP3) computers trying to connect to it. It's just a LAN (no internet access).I have set all of the password-protected sharing off on the Win 7 systems. I have tried opening up ALL of the permissions and such (since security is not really an issue).When I try to map the network drive, it won't let me merely connect to it. So, I have to click map network drive on the XP computer and hit "login with other credentials" and enter the username/pass for the user account on the Win 7 machine (we'll say Bob for user and Smith for password for the sake of example). It will mount the share (which is actually the C: root of the drive) just fine.
The only problem is the moment you restart the Windows XP system, it will lose the connection. My fix for it was to create a .bat file that contained the following: [code] I put it in the Progam FilesStartup folder to run upon boot. For the most part, it seems to work after a fashion. Some of the computers, though, will drop the connection to the two Windows 7 systems and need to be rebooted 1-2 times before they get it back again. Even clicking the .bat file manually will have the same result (you will have to reboot) if it drops the connection while you're using it. Plus, sometimes it doesn't map the drive correctly (I assume because the batch file is running before the connection has a chance to initialize on the LAN).I've also tried adding an "Everybody" user to the permissions on the Win 7 systems with full access, but it only seemed to cause problems with the existing connections.It might also be prudent to mention that both the Windows 7 and Windows XP systems are all 32 bit. I've also disabled the firewalls on the two Windows 7 systems. Neither of them have any antivirus or security software installed.
In the last three weeks I replaced a Linksys WRT54G wireless router with a new E2500. The only reason this was done because the store salesman indicated I should get much better performance over my router that was probably 5 years only.
Since the install I have had nothing but issues. I could never get on PC runing XP to connect. It worked one day and the next morning I could never get it to connect again. I even removed the encryption and went to WEP with no luck. My laptop that I loaded the software on and initially did the connection I didn't have an initial problem. The problem I now have is the wireless connection is constantly dropping. In the course of an hour the connection probably drops 3 to 4 times. If you leave the PC for several hours, you may need to sign of your user and resign in to get the wireless connection to work. This is an experiment gone bad. My old router never dropped a connection and every PC in the house stayed connected forever. This new router is located the same distance as my original one was, but is nothing but a series of failed connection.
I have gone through 2 of these routers now. The first time I was told I had a bad router so it was replaced. The problem is that it randomly disconnects all wireless devices. All I can do is wait for them to reconnect. I am very disappointed that I have not been able to find any solution to this problem. I have seen other posts for similar issuse but no resolution
