Problem Host A unable to reach Host B, trace route from Host A it reach to Router B but the packet unable reach to the Host B here the 1st level troubleshoot I did
1. Traceroute and ping success from router A to host B
2. Ping success from router B to host B success
I wonder the packet reach to router B but it didnt pass to Host B.
I've got a lot of these messages in my logs from SVC users:Code:
View 13 Replies View RelatedGot to set up a site to site VPN to one in a clients office and we're struggling to get Phase 2 working, just seems to loop around saying "Received encrypted packet with no matching SA, dropping" which to me means the ACLs arent mirrored correctly?
View 3 Replies View RelatedWe have Cisco IP phones behind a 2600 series router:Most of the time when the PBX receives a packet from the phone, the source IP of the packet is set to the public IP of the router (1.2.3.4) as expected. However, once in a while, we get packets (at the PBX) with the source IP set to the private IP of the phone (10.0.0.12).The router is configured by our provider, and they can't give us any explanation for this behaviour. Is it safe to assume that PAT is not configured properly at the router?
View 2 Replies View RelatedI have a ASA5540 firewall set-up with an interface MTU of 1500.
I suspect that we are receiving packets with a larger MTU but have not found an easy way of confirming this. Any command that can be run on the firewall to display the MTU packet size being received on an interface?
We are also running Solar Winds so could query an OID if such a variable exists.
I replaced my old wireless router with a Cisco Linksys E4200, running firmware version 1.0.02 build 13 May 24, 2011. About once a minute the router sends an unsolicited DNS message to the IPV4 multicast address 01:00:5e:00:00:fb with a destination IP address of 224.0.0.251. The unsolicited message is a DNS response with source port 32784, transaction ID 0, flags 0x8400 (standard query response, no error), questions 0, answer RRs 2, authority RRs 0 and additional RRs 1. The two answers both relate to the router itself: one has Name Cisco18738.local, type A (host address), class 1 (IN), cache flush true, time to live 1 minute, data length 4, and the address of the router. The other is the reverse of the same address. The additional record is for Cisco18738.local, type NSEC, class IN, cache flush true, time to live 1 minute, data length 5, next domain name Cisco18738.local, RR type A (host address).
When my desktop computer receives these messages it logs an error, for example: "Jun 23 07:39:22 sauterws02 avahi-daemon[1067]: Received response from host 10.146.9.1 with invalid source port 32784 on interface 'eth0.0'" The 10.146.9.1 is the router's IP address. I also see these messages on the wireless link from my laptop.I suppose the E4200 is generating these DNS messages in a misguided attempt to make sure there is no old information about its name. Is there a way to turn them off? If not, is there a way to report this to Cisco as a bug?
Most of the 4500 Switches in our network are giving the similar error for so many ports
%C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 1 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on p t Gi2/6 in vlan 100
Its impossible to do a wireshark packet tracing for all the ports.
Issue I am having with a Cisco 4507? Below is the error i am receiving.
Feb 14 10:06:09 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 508 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
Feb 14 18:44:06 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 119 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
Feb 15 00:51:06 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 366 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
[Code]...
I have a 5520 in production at a customer's site between an outside 802.11 network and an inside server. The server can get to outside hosts OK, and the traffic is being NATed properly, and sockets initiated by the server on the inside can pass data both ways, but I need to allow outside hosts the ability to send 'announcement' UDP packets to the inside server. I thought this might be an outside-NAT-required issue to get the traffic routed, but I need the inside server to see the actual outside host source IP in the UDP packet, so I basically set the outside host up similar to the inside host, just without the NAT table on the firewall -- it's subnet is outside the destination (inside server) subnet, and its gateway is the outside interface of the ASA, the same way the inside server is able to get to hosts outside. The firewall should just route the packet with a destination of the inside subnet once it sees that it hits a 'permit' ACL.
I have the appropriate ACL's set up, and when I do 'show access-list' I see policy hits for the 'permit' statements where the outside host is generating the announcement and it's hitting the ACL. I even duplicated the ACL into list 101 and 102, and applied 101 for inbound traffic on the outside int, and applied 102 for outbound traffic on the inside int, and I'm seeing policy hits on both permit statements outside and inside, so it looks like the traffic is being passed on to the inside interface and permitted, but the server isn't seeing the packets.
I can ping the outside interface from the outside, but cannot ping the inside interface or any inside hosts from the outside, even though I have 'permit icmp any any' enabled on the ACL on both ints. When I remove the firewall and put the outside clients on the same subnet, the server sees the packets just fine.
I set up the same scenario in my lab with an ASA 5505, with the same results. Below is the running config from the 5505 in the lab. The production firewall is running a slightly older version of ASA, so I made the configuration as basic as possible on the 5505 to match the config in the field:
: Saved
:
ASA Version 8.3(1)
!
hostname ciscoasa
enable password Guh9Xxhb9mcC8lV1 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan2
description Outside WAN Interface
nameif outside
security-level 0
ip address 192.168.10.1 255.255.255.0
!
interface Vlan3
description Inside LAN Interface
nameif inside(code)
I have a host that can successfully connect to a PIX 515E (7.x OS) via VPN Client; however, I have no IP routing to the LAN from the remote host.The VPN IP pool works finem,The LAN default gateway is the inside interface on the PIX; the network is flat L2 behind it.The default route on the PIX points out; no other routes are defined,The VPN remote host can be pinged from LAN hosts, but the VPN remote host cannot ping any LAN host, not even the PIX inside interface.
View 2 Replies View RelatedASA 5510
Ver 8.2(5)
I have been looking all over the place for the answer of how to allow clients on an IPSEC VPN to ping from host to host.
I'm just wondering if its possible to ping an IPv4 host using the IPv6 host assuming that the NAT64 has already been implemented?
[code]...
I have recently purchased six quantities of DIR-655 for my home use. When I registered them these six product, at the end of each registration, I got the message that I will get an email confirming the registration.I didn't get any email. I have checked my email span box and filter too.
View 6 Replies View RelatedI have cisco sr520 adsl router i have everything set up and it is ok. Internet work but i can not open some web pages In DNS is not problem NAT work fine. When i try some simple adsl gateway the problem websites work correctly. I think the problem is on sr520 router.
View 5 Replies View RelatedI am switching out routers. I have some ports forwarded that I know I need to copy down so I can open them up on the new one, but besides that, what else do I need to do/know before replacing the old for the new?Currently, we have a TRENDnet TEW-431BRP. We are replacing it with a Netgear WNR1000.Is the new one good? I didn't set up our home network. Someone from my dads previous business and friend did it for us. So I don't know what exactly was done in the router settings to set everything up.
I figured just copy the ports that needed to be opened in the new router and maybe use the same WEP password for wireless stuff. I need to take note of with this working outer so I can apply it to the new router while I still have a working network with all its setting to refer to before I take the network down.
I recenly installed LMS 4 on a windows 2008 R2 system , I didnt change the default configuration of windows or ciscoworks.I just added devices and configured basic things on the LMS system .when I open ciscoworks on the server itself it starts a browser session on http port 1741 and then changes automatically to https even though the default config is browser security disabled on ciscoworks.I try to open a browser session on a mgmt station to the cisco server , it didnt work in https ( I did get the login screen but couldnt log on , probablly something to do with the certificate ) , so I open http on port 1741 and it worked , I was able to log in .After a few Hours for some strange reason I didnt have access any more from the mgmt station not in http nor in https , the only way was to access it from the server itself.I went and changed the default setting of the secure browser on LMS 4 hopping that would work , I was asked to restart the ciscoworks service for the changes to take affect , I tried to restart it but it was unsuccesful so I restart the whole server. when it came up ciscoworks didnt work most services didnt start ( like the web server ,tomcat and all the manual services and ciscoworks deamon)
View 1 Replies View RelatedI am facing two issues in BGP both the topology and Config files.Because the link between Vail and Telluride runs iBGP, both routers will learn about the networks in AS 300 and AS 400 through native BGP only and both AS's do reach each other. Both routers are also running OSPF with Aspen and BGP routes are redistributed into OSPF domain. Now, Aspen knows about the networks in AS 300 and AS 400. Now suppose the link between Vail and Telluride fails, both AS 300 and AS 400 can't reach each other anymore. The only solution to this is to redistribute OSPF routes to BGP on Vail and Telluride. But when i did this, only routes with "O" learned by Tahoe and Alta. In other words, Tahoe sees only 192.168.1.220, 192.168.1.196 and Alta sees only the same routes. Why the redistribution from OSPF to BGP didn't advertise the O E2 routes?
This actually was discussed before but i still can't get it. It is not an actual issue.It is about "Syncronization". I know that we've said many times to turn on Sync. when we do redistribution from BGP to an IGP to make sure that the routes are installed correctly in the IGP routing table. However, as you notice in the configuration, i didn't enable Sync. on Vail and Telluride for a long time and redistribution still works fine.
I have CiscoWorks LMS3.2 with RME4.3.1 and CS 3.3.0.
When I will update the devices and I go to Common Services - Software Center Device Update and I mark Resource Manager Essential then I receive this window:
Now I choose the Rtr2900 package (same problem for all six packages) and when I will download it, then after define the destination path for the file I see this window:
Then I have tried to download it manually with the following command: PSUCli.bat -p rme -d -dst c:psu_download -all
The six packages that are showed in the picture above were not downloaded.
I assume that there is an error on Cisco side because the size of the six packages is NA.
Or is there another possibility to download the package for the Rtr2900?
From one day to the next our UPM database (upm.db) has blown up from 4 Gb to 35 Gb.Data purging didn't reduce the size of the db.What happened ? And how can I compact the db again ?
View 4 Replies View RelatedI upgraded my fireware and now the router don't do anything, I can't even login into it using [URL] which a hard wired connection. How do I get logged into the router to try and put the old version of firmware back on it?
View 4 Replies View RelatedMy SRP526W (running the actual firmware 1.01.27) didn't recognize my new Huawei E372 USB dongle (it's a T-Mobile web'n'walk Stick Business II, already installed the newest firmware 11.203.03.10.55).Using a Huawei E172 or a Huawei E353, both USB dongles works well. But they are slow compared to the E372. I'd really like to use the E372 stick because it's super fast with up to 42Mbps download speed.As I could read in the release notes of the SRP526W, the Huawei E372 should be supported since firmware version 1.01.26.Inside the Huawei E372 you can find the printing "Model: E372u-5", maybe this is a different model which is currently not supported by the SRP526W.
View 0 Replies View RelatedI've a customer who has netManager 1.0 and they want to upgrade to CUOM 8.6. I didn't find any upgrade document for netManager 1.0 upgrade to CUOM 8.6.
View 0 Replies View RelatedI was in the process of creating a AAA setup on my NX-0S (MDS9148), logged out/attempted to login to test AAA login and now I can no longer login as admin either! I didn't change the local account. I have the Cisco Device Manager open still (in the fabric switch) and how I remedy this (AAA is not up and running as of yet with this switch).
View 3 Replies View RelatedI want to make a question about RV042. I used RV042 router in my office. I used content filter feature in router.Althought this have not been apply the rules. I think I made wrong rules.I enabled the block enable forbbiden domain .And then added the websites that I want block.However, these websites are still browsing in local computer.
View 4 Replies View Relatedi have router 7200 , one of its power supply stops working , but lms 4.2 doesn't notify me?
View 6 Replies View Relatedi bought a Linksys E2000 router. When i went to set it up, i noticed that the old router has a phone line connected to it. When i looked at my E2000, I noticed that it didn't have a phone port in it (Rj11). Not sure what to do. Would it be possible to buy a Rj11 to Rj45 converter and just use that to connect the phone line to my router?
View 1 Replies View RelatedI am purchasing a new DIR 600. It pings properly, but didn't access internet. I am using HP Desktop and ORTEL broadband connection.
View 1 Replies View RelatedI have a Linksys wrt110, and we didnt have a password on it for a while, i went and changed it so we had a password,now i have put a password on it, and now it wont let me connect any device to the internet, checked iphone and mac, nothing will work.
View 2 Replies View Relatedmy sister gave me an old ethernet switch so I could use the internet on my computer and my PS3. Unfortunately I didn't get any type of setup manual so I downloaded one off the manufacturer's website
View 1 Replies View RelatedI just bought the WAG120N , firmware version is v1.00.12, but it seems it has a problem with the device here.I have to turn off the system / device every time i want to get my dynamic ip update into dyndnds.org , it cant auto update the new dynamic ip.What problem that cause somethin like this?I already upgrade the firmware into 1.00.16 , but it didn't solve the problem.
View 1 Replies View RelatedI've setted the unit in BRIDGE MODE, and attached on it 3 LAN devices, 1 PC Desktop, 1 NAS WDBE and 1 HP printer ... OK all config process was right and all my units talk togheter via AP Netgear DNG2000, and so i can use for instance the printer with my laptop too connected in WI-FI N. Now usually, In the night I turn off all my devices (DAP included), and when in the morning I need only the printer used by my laptop, obviously I turn on ROUTER - BRIDGE - PRINTER - LAPTOP but NOT the DESKTOP ... and so the DAP can't reconnect automatically to the router (both the lights AP/BRIDGE are on and fixed) ... I turn on the PC and the BRIDGE reconnect to the world .... BUT I DON'T WANT turn on everytime the desktop !
1) all gears has fixed IPs
2) DHCP server deactivated on the AP main router (DNG2000)
3) no WPS used, only WPA2-PSK (AES) personal keys on all gears
once that DAP-1522 is connected to the router .... all work fine (also when I turn off the DESKTOP).so the workaround is never turn-off the DAP ? I can't believe ... and who will save the energy planet
I installed windows 8 X64 on dell inspiron 5220 and it didn't recognized the wireless device .It also rejects its win7 driver due to known comparability issue. Where can I find the driver?
View 1 Replies View RelatedMy sent packets are 0 and also received packets. What can I do?
View 3 Replies View Related