Under high severity Alerts Its showing following Error
An exception occurred.Please check the AAD.log file for further details.
AAD log shows This
22-Oct-2012|10:48:17.625|ERROR|AAD|TP-Processor6|DeviceManager|getHighSeverityAlerts()|.|com.cisco.nm.trx.afd.AlertRenderer.AFDException
[Code].....
i have a cisco 3560x poe. ny currnet version is 12.2(58)SE2.the cpu process is aboute 30% average.my problem is- ping to the switch itself show me 12ms which is high latency.*note- data between two hosts no this has no latency.i realize the packet go into the cpu itself but, the cpu is not loadedusy. so my question is- is this natural behavior?
View 2 Replies View RelatedIs it possible to configure the ASA to:
log syslog informational to one host
and
log syslog critical to a different host
It seems that the ASA allows you to only specify 1 logging severity level for all syslog hosts..
I'm fine tuning some of our ASA logging config, and am having an issue with one particular syslog ID.The message is: syslog 106100: default-level informational (enabled)and the log settings are:
Syslog logging: enabled
Facility: 20
Timestamp logging: enabled
Standby logging: disabled
Debug-trace logging: disabled
[code]....
This ACE log entry is generated by explicit deny any any statements at the end of all the ACLs, e.g.access-list inside_access_in extended deny ip any any log interval 600 Based on the config, I would expect to see this being logged to the syslog server, but not to the local buffer, but am still seeing them locally in the buffer:
Feb 22 2012 10:58:20: %ASA-4-106100: access-list inside_access_in denied udp INSIDE/HOSTABC(52629) -> OUTSIDE/HOSTXXX(162) hit-cnt 5 300-second interval [0x3baecf1e, 0x0]
It also still shows these as level "warning", %ASA-4-106100, instead of the default %ASA-6-106100 I've tried removing and re-applying the config at different levels but it still reports in the buffer log as level "warning", %ASA-4-106100 This also doesnt affect every 106100 log that is generated. Most messages are generated at the correct level 6 severity but some seem to randomly log at level 4. There doesn't seem to be any pattern to this. The same access-list line can produce severity level 4 and 6 106100 messages.
LMS 4.2. I am receiving the alert below in my email inbox. It was my understanding that DFM would not send alerts for interfaces that are shut down. Is this a bug? [code]
View 2 Replies View Relatedim having lms 4.2.2 and monitoring a cisco 7600 router interface ten gigabit ethernet x/x under dfm. When ever the interface is down due to any media issue i am not getting any alerts in dfm., the interface used to go down for more than 10 minutes. I am able to do an snmpwalk to this interface when the interface was down and getting the value as 2(for down). I am getting other information and configuration mode alerts in dfm for this device.
View 1 Replies View RelatedI am looking for a way to get CiscoWorks LMS 4 to send me an email alert when a switch port goers into a security violation (err-disabled).
View 2 Replies View RelatedI have been getting alerts on unused serial ports on my routers as being operational down. How can I stop these alerts?
View 5 Replies View RelatedSometimes we have unidentified traps in our log, we don't know where they come from.
In high severity faults we see an active alert with device name “Unidentified” event name unresponsive but with a certain ip address.
What are these alerts about? Can I filter them?,A second issue I have is that I get interface down alerts. But when we log on to the device, there is no interface down at all. We can also ping the device from the lms server at that time. I have been told that the admin state and operational state has to be up.
I will be configuring port forwarding to a phone system on the network for remote management. I would like to have the ASA send an email alert when a connection has been made to the open port. Is this possible to do and if so how to configure it.
View 1 Replies View RelatedCan I configure the 2504 to send email notifications for particular alerts? how?
View 2 Replies View RelatedFrom the WAP4410N admin pages or console you can enable e-mail alerts. You have to set the essential TO address and mail server address. Where can I put the FROM address ? From what I can see it uses the hostname value as from address. The hostname in my case is ap02. Then you could try setting a mail address in the hostname field, but thats not allowed.
[Code]....
On a Cisco ASA 8.4 code is it possible to receive an alert once a certain number of tcp/udp connections is reached? I'd like to see if I can get an email alert or syslog if the ASA reaches say 2,000 connections for example. Once I get an alert I could then investigate the cause of so many connections.
View 1 Replies View RelatedWe are getting below logs in our Syslog, how could i stop this."%ASA-2-106017: Deny IP due to Land Attack from 161.233.167.65 to 161.233.167.65 "
View 1 Replies View RelatedI have configured a vlan interface on a 3750 switch. there is aprox 4Mb active traffic flowing through the interface, but when I do a "show interface vlan (vlanid)" the output show zero bits in and zero bits out. Its a typical L3 config with one IP on the vllan interface acting as the gateway for the VLAN devices. Is this a normal behaviur ? and if so is there any way to get the traffic in/out stats. The end PC/devices are connected to this switch via an L2 TRUNK and I dont have access to the L2 switch on which the actual devices connect. so cant get the real time stats of those interfaces.
View 2 Replies View RelatedHow to understand "show sessions" and "show connection" commands? And what is the difference between the two?
View 2 Replies View RelatedIs there any way to change the subject line of the email alerts that are sent? Right now mine are coming with the MAC address, date and time. I would like to remove the MAC address and date and time so that I can sort them into one folder when I sort my email by subject.
View 7 Replies View RelatedFacing issue with 2960G switch , where its do not display "logging trap informational " in show running and show startup .where its showing all other levels from 0 to 5 and 7 after configuration and save commands. [code] after config getting saved , it do not shows in show runn or in show startup while for all other levels it do show the config lines .I tried the same on 12.55.SE release also but its same results . Is this a limitaion of this platform, is there any doc explaining the same for reference. [code]
View 1 Replies View RelatedI have a cisco 1760 with running VIC-2FXO (working fine). I'm now trying to replace that line with an ISDN line through a VIC2-2BRI.
View 4 Replies View RelatedToday I've received reports of slow internet access/activity and have noticed myself that it seems a bit slow today. On the dashboard of our asa 5510 the "outside interface" traffic usage is running constantly high. It's at the top of the graph. How can I tell what is causing the spike in utilization. It usually runs at about 1500-2000 Kbps, and now it's up over 10,000.
View 6 Replies View RelatedWe installed a solution with 2 Cisco 2801, BGP multihomed failover.
1) The router which is currently getting all the traffic gets to 55% to 60% of CPU usage when handling 40 SIP/RTP streams . This equals 10Mbit up/10Mbit down and it showed around 5800 packets TX and around 5800 packets RX, with a majority of them CEF switched. As those figures are way less than the performance figures published by Cisco, we wonder if we made any mistake in setting up our router, or if we can do something to improve the router setup.
2) Does it have an impact on router performance if we increase/decrease RTP packet size, thus increasing or decreasing the pps relative to the consumed bandwidth?
3) If it is not possible to improve router configuration, we also wonder about possible replacement units for those routers. Would a 2901 do a good job? By how much would it rise the capacity? What other models would you recommend if we plan to rise the number of concurrent calls by a factor of 4 or even 8 times of what we have now (so up to 48000 pps and 80Mbit).
Here is what we tried:
- ip route-cache same-interface does not seem to improve anything
- ip flow ingress on or off makes no difference
- disabling the inbound ACL on fa0/0 seems to reduce load by 10%, although I don't understand why - a very high percentage is CPU interrupts, and ACLs are process switched, or not?
- we tried following the Cisco guide for high CPU due to high interrupts, with no success
Here are some usage statistics:
The graphs that we plot via SNMP show a propotional growth/increase of CPU and bandwidth (and thus pps) At the highest loads, we had a bit more than 55% CPU utilization with more than 50% interrupt CPU.
CPU utilization for five seconds: 36%/30%; one minute: 30%; five minutes: 30%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
127 13140 954 13773 2.00% 0.29% 0.07% 194 SSH Process
[Code].....
what's the difference between High-power and High-gain wireless USB adapters.
View 5 Replies View RelatedI am trying to see what traffic goes through a certain ACL so I specify a protocol instead of allow all IP traffic. So what I did is enabled logging with debugging on that ACL. When I right click on the ACL and show log, nothing shows up. But I see hits on the ACL.
View 1 Replies View RelatedI've added several switches and one WLC to my new NCS Prime box. I don't see them in the display. If I try to readd one, it says it already exists. What am I missing?
View 0 Replies View RelatedTrying to get a Cisco ASA 5505 to show me all the current dynamic PAT. (I don't want to see hard-coded port forwarding, just dynamic stuff the router is doing to allow various hosts on the network to talk to the WAN.)
View 8 Replies View RelatedWe have a Cisco 1841 router and checked something an unnusual (never seen before) routing table having L - local routes. if this an IOS bug or same as C - connected local routes.
1841#sh verCisco IOS Software,
1841 Software (C1841-IPBASE-M),
Version 15.0(1)M3, RELEASE SOFTWARE (fc2)Technical Support: [URL] ... Copyright (c) 1986-2010 by Cisco Systems, Inc.Compiled Sun 18-Jul-10 01:16 by prod_rel_team
[Code] .....
how to show all the module on the ASR 1004?
View 4 Replies View RelatedI would like to know whether there is any command that shows the configuration of the wireless controller (5508) like when you upload the configuration file from the GUI of the WLC. In other words, I don't want to show me all the verbose running configuration as the "show running-config", but a brief configuration as for example described below: [code]
View 2 Replies View RelatedI have a solution of thre ACS.. one primary and two secondaries. My customer report me that in port of the switch where is connected the ACS show two mac address. [code]
View 1 Replies View RelatedIn a 6500 or 7600 a 'show module' gives a run down on all the modules in the slots, their HW and SW versions and status. But I can't find a similar command in the ASR1006.
View 1 Replies View RelatedI have copied status codes from show ip bg command output and its explanation (from Cisco documentation site)., d and h (suppressed, dampened and history). I read somewhere that these are to control flapping routes. But not able to understand it completly.Raised this question in a couple of forums but didnt get a proper reply.The table entry is suppressed.??The table entry is dampened. ??The table entry history. The table entry is validThe table entry is the best entry to use for that network.
View 2 Replies View RelatedI have two MLS conected by 2 fast ethernet links f0/11 and f0/12 on both sides.I am trying to set up a layer 3 etherchannel using these two links . But when i see etherchannel summary, they dont show up as layer 3. Instead they show as layer 2.
View 19 Replies View RelatedLooking for a show command to display the actual physical Ram modules inside a 2911 router. I believe they come with 2x ram slots and I need to know if it has 1 ram stick or 2.show version displays the total amount of ram, but not if its 2x128 or 1x256 etc.This is also production gear so I cannot open it up and have a look until the scheduled downtime.
View 3 Replies View Related