Cisco VPN :: 871 - Int Tunnel1 Shutdown And Not In Use
Nov 7, 2012
Even though I've been working on Cisco way too long I've never worked with the 871 before, and I've never inherited a system with so many unused commands in the config. Apparently there have been a lot of changes over the years and a lot of commands left behind. And sure I'd like to clean it all up and start over, but I really just need it working right now.
There are a total of 4 sites, HQ and remotes1-3. HQ has an ASA, remotes the 871s, there are VPN tunnels between each 871 and the ASA and these are working fine.
Remote1 also has tunnels to Remote2 and Remote3, and these work.
Remote2 has the working tunnels to HQ and Remote1, but can't establish a tunnel to Remote3.
Remote3 has working tunnels to Remote1 and HQ, but not Remote2 (obviously)
They are all running the same IOS 12.4(20)T3 and have virtually identical configurations. A sho cryto sess on Remote2 and 3 look like this, with an obvious IKE problem;
Interface: FastEthernet4
Session status: UP-ACTIVE
Peer: xxx.xxx.xxx.x30 port 500
[code]......
The only differences in the configs are the IP and the self-signed keys might have different modulus. This is the config for Remote3, I've tried some different combinations of putting in static routes and not, so don't assume what's here is what's been tried. And I've already gone over the pre- shared keys and ACLs a hundred times. My gone is to just get it working, not make it clean. Note: int Tunnel1 is shutdown and not in use.
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
[code].......
How do you shutdown a mac using win7 (on the same network) using the command line?win to win: shutdown -i then name or ip-address, what about win to mac? How does that work?
There is another PC in my wireless LAN.is there any way to shut it down from my computer?currently two PCs are not shared .but connected to the same router.
I run cmd, as an Administrator, After typing shutdown -i the Remote Shutdown Dialog Window pops up,Giving me a lot of posibilities. Though, in the "computers" section there's nothing. Though the main house computer is connected to the same network as the laptop I am at. I wondered why isn't the computer there? So I typed net view in cmd , and only the laptop's name was there. Meaning? The two computers are connected to the same network, thats for sure, the ip's last number in the main pc is 1 and in the laptop is 2. But this is which port each computer is using right?
From PEC training - Cisco says to perform a proper ASR 1004 shutdown by executing 'reload' , then wait for bootstrap message to appear, then [before commencement of unpacking of the IOS] turn off the power switch. IS THIS ACCURATE. Anyone have any doc related to the recommended POWER DOWN process on the ASR 1004. We have a UPS cutover coming up and I want to be ready to power down and restart the new ASR 1004s we have - properly.
we operate a number of 2106 WLC's some of which are in training centres, we have been requested by one customer that the SSID used for the users in the training rooms is only enabled between the hours of 9am - 6pm Monday to Friday.
As such im trying to find an automated method of disabling said WLAN automatically outside of these hours including weekends.
I'm experiencing strange issue with my WS-C3750X-48T-S.
Model number: WS-C3750X-48T-S System image file is "flash:/c3750e-universalk9-mz.122-55.SE3/c3750e-universalk9-mz.122-55.SE3.bin"
This switch is situated on a remote site and on the 6th of January it was rebooted. I still do not know the cause, but it might be power outage or smth. We are still checking. After the reboot I've noticed that one port on this cisco switch is in 'notconnect' state, while I'm pretty sure it should be 'connected'.
I've tried to shutdown the port adminstratevly and do the 'no shutdown' but this port remained in 'disable' state.
#sh run interface Gi1/0/5 Building configuration... ! interface GigabitEthernet1/0/5
What is the command to shutdown a cisco 1841 (say, to add a module)? I know how to reload / reboot, but does not seem to find any command with an obvious name.
I've put a C3KX-NM-1G module into a 3750x but can only get ports 1,3 to stand up, ports 2 and 4 dont operate. ports 2,4 are not shutdown and dont come up with working SFPs etc in another switch.
I have an old 2621xm router in CCIE lab at home. Only a week ago I started having issue on 2 of them. The problem is on one of them when I go under interface configuration and I type "no shut" nothing happens. Interface stays in administratively down status and when I check running config "shutdown" is still under interface.
On the other one the same problem but only with "router rip" command. I configure my rip routing but then when I check running config there is no rip section and also RIP is not running under "show ip protocols rip".These routers are connected to 2511 AccesServer. So I thought the issue might be communication from AccessServer to these devices. I connected a console cable straight to them and still the same problem. Everything else is working on these devices.
My 3502i suddently shutdown it's Radio interface and when I connect to it, I cans ee that the interface is shutdown. So tryign to enable it but the "configure terminal" command is not available. Is there any hidden command to go the priveledge mode? ______________
interface Dot11Radio0 no ip route-cache shutdown antenna gain 0 beamform ofdm mbssid(code)
Is it possible to reduce de recoveery time after an interface shutdown? Current interface configuration is as follows and it takes 1 second to recover from a shutdown. I need to decrease this time.(Cisco Catalyst C3560) [code]
I can copy or past small files but on big files like DVD ISO which are about 5GB there is a sudden shutdown like a power out.This shutdown happens exactly when I click paste. It is not the temperature or virus or a bad xp install.I clean installed xp and installed the newest lan drivers from ECS.
I have bee trying to make WOL work with no luck so far. The problem is that when I shut down my laptop (connected to AC power) the NIC also shuts down. I already unchecked the box "Allow this computer to turn off this device to save power" in the power management tab in advanced NIC properties.
I noticed that when I force shutdown my laptop (press the power button for 5 seconds), the NIC stays on and WOL works, but when I perform a regular shutdown, the NIC shuts down when windows shuts down.
If i replace a card of the same type in the same slot will I lose the configuration for that card or does it live in the backplane of the device?Is there any special command I need to run to replace the card or can i shutdown the 4507r-e and just swap out the blade?
I have used the two sl and tm scripts that was on the previous discussion but with no luck. I'm currently using IOS version 15.how I can get this work on my c3750 and 6500.
I have a single 2960s without stack module. The stack port has a status of down, however I'd like to disable it so that it does not generate a false alarm in my NMS. The documentation states that there should be a command "switch 1 stack port 1 disable" but the switch (running 15.0(2)SE2) doesn't seem to be available. Is this a dcumentation bug or is the command not there at all?
I have used the two sl and tm scripts that was on the previous discussion but with no luck. I'm currently using IOS version 15. how I can get this work on my c3750 and 6500.
Is it possible to automatically shutdown the OUTSIDE interface on a Cisco ASA 5520 in case of intrusion?.
In my opinion if there is an attempt of intrusion, just the device would stop it. If it cannot detect it, how can the device recognize the event and so shutdown the interface?. Am I correct?
I need to move our (secondary instance, version 5-2) ACS server to a different server rack and I have not been able to find a gentle way to shut down the appliance (not the windows version). Does one exist or is it just the power button/cord?
It is my understanding that the FWSM for the 6500 series switches uses a 6 port Etherchannel on the backplane to communicate with the 6500 series switch.Can you shutdown vlan1 on the switch and still communicate with the FWSM? I was under the impression that you could not (although I am looking at a config with it shutdown)
I haven't really allowed this to bug me too much, but I went over by a friend's house, used his WiFi, closed my Laptop, it disconnected, I reconnected to his network, came back home, now every time I restart or Shutdown my computer I have to reconnect, not that big of a deal
I've heard mixed things about the use of DHCP release messages. I've heard that some operating systems don't bother with them at all, which makes sense because many users disconnect the network media without shutting down the workstation. Which operating systems actually send out release messages as part of their shutdown sequence?
We have pair of ASA5585 (ver 8.4(4) with IPS module configured with Active/Standby failover. There are total 09 interfaces are connecting to different zones in the firewall and out of which three(3) interfaces are connecting to Palo Alto 2nd layer firewall. When we test the failover whatever interfaces not connecting Palo Alto failed or shutdown, ASA triggers the failover to other unit, however the Palo Alto is not detecting this failover and it still keeps its previous Active Palo Alto to pass traffic, thereby failing passing traffic on Active firewall through Standby Palo Alto firewall.
But when there's a interface failed or shutdonw on the interfaces where PaloAlto also connected, then once the ASA failover triggers and the same time Palo Alto also trigger its failover then both new active firewall and Palo Alto sending traffic through firewall.However we we cant all the interfaces of ASA also to connect Palo Alto and let the Palo Alto to inspect all the interfaces, but we need our ASA to work in a situation where any of the interfaces failed, the failover to work smooth the pass the traffic via either Palo Alto device.I just need to know is there anything tricky that we can configure on our ASA in this failover senario, or to confirm if there's no any workable solution to this situation.
I have attached the senario that I explained above. Just to emphasis the issue again, if any interface of Gig0/0, Gig0/4 or Gig0/5 failed on active firewall, ASA switching to standby firewall and act as Active, but Palo Alto still remains his Active state and the new Active ASA is not passing traffic via standby PA as its not detecting any of its interfaces as failed or unreachable..?
a switch port is shutdown, but when i use NO SHUTDOWN command it is working and shows administratively down. like this command does not affect on it. i should enable this port? what can i do btw, port is not in errdisable and portfast is enabled.
I have just updated a VLAN interface on my router. I have two 6500's with GLBP configured. The particular interface had a primary and secondary IP address. I shutdown the interface on one router and deleted the secondary address then assigned the orignal secondary address to be the be the only address associated with the interface and enabled the interface and it came right back up...all looks good. I proceeded to do the same thing to the other router and once again all looked good. Now, I am able to PING the devices in the subnet from router, but am unable to ping them from any place else. [code]
I understand the vlans on the catalyst side of the house on 2900 to 6500 Catalyst switches.
This 7010 running nx-os 5.1(3) I did not setup, but have to manage it. Hasn't really been a proble till now.
My nexus 7010 has a Layer 2 only vlan 11. It is "Active" but the interface is "shutdown". Yet, it is passing traffic across the directly connected ports on the nexus 7010 and to other switches in my network. Vlan 11 is being set out via VTP to all my switches and things are running fine.
I need to create another L2 only Vlan. I can't seem to find any docs that indicate that a Layer2 vlan Interface on nx-os should be in "shutdown" mode as part of the setup. I do see in the docs where it has to be set "Active" as part of the process.
Is this the correct way to seutp a L2 only vlan on nex-os? Leave the interface in "shutdown" but make it "Active"?
Mystery Vlan 4 and 6 The mystery deepens. I have other L2 vlans ,Vlan4&6 that are NOT defined as "Interface Vlan4" in the nexus config, yet it is applied to GigE ports on the nexus and these Vlans 4/6is also being sent out VTP to all switches. Even weirder is that these vlans have names associated with the numbers. These are valid Vlans that were configured on the old 6509 before the Nexus was installed.
I have checked all switches, NONE are running in Server mode for VTP, all are in CLIENT. The nexus 7010 is the only device running in VTP Server mode.
