I have a two ASA 5520's and I want to be able to see or monitor the traffic between each tunnel. I am using external addresses but for the sake of this question I will use the following: 1.1.1.1 to 2.2.2.2 . How can I montior the traffic?
View 3 RepliesMonitor a VPN tunnel that has as end devices a Cisco ASA 5520 and a NetScreen Firewall. I'll like to be receive an alert when the VPN is down.
View 1 Replies View RelatedWe have a Cisco ASA 5520 and im looking for a way to monitor largest outgoing and incoming traffic per ip in real time so to know which of my internal computers are using the most of our Internet Line. Is there a way to this through ADSM ? We use version 6.3.
View 1 Replies View RelatedWe just migrated from a single 5510 to a dual (failover) 5520, It seems that everything is working except the remote VPN. We can establish a tunnel and authenticate as local users, (going to LDAP when all is working) but no traffic is passing. I know I am overlooking something but cant see it. [code]
View 12 Replies View RelatedI have a site to site tunnel between two 5520 ASAs. Tunnel is up but when I try to talk to the other side, the implicit deny on the inside interface of the local ASA blocks the traffic. When I ping, the tunnel comes up but in the logs it says it is blocking icmp from inside to outside. I have tried the sys opt connection permit-vpn but it is not working. The traffic is from 5 specific machines within the local sub net that I put in a network object group called Celerra_Replication.
I want to them to be able to talk to 5 machines on the far end of the tunnel in a seperate sub net. They are in a net wrok object group called GP_Celerra_Replication The ACLs I created for this appear to be created correctly allowing IP from Celerra_replication to GP_Celerra_Replication and the opposite on the other side.
we have a L2L-VPN-Tunnel beetween our Headquarter (ASA5520 with Network 10.100.1.0) and a branch office (Cisco1841 with network 10.100.10.0 ). This works fine for years, but now we wish to change the configuration so that ALL traffic from the branch office goes over the vpn-tunnel. My question: How I have to change the crypto acl to reach this. Below the relevant parts of the branch route.
View 6 Replies View RelatedWe have a 100 Mbps WAN circuit, we have configured an IPsec tunnel between ASA 5520 and Cisco 3845 Router for our DR site replication via Veeam Backup and Replication, it was working fine before, when we established the 3DES tunnel the traffic for certain subnets is dropped after an hour and it stops the replication, although tunnel remains up and we can access the other subnets, as soon as we clear the crypto SA and ISAKMP sessions on the firewall the traffic starts flowing again and then after an hour the traffic is dropped again.So far the testing and differnet configurations we tried are as under.
Tried with a different MTU size both on firewall and ESXi servers but nothing happened.Their is no QOS configuration.Checked the utilization on both ends its Noram although their are subsequent 100% spikes on Cisco 3845 but on average it remians at 30-40%.
Our ESP traffic is passing through multiple nodes and we can not establish the tunnel. and I want to know which node blocked ESP traffic. How to trace which node blocked ESP traffic ?
View 5 Replies View Relatedi have a 7201 router with NPE-G2. i have a design which i have the option to send all the traffic through a GRE tunnel or a L2TPV3 tunnel.which method is more CPU consumption ?
View 1 Replies View RelatedEnvironment :linksys wrt300n v1.1 which can have ddwrt-mega. Willing to tunnel all lan's outbound traffic through an ssh tunnel.
View 2 Replies View RelatedI have an ASA 5520 with the below config
Gi0/0: outside (Internet)
Gi0/1: inside (Internal users)
Gi0/2: DMZ (web servers, ftp, Mail etc..)
I have a SMTP relay deployed on the DMZ for mailing. I have also a mail servers installed in the internal lan,
I want to allow trafic from dmz to reach internal lan, and i want normally also allow stmp relay from dmz to reach Internet.
How can i block trafic from DMZ to reach Internal Lan (instead of smtp) if the to allow trafic from dmz to internet i must put ANY in the policy?
For allowing trafic from DMZ to reach Internet, the policy must be DMZ -----> ANY ----->Services., this policy means DMZ can implicity reach Internal Lan?
We have a Cisco ASA 5520 in HA (Active - Standby). We monitor the CPU,Memory Utilization and Active Session via SNMP polling.And SNMP trap for linkup ,linkdown and Cold start.Our requirement is to monitor the HA status and whenever there is a change in the HA - Failover we have to get a snmp trap.What are the configuration need to be done on the cisco asa.
View 3 Replies View Relatedis there a way to get traffic and client access/associations data with WCS for each AP of a centrally managed WLAN?I manage a campus WLAN with a 4402WLC (software version 6.0.188.0) and a WCS version 6.0.170.0 .WCS provides me detailed information on a client basis: I'm able to know the association history of each client currently connected, both which AP the client has connected to, and how much traffic the client has generated/ received for each connection.I hadn't find a way to get the same information on an AP basis. Namely, which clients have been connected, and how much traffic has been transmitted per time slot. I suppose this is just a matter of making a different query to the WCS database, since the data are the same used for providing the information on the client association and traffic history. Though, I haven't find a way on WCS to get this information.
View 2 Replies View Relatedi want to monitor interface traffic in/out by eem and the if the values is overer than some value i will change the policy. for example my router is 2821 is have 2 fastEthernet port , i want to monitor the traffic on fasE1/0 if traffic over than 80Mbps i will change some configuration ( example: change next-hop on static route) for via traffic to interface fasE1/1 for reduce the traffic on interface fasE1/0?
View 6 Replies View Relatedi have a core switch of 4500 series. some system are generating the traffic Extra LAN traffic. how i can monitor on switch that which system is generating the traffic,
View 1 Replies View RelatedI am supporting a small call center of all Win7 machines. There is no server in house as everything is web based. Anyway, we want to find the bandwidth hogs and programs that I am used to using require servers for monitoring web traffic.
Are there any devices or software that is not a fortune that can give details on bandwidth usage?
i need to monitor the traffic on a multi users wireless route
View 8 Replies View RelatedISP has recently announced that they are going to start charging $1 for every GB that their customers go over their monthly limit. i have a 100GB/mo package and i figure that's sufficient for my habits which consist of approx 40GB of torrents, a bit of skyping, bit of browsing, etc. my ISP makes usage graphs available online, when i checked earlier last month to confirm i'm staying under my 100GB limit the graphs said over the past 12 months the highest i topped was 90GB, usually in the 70's. pretty much what i expected. but when i check their usage graphs again recently it says i've been using over 400GB for the past 3 months straight (as far back as the new graphs go). i call BS and find it very suspicious that my internet usage magically quadruples the same time my ISP wants to start charging for overusage, especially retro-active.
anyhoo, i want to somehow monitor my internet traffic usage independently but i'm not sure the best way to go about it.my home network is the typical modem -> router -> LAN.my router is a new netgear wndr3700, it has a traffic meter built in, but considering it's only forms of notification is cutting the internet off altogether or changing a green blinking LED to and orange blinking LED when the defined limit is reached, it's kinda useless. i just got it a couple months ago too, so buying a new router with better traffic monitoring isn't an option.i could put a net meter on each and every computer i have, then sum up their usage stats, but that would be a pain in the ass and wouldn't take my PS3 or WDTV media player into account, as little as they're used online.my prefered solution is to use an old laptop i hardly touch anymore and set it up as a gateway and share the internet connection or make it a proxy server. that way i could set up a net meter on just the one NIC on that to track my internet usage. modem -> laptop -> router -> LAN. the problem i have hear is forwarding ports from one NIC to the other so they can then get ditributed by the router, never tried this before, not sure how to go about it. right now it has XP home, but i can put 7 on it if that's better to work with.
I keep getting warning on bandwidth usage , I'm using a dir-615 routers xp on all machines . The one pc that i use to d/l with I have the torrent monitor on and shows little traffic. Ive heard of a few pieces of s/w but these require software to be installed on all boxes Id like to be able to monitor from one box if possible ??
View 2 Replies View RelatedI have an RV042 router and I'm looking to monitor the total upstream and downstream traffic from within the router.
I know there is tons of software that I can put on a network computer to monitor traffic, but is there any software that I can put on the router itself that will monitor the traffic from within the router?
I'd really like to be able to monitor DSL traffic on my X2000. SNMP is the logical way to do this; Looking at the source to the Management screen, it looks tantalizingly close, but the SNMP bits are commented out in the HTML.
View 4 Replies View RelatedBoth regular IP traffic and ICMP traffic are passing through the source port. C6509 provides the option of filtering vlan traffic during monitoring. But I don't have vlan traffic.
qa-c6509-c(config)#monitor session 1 filter ? vlan SPAN filter VLAN
So I applied an access-list which only allows icmp traffic to be sent out of the monitoring port. But it does not work.
I was previously using SDM for our Cisco 2811, and this past week installed CISCO Configuration Professional so I could have access to a bandwidth/traffic monitor.
I have successfully started the monitoring service and monitored traffic from within CCP, but it appears that if I turn off the computer I am using to monitor the traffic, it stops collecting data until I start CCP and the monitor up again.
Is there a way (maybe with IOS console commands) that I can have the monitor always running, so I can pull up, say, a week's worth of info at any time? Leaving the computer on all the time is not an option, and currently I have only a few days of data, then a big empty chunk, and then what I have collected since I started it back up today.
I have a Belkin G router F5D7230-4 (firmware version 8.01.07) and am trying to view stats on what is using our connection.We have a very low capacity, rural wireless broadband that our ISP tells us is maxed out all the time, even when we don't appear to be using any devices, so I'd like to view the traffic on our DHCP client list to see which device is using an excessive amount of bandwith and put a limit on its access.I don't see a statistics tab on the setup page, is there another place to look or does Belkin have an external program to do this?
View 1 Replies View RelatedI am trying to find a tool that will monitor the web traffic for one specific user. If it is capable of bundling it into a report that would also be a benefit. I have searched, but not come up with much aside from broad network monitoring tools. All that is really needed is to capture all the activity from http traffic for this one specific user/PC (since she uses the same PC all the time). We have a Sonicwall NSA 2400 as our internet filter, but I was not able to locate anything on there for specific user reporting.
View 2 Replies View RelatedHave a PC set up with a LINKSYS N2500 router. this is password protected for access to network I would like to monitor what one of my children is doing on the net - but they surf the net using an iPad
View 4 Replies View RelatedI just got optical fiber installed in my place which gives me great download speeds. Now my ISP has a monthly download limit of 120GB, after that I gotta pay overages.Now my setup is like this: Fiber modem (1 port) -> Linksys E3000 router (4 ports + wifi).All my gear is hooked up to the Linksys router (xbox, ps3, media center, office pc & 2 laptops).I would like to keep track of the total "internet" bandwidth use of all devices, but exclude the normal network traffic, as that of course I don't pay for.Is there something that I can install on the Linksys router that can keep track of that kinda of information? router (4 ports + wifi).
View 6 Replies View RelatedI have a WRT160N router. Are there any network software packages out "there" than will allow me to track the total traffic on this device?
View 1 Replies View RelatedI have an ASA 5520 and I'm using Solar winds real time interface tool to monitor the through put of the port. It seems I can never get it to use more than 100mb, where should I check?
I have run a sh int giga 0/1 and it shows the port is 1000mb full duplex and the I have also checked the other end where it plugs into the LAN and this also says the port is running at 1000mb full duplex.
Does one can use a Vacl to monitor network traffic on a nexus 3064 much like you can on the 6500s? If so, any performance tradeoffs or caveats to be aware of ?
View 2 Replies View RelatedI have a switch 4948, with version 12.2.31.sga4 ( I dont found bug about monitor session) and we try to made port mirroring with a monitor session from a VLAN and port belong at this VLAN have traffic input and output, but in the destination port, I always see it output traffic..
Global command
Red-127#sh run | in moni
monitor session 1 source vlan 1127
[Code].....
I have an RV042 router and I'm looking to monitor the total upstream and downstream traffic from within the router. I know there is tons of software that I can put on a netowrk computer to monitor traffic, but is there any software that I can put on the router itself that will monitor the traffic from within the router?
View 1 Replies View Relatedi would like to monitor traffic between multiple source ports to multiple destination ports on a nexus 7k. i lknow when you set up monitor session is between source and destination (laptop or traffic analyser) but is there a way i can set up between source and multiple destination ports and capture that traffic ?
View 3 Replies View Related