topic Re: ASA 5515 - Internal Interfaces Down in Network Security

ASA 5515 - Internal Interfaces Down

Stephan Grohmann — Fri, 15 Mar 2019 09:12:52 GMT

Dear all,

I was wondering if you could give me some ideas about this issue.

We were alerted through our monitoring system that three interfaces on our ASA5515 (ASA 5515-X with SW) were having an issue:

- asa_mgmt_plane

- Internal-Data0/1

- mgmt_plane_int_tap

Each Interface reported: SNMP_EXCEPTION_NOSUCHINSTANCE

So I checked the ASA and noticed the two of the three interfaces were indeed down:

Interface Internal-Data0/0 "asa_mgmt_plane", is down, line protocol is down
Interface Internal-Data0/1 "", is down, line protocol is down

Interface Internal-Data0/2 "mgmt_plane_int_tap", is up, line protocol is up

We do not see any performance issues - at this stage.

Ah - we are running 9.8(3)18

Looking forward to hearing from you.

Greetings Stephan

Re: ASA 5515 - Internal Interfaces Down

balaji.bandi — Fri, 15 Mar 2019 10:23:34 GMT

Is this HA environment ? worth checking Physical cables make sure they are intact

Re: ASA 5515 - Internal Interfaces Down

Stephan Grohmann — Fri, 15 Mar 2019 11:53:02 GMT

Hi - It is HA setup indeed - but these three interfaces are logical, right?...

No cables involved here 🙂

Re: ASA 5515 - Internal Interfaces Down

balaji.bandi — Fri, 15 Mar 2019 12:37:21 GMT

Logical Bind to Physical Interface right, what is that interface status ?

what you see that physcail interface connected to switch (do you see Switch Logs, and ASA Logs )

Provide more Log information and how these device connected ?

Re: ASA 5515 - Internal Interfaces Down

Stephan Grohmann — Fri, 15 Mar 2019 13:28:44 GMT

Logical Bind to Physical Interface right, what is that interface status?

--> I do not think so in this instance...
-->Which interface exactly would you be interested in?

The ASA has several (routed) interfaces and a failover link of course. But look at the names:

- asa_mgmt_plane

- Internal-Data0/1

- mgmt_plane_int_tap

They all appear to be ASA internal logical interface - i.e. backplane/bus or CPU/Memory related.

thanks for your help

Greetings

Re: ASA 5515 - Internal Interfaces Down

balaji.bandi — Fri, 15 Mar 2019 19:55:18 GMT

Appologies, i read wrong orginally the one you posted.

Can you please post below output to understand better :

#show interface ip brief

# show interface detail| begin Internal-Data

Re: ASA 5515 - Internal Interfaces Down

Stephan Grohmann — Fri, 22 Mar 2019 11:13:17 GMT

Hello again,

sorry for the belated reply - I was traveling the last three days.

See the .txt attached.

Greetings Stephan

Re: ASA 5515 - Internal Interfaces Down

Stephan Grohmann — Mon, 01 Apr 2019 13:47:27 GMT

HI BB - I was wondering - did you manage to have a look at the .txt files i posted?

Or anyone else with a clever idea ?

Greetings Stephan

Re: ASA 5515 - Internal Interfaces Down

balaji.bandi — Mon, 01 Apr 2019 15:38:15 GMT

it Might have missed from radar.

you can ignore this interface, nothing will effect in your environment

So I checked the ASA and noticed the two of the three interfaces were indeed down:

Interface Internal-Data0/0 "asa_mgmt_plane", is down, line protocol is down
Interface Internal-Data0/1 "", is down, line protocol is down

Re: ASA 5515 - Internal Interfaces Down

Stephan Grohmann — Tue, 02 Apr 2019 06:56:56 GMT

?Hi BB,

thanks for your feedback - this is all very odd.

According to our Monitoring these interface only went down a couple of weeks ago...

Very odd - Like I said - we do not see any service impact...

It's more a matter of - I want to understand what happened...

Anyway... Guess we just delete them errors in our monitoring system..

Greetings Stephan