CCE 507 stops forwarding traffic to internet

csanchez · ‎10-26-2004

Our CE (which is our proxy server) constantly stops forwarding traffic to the internet. The engine does not freeze or lock up because I can telnet into it and reload and everything is fine then. This has starting happening in the last two weeks. The engine is integraded with Websense filtering. Could I be experiencing hardware issues? I did recently upgraded websense to the latest version and also upgraded the PIX 515 Firewall IOS to the latest. I am thinking maybe upgrade the IOS on the engine. Any guidance would be appreciated. Thanks in advance.

seilsz · ‎10-27-2004

Can you provide some additionl information about the failure:

* What version of ACNS are you running?

* How often does the failure consition occur?

* Can you capture a 'sh tech' while the CE is not forwarding traffic?

* What do you see in the CE transaction log while the CE is not forwarding traffic?

~Zach

csanchez · ‎10-27-2004

I am new and a little confuse with this IOS and the command line. When I do a 'sh ver' it gives me a software version of 2.51. The failure is starting to occur three to four times a day now. I can see the output of the 'sh tech', but I am a little at a lost with what to look for. I am unable to see the whole log. Is it possible to save the configuration of this engine to a tftp server to another engine. Although the one engine that I want to replace the bad one with is running the ce507-cache-v3.1.1 software. How can I copy the configuration from a tftp server. I am not sure of the command. Thanks.

seilsz · ‎10-27-2004

Ok. So you're running the older cache software. You can view system events with:

sh events 65535 all

Can you post the output from a 'sh tech'?

csanchez · ‎10-28-2004

The last event was October 2004 in which I initiated a clear cache command. The one before that as dated June 2002. Attached is the output from the 'sh tech' command. Thanks again.

seilsz · ‎10-28-2004

Is this the entire output of the 'sh tech'? Looks like it got cut off in the middle.

~Zach

csanchez · ‎10-29-2004

It is cut off, I apologize. I have attached the whole output this time. Thanks.

seilsz · ‎10-29-2004

Nothing jumps out at me in the 'sho tech'. Can you capture the same output the next time the CE stops forwarding traffic?

~Zach

csanchez · ‎10-29-2004

Ok, I will.

Thanks.

csanchez · ‎11-12-2004

Apparently the version of Websense that I was running was not making the CE very happy. I upgraded to a new version and ever since the problem has not arise. But I am having one issue with the CE. There is one website that generates errors when going through the CE proxy server. Although when bypassing the proxy server(CE), there are no errors generated. It is only when going through the proxy that the error is generated. The error does not reflect a Websense blocking page. So it only leads me to believe that the problem is on the CE. I would like to upgrade the IOS on the CE to the latest software in an effort to resolve this. If I upgrade, should I be aware of any problems with the configuration not working after the upgrade. The device is a CE 507 with software version 2.51. Any history on this type of problem? Any help would be appreciated. I have pasted the exact error generated from the site. Thanks again.

Network Error

--------------------------------------------------------------------------------

The server yearbookavenue1.jostens.com returned an invalid response to your request for http://yearbookavenue1.jostens.com/cgi-bin/exe2004/year2004.exe?f_4194e967209

seilsz · ‎11-13-2004

We need to see the response being received by the CE to understand why you are getting the error page. Can you test with 'debug http head' turned on? The debug output will be written to syslog.

~Zach

seilsz · ‎11-13-2004

Well ... I tried to connect to the URL you are having problems and got a paged returned stating:

'Error - No Job Information supplied

You cannot bookmark these pages.'

Looking at the sniffer trace I noticed that the HTML for the page returned is incorrect. The page does not have beginning or tags (it does have the terminating tags).

I suspect the CE doesn't like this - and I don't know of a way to override this behavior.

~Zach

csanchez · ‎11-15-2004

Where you attempting to connect to the home page or the complete url that is specified on the error? I ask this because there is some authentication required to get to it. I am guessing that is probably why you got the Error. I will debug on my end and provide you with the log. Thanks.

seilsz · ‎11-15-2004

I was attempting to connect to the complete URL.

~Zach