cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
488
Views
0
Helpful
2
Replies

FWSM login issues

Hi,

Hi,

I am having two dc switches with FWSM modules installed. DC switch1 FWSM (Ver 3.2(12) is wokring as active and Secondary DC switch2 FWSM (ver 3.2.(12i) s in standby mode.

From yesterday I am trying to login primary FWSM, It is accepting my username and credentials but prompting again for username please refer below

DXB-DC1>session slot 5 p 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.51 ... Open


User Access Verification

Warning: Authentication is enabled for system context. Use admin context credentials.

Username: managarajan
Password: ********
Username:

I can login to my secondary firewall without any issues.

DXB-DC2>session slot 5 p 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.51 ... Open


User Access Verification

Warning: Authentication is enabled for system context. Use admin context credentials.

Username: managarajan
Password: ********
Type help or '?' for a list of available commands.
DXB-FWSM1> en
Password: ***********

I can see all my data traffic is fine except not allowing me to login.

DXB-FWSM1# sh failover
Failover On
Failover unit Secondary
Failover LAN Interface: FO Vlan 70 (up)
Unit Poll frequency 1 seconds, holdtime 15 seconds
Interface Poll frequency 15 seconds
Interface Policy 50%
Monitored Interfaces 0 of 250 maximum
Config sync: active
Version: Ours 3.2(12), Mate 3.2(12)
Last Failover at: 00:09:10 UAE Feb 19 2010
    This host: Secondary - Standby Ready
        Active time: 1208 (sec)
        admin Interface inside (10.10.96.2): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ1 (10.10.97.2): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ2 (10.10.98.2): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ3 (10.10.99.2): Normal (Not-Monitored)
        admin Interface outside (10.10.2.5): Normal (Not-Monitored)
        context-a Interface inside (10.10.128.2): Normal (Not-Monitored)
        context-a Interface CXA-ERP-APP (10.10.130.2): Normal (Not-Monitored)
        context-a Interface CXA-VIZ-APP (10.10.131.2): Normal (Not-Monitored)
        context-a Interface outside (10.10.2.21): Normal (Not-Monitored)
        context-b Interface INSIDE (10.10.160.2): Normal (Not-Monitored)
        context-b Interface CXB-ERP-DB (10.10.162.2): Normal (Not-Monitored)
        context-b Interface CXB-VIZ-DB (10.10.163.2): Normal (Not-Monitored)
        context-b Interface OUTSIDE (10.10.2.37): Normal (Not-Monitored)
        Other host: Primary - Active
        Active time: 59186243 (sec)
        admin Interface inside (10.10.96.1): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ1 (10.10.97.1): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ2 (10.10.98.1): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ3 (10.10.99.1): Normal (Not-Monitored)
        admin Interface outside (10.10.2.4): Normal (Not-Monitored)
        context-a Interface inside (10.10.128.1): Normal (Not-Monitored)
        context-a Interface CXA-ERP-APP (10.10.130.1): Normal (Not-Monitored)
        context-a Interface CXA-VIZ-APP (10.10.131.1): Normal (Not-Monitored)
        context-a Interface outside (10.10.2.20): Normal (Not-Monitored)
        context-b Interface INSIDE (10.10.160.1): Normal (Not-Monitored)
        context-b Interface CXB-ERP-DB (10.10.162.1): Normal (Not-Monitored)
        context-b Interface CXB-VIZ-DB (10.10.163.1): Normal (Not-Monitored)
        context-b Interface OUTSIDE (10.10.2.36): Normal (Not-Monitored)

Stateful Failover Logical Update Statistics
    Link : STATE Vlan 71 (up)
    Stateful Obj     xmit       xerr       rcv        rerr     
    General        7728076    0          3869499885 4        
    sys cmd      7728076    0          7728070    0        
    up time      0          0          0          0        
    RPC services      0          0          10387282   0        
    TCP conn     0          0          2243011595 0        
        UDP conn     0          0          1364688683 0        
    ARP tbl      0          0          243684257  4        
    Xlate_Timeout      0          0          0          0        
    AAA tbl      0          0          0          0        
    DACL         0          0          0          0        
    OSPF Area SeqNo     0          0          0          0       

    Logical Update Queue Information
              Cur     Max     Total
    Recv Q:     0     18     191072852
    Xmit Q:     0     0     7728076
DXB-FWSM1#

Could you please help to resolve the issue.

Best Regards,

Nagarajan

2 Replies 2

Vinay Sharma
Level 7
Level 7

Hello Mani,

it looks like this is a FWSM issue so moving to security domain. this is a Wireless domain.

thanks,

Vinay

Thanks & Regards

Syed Usaid K
Cisco Employee
Cisco Employee

Hello Mani,

can you paste in the running-config of the FWSM please.

Review Cisco Networking for a $25 gift card