04-13-2011 05:12 PM - edited 03-11-2019 01:20 PM
Hi,
Hi,
I am having two dc switches with FWSM modules installed. DC switch1 FWSM (Ver 3.2(12) is wokring as active and Secondary DC switch2 FWSM (ver 3.2.(12i) s in standby mode.
From yesterday I am trying to login primary FWSM, It is accepting my username and credentials but prompting again for username please refer below
DXB-DC1>session slot 5 p 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.51 ... Open
User Access Verification
Warning: Authentication is enabled for system context. Use admin context credentials.
Username: managarajan
Password: ********
Username:
I can login to my secondary firewall without any issues.
DXB-DC2>session slot 5 p 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.51 ... Open
User Access Verification
Warning: Authentication is enabled for system context. Use admin context credentials.
Username: managarajan
Password: ********
Type help or '?' for a list of available commands.
DXB-FWSM1> en
Password: ***********
I can see all my data traffic is fine except not allowing me to login.
DXB-FWSM1# sh failover 
Failover On 
Failover unit Secondary
Failover LAN Interface: FO Vlan 70 (up)
Unit Poll frequency 1 seconds, holdtime 15 seconds
Interface Poll frequency 15 seconds
Interface Policy 50%
Monitored Interfaces 0 of 250 maximum
Config sync: active
Version: Ours 3.2(12), Mate 3.2(12)
Last Failover at: 00:09:10 UAE Feb 19 2010
    This host: Secondary - Standby Ready 
        Active time: 1208 (sec)
        admin Interface inside (10.10.96.2): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ1 (10.10.97.2): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ2 (10.10.98.2): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ3 (10.10.99.2): Normal (Not-Monitored)
        admin Interface outside (10.10.2.5): Normal (Not-Monitored)
        context-a Interface inside (10.10.128.2): Normal (Not-Monitored)
        context-a Interface CXA-ERP-APP (10.10.130.2): Normal (Not-Monitored)
        context-a Interface CXA-VIZ-APP (10.10.131.2): Normal (Not-Monitored)
        context-a Interface outside (10.10.2.21): Normal (Not-Monitored)
        context-b Interface INSIDE (10.10.160.2): Normal (Not-Monitored)
        context-b Interface CXB-ERP-DB (10.10.162.2): Normal (Not-Monitored)
        context-b Interface CXB-VIZ-DB (10.10.163.2): Normal (Not-Monitored)
        context-b Interface OUTSIDE (10.10.2.37): Normal (Not-Monitored)
        Other host: Primary - Active 
        Active time: 59186243 (sec)
        admin Interface inside (10.10.96.1): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ1 (10.10.97.1): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ2 (10.10.98.1): Normal (Not-Monitored)
        admin Interface ADMIN-DMZ3 (10.10.99.1): Normal (Not-Monitored)
        admin Interface outside (10.10.2.4): Normal (Not-Monitored)
        context-a Interface inside (10.10.128.1): Normal (Not-Monitored)
        context-a Interface CXA-ERP-APP (10.10.130.1): Normal (Not-Monitored)
        context-a Interface CXA-VIZ-APP (10.10.131.1): Normal (Not-Monitored)
        context-a Interface outside (10.10.2.20): Normal (Not-Monitored)
        context-b Interface INSIDE (10.10.160.1): Normal (Not-Monitored)
        context-b Interface CXB-ERP-DB (10.10.162.1): Normal (Not-Monitored)
        context-b Interface CXB-VIZ-DB (10.10.163.1): Normal (Not-Monitored)
        context-b Interface OUTSIDE (10.10.2.36): Normal (Not-Monitored)
Stateful Failover Logical Update Statistics
    Link : STATE Vlan 71 (up)
    Stateful Obj     xmit       xerr       rcv        rerr      
    General        7728076    0          3869499885 4         
    sys cmd      7728076    0          7728070    0         
    up time      0          0          0          0         
    RPC services      0          0          10387282   0         
    TCP conn     0          0          2243011595 0         
        UDP conn     0          0          1364688683 0         
    ARP tbl      0          0          243684257  4         
    Xlate_Timeout      0          0          0          0         
    AAA tbl      0          0          0          0         
    DACL         0          0          0          0         
    OSPF Area SeqNo     0          0          0          0        
    Logical Update Queue Information
              Cur     Max     Total
    Recv Q:     0     18     191072852
    Xmit Q:     0     0     7728076
DXB-FWSM1# 
Could you please help to resolve the issue.
Best Regards,
Nagarajan
04-25-2011 09:56 PM
Hello Mani,
it looks like this is a FWSM issue so moving to security domain. this is a Wireless domain.
thanks,
Vinay
04-26-2011 07:29 PM
Hello Mani,
can you paste in the running-config of the FWSM please.
 
					
				
				
			
		
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide