cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1624
Views
10
Helpful
7
Replies

Internet performace issue

mze
Level 1
Level 1

Short term internet problem

 

1 Accepted Solution

Accepted Solutions

First step in troubleshooting check ACL/NAT and Out interface 

asa# packet-tracer input Interface  tcp x.x.x.x 12345 y.y.y.y 80 detail 

do packet-tracer elect the interface and x.x.x.x and y.y.y.y to check the traffic if it pass use PBR or pass use default route.

For example 

access-list VRF01_To_ServiceProvider2 extended permit ip object-group VRF01_VLANS any<- use the VRF01_VLANS to specify the x.x.x.x and y.y.y.y will be any ip.


interface is VRF01-ASA-HANDOFF 

 

we must get the Out interface is which we config in PBR.

View solution in original post

7 Replies 7

Mark Elsen
Hall of Fame
Hall of Fame

 

 - You may find this document useful : https://techbloc.net/archives/1082

 M.



-- Let everything happen to you  
       Beauty and terror
      Just keep going    
       No feeling is final
Reiner Maria Rilke (1899)

ASA with PBR ? that meaning you have dual ISP connect to ASA ? 
can I see the config of PBR and if you use IP SLA also please can I see the config of IP SLA ?

Are the traffic is UDP ? if Yes try floating-timeout command 

Thanks for reply

 

   - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCux86596

 M.



-- Let everything happen to you  
       Beauty and terror
      Just keep going    
       No feeling is final
Reiner Maria Rilke (1899)

Its using the version 9.13(1) so doesnt seems to be this bug causing the issue . 

 

 - Can't be sure of that - from bug report -> Known Fixed Releases (0

  M.



-- Let everything happen to you  
       Beauty and terror
      Just keep going    
       No feeling is final
Reiner Maria Rilke (1899)

First step in troubleshooting check ACL/NAT and Out interface 

asa# packet-tracer input Interface  tcp x.x.x.x 12345 y.y.y.y 80 detail 

do packet-tracer elect the interface and x.x.x.x and y.y.y.y to check the traffic if it pass use PBR or pass use default route.

For example 

access-list VRF01_To_ServiceProvider2 extended permit ip object-group VRF01_VLANS any<- use the VRF01_VLANS to specify the x.x.x.x and y.y.y.y will be any ip.


interface is VRF01-ASA-HANDOFF 

 

we must get the Out interface is which we config in PBR.

Review Cisco Networking for a $25 gift card