internet disconnecting frequently in network--Urgent

[pvrbabu.net]

Hi,

In our network we are facing issue internet is fluctuating in overall network,i raised complaint in ISP they checked and said its our internal network problem and advised to check the firewall configuration.

In our environment internet landed in cisco 2800 series router and asa 5510 firewall between lan.pool of static ip's are used through static nat to local network for certain users and servers.

Last three days we are facing some kind of problem in our network internet is fluctuating in servers and static nated users.they all reported internet down for sometime after some minutes its working automatically,Usually i uesd ASDM to monitor logs and bandwidth today i noticed asdm is disconnected and error says lost connection to firewall after refreshing asdm sometimes its working

Please help me out of this issue

[ajay chauhan]

IF you have lost connectivity to ASDM means you have some issue in LAN or with ASA firewall.Frist of all i would suggest yyou to veirfy connectivity up to swicthes using ping and checking the logs then same thing with firewall. Also check the CPU utalization or STP related things.

Ty

[pvrbabu.net]

Hi Ajay,

Thanks for your quick reply Actually i'm able to ping the firewall ip in the time of error happen in ASDM then i didn't understand STP related things how to check that??

[Julio Garcia]

Ramesh,

can you confirm if your set up is .. ,  ISP>2811>ASA  , do you have any simple network diagram to show us.

do you have access to 2811 router -- can you send us a #sh log   from it?

[pvrbabu.net]

From the cisco 2811 i'm able reach other network constantly,after the firewall only problem

[hobbe]

Hi

Not to be rude or anything, but for this type of questions i would state that this is not the correct forum.

If you are in this type of need that it sounds then you should call a cisco consultant to help you out finding the problem.

I am not saying that we who are here do not want to help, we do!

But to me it sounds like you do not have the time to fix this in the timetable such a complex question takes to sort out on a forum like this.

So my best advice to you would be to contact a cisco consultant. He/She will help you fastest and most accurate to solve the issue at hand. Much faster than we can do here.

Ok you have problems from the cisco ASA and inbound to the switch.

what does the syslog say ?

if you have none then set one up.

what does the switches say ? dropped packets or lost links and so on

Are there any congestions (link utilisation more than 85%)

do you have a dmz ?

what version of the software of the 5510 ?

what make and model are the switches ?

any loops forming in the network ?

good luck

HTH

[mvsheik123]

Hi,

If you still experiencing the issue, I would start from the layer1. Check the physical cables from & to firewall like other members suggested. Please check both ends, and see if ports regestering any errors.

Thx

MS