I have a 4507-R in production which constantly spits out the following log messages (also see attached): Feb 27 10:28:34.676 GMT: %AUDIT-5-RUN_CONFIG: Running Configuration changed. Hash: DF73ECD05BB4F88573B05A0C89E16F23 Feb 27 10:53:13.236 GMT: %AUDIT-1-FILE_ROLLOVER: Audit File Roll-over: 3 Feb 27 10:53:13.236 GMT: %AUDIT-5-RUN_CONFIG: Running Configuration changed. Hash: 0192D51F86DD339013527E8946F4AED6 Feb 27 10:58:09.527 GMT: %AUDIT-5-RUN_CONFIG: Running Configuration changed. Hash: 171BBA5FA70C775784425B107E306930 Feb 27 11:22:39.568 GMT: %AUDIT-5-RUN_CONFIG: Running Configuration changed. Hash: 29DE484FD5F2C24B6B6876A092477201 Feb 27 11:32:32.921 GMT: %AUDIT-5-RUN_CONFIG: Running Configuration changed. Hash: 1326587382BAC182963AB7B00139FF97 Feb 27 11:52:20.939 GMT: %AUDIT-5-RUN_CONFIG: Running Configuration changed. Hash: 04796F68897A26B16E60F587D04AFAA0 Here are the details of the router and its directory: Cisco IOS Software, Catalyst 4000 L3 Switch Software (cat4000-I5K91S-M), Version 12.2(25)EWA14, RELEASE SOFTWARE (fc1) Image text-base: 0x10000000, data-base: 0x115CE0AC ROM: 12.2(20r)EW1 Dagobah Revision 226, Swamp Revision 34 ROUTER uptime is 1 week, 5 days, 7 hours, 14 minutes Uptime for this control processor is 1 week, 5 days, 7 hours, 15 minutes System returned to ROM by power-on System restarted at 03:01:12 GMT Sun Feb 19 2012 System image file is "bootflash:" cisco WS-C4507R (MPC8245) processor (revision 4) with 524288K bytes of memory. Processor board ID FOX11290MTP MPC8245 CPU at 400Mhz, Supervisor V Last reset from PowerUp 511K bytes of non-volatile configuration memory. Configuration register is 0x2101 Directory of bootflash:/     1  -rwx    12939640  Nov 15 2008 19:33:04 +00:00  cat4000-i5k91s-mz.122-25.E WA14.bin 59244544 bytes total (46304776 bytes free) Config file compression is also enabled. No other 4507 is displaying these log messages. Has anyone seen this issue before and know how to resolve it? ... View more

Dear Cisco Forum, I am assisting with what is becoming a major issue in regards to their voice messaging solution. We are running Call Manager v7.1.3 with Unity 7.0(2) and are migrating to Exchange 2010. As what appears to be a common theme with these type of integrated solutions, there appears to be minimum knowledge of Exchange amongst the Voice team and vice-versa. Conducting my own tests - here is what is currently happening: Test 1) I leave a message on my extension calling from another extension - an email is received and MWI is activated on my phone. If I listen to my voicemail from Outlook or delete the message from my inbox, this deactivates my MWI as expected. Test 2) I leave a message on my DDI calling from a mobile phone - no email is received and no MWI is activated on my phone. If I dial into my voicemail no messages are present. For the last 3 weeks we have had failed results with Test 1 and receiving similar results as Test 2 although the only difference would be we would receive an email notification but no MWI. This issue has since been stabilised. Now we are experiencing major issues with Test 2 which is causing major concerns across the company as we are unaware of customers dialling in and leaving messages for us. I am unsure as to what to troubleshoot (being traditionally a data/firewall engineer) but I would like to take this oppotunity to learn and pass on the forum's experiences. What checks can i conduct and what tests can i suggest to the team? Your assistance would be appreciated as always. ... View more

Here is the issue. We have two companies currently merging together. Each has a core switch architecture consisting of a 3750 Stack. Traditionally they would have been connected via a DMZ Firewall infrastructure, like so: Company A LAN <> 3750-A-Stack <> Firewall A <> DMZ <> Firewall B <> 3750-B-Stack <> Company B LAN The companies have introduced a direct uplink between the Stacks on a VLAN 400. Static routes point between the stacks for connectivity for various common services. Company A LAN <> 3750-A-Stack <> 3750-B-Stack <> Company B LAN Both routes between Company A & B are in place and services are being migrated via static routes. Each company has its seperate EIGRP domain which are not redistributed into each other. All routing between the companies is conducted via static routes. As part of the inter-company email service integration, there was a requirement to provide connectivity between Company A's Exchange Server and Company B's Exchange Server. This connection was to be provisioned via the Firewalls/DMZ network and NOT via the direct link. Here are some useful addresses: Useful IPs Company A VLAN 400 IP Address - 172.17.0.9/22 Company B VLAN 400 IP Address - 172.17.0.11/22 Company A Internal Firewall Address - 172.17.0.43/22 Company B Internal Firewall Address - 10.0.10.1/24 Company A Exchange Server - 172.17.1.30/22 Company B Exchange Server - 10.3.185.19/25 The following static route was applied on Company B's stack: ip route 172.17.1.30 255.255.255.255 10.0.10.1 As soon as this static was introduced devices on the Company A LAN began receiving conflicting arp entries for the Company A Exchange Server. Some were receiving the correct MAC address (i.e. AAAA.AAAA.AAAA), but some were receiving the following MAC address - f025.72b6.e145. This MAC address is the virtual MAC for VLAN400 on Company B's Switch Stack. Vlan400 is up, line protocol is up   Hardware is EtherSVI, address is f025.72b6.e145 (bia f025.72b6.e145)   Description: Company A LAN   Internet address is 172.17.0.11/22 Removing the static route resolved the issue. I would like to know what the best way of resolving this issue is. Is this a common proxy-arp issue? If so, will turning proxy-arp off on VLAN 400 on Company B's stack fix the issue? What impact will this have on other services? VLAN 400 is the main VLAN for Company A. Company B just uses an address on VLAN 400 for interconnectivity. Whats the best way to resolve this problem? Your help would be appreciated. Regards Tony Riccardi ... View more

Cisco Community, Has anyone any good tips on how I can actively monitor the interfaces and overall status of 2 x ASA 5500s in an Active/Standby configuration? I can setup monitoring of the interfaces on the Active member but I'm not sure how to manage the Standby member? Your advise would be appreciated. ... View more

Cisco Community, Your assistance and experience in this matter would be hugely appreciated. My client has a requirement to apply Policy Based Routing in their 3750 Stack Switch environment. In order to allow this I need to reconfigure each of the 3 effected stacks to a SDM Routing Template. However, I am concerned about the upgrade process and the impact to existing features and services already in place on each of these stacks. There are 3 stacks that need upgraded. One of the stacks comprises of 2 x WS-C3750G-48TS switches. The other two stacks are comprised of 2 x WS-C3750G-24TS switches. All reside in the core of the network and provide the following L2 and L3 functions: spanning tree root for up to 20 VLANs eigrp routing multicast routing QoS policies spanning-tree rapid-pvst L2 and L3 2-port LACP etherchannels L3 SVI ports to WAN routers each switch is fully populated providing access to core production servers redistribution of local static routes via a configured route-map ntp services My question is, if I reconfigure the SDM Template from the current default template to the default routing template although I will gain PBR functionality will I lose any of the above functions? I also need to reconfigure the SDM template but attempt to offer zero-downtime. Can I apply the new template to one stack member at a time without having to bring the entire stack down during a reboot? There are CPU peaks of up to 70% on these switches (during moments of high traffic). What is the expected hit on CPU and memory resources under the new template? I am sifting through Cisco documentation but your real-life experiences and hands-on knowledge of the subject would be hugely appreciated. Thank you. ... View more

Cisco Support Forum, My client has an Oracle database server in a DMZ protected by a Cisco firewall. The application servers are on the corporate network, outside the firewall. The application server establishes a connection through the firewall on TCP1521 to the Oracle database server. The problem is this… some of the database queries that are run by the application server take over 15 hours to complete. During this time, there is no activity visible to the firewall and the TCP idle timer increments. Our idle timer is set to 1 hour after which the connection is dropped and the application server’s query goes unanswered. I am aware the DCD is only available on the PIX/ASA platforms from version 7.2+. Is there any other function or feature we can utilise to help alleviate the issue outlined above. ... View more