About loc.nguyen

loc.nguyen · 10-04-2024

Hi,We upgraded a pair of ASAs from version 9.14.3.18 to version 9.18(4)40. After that, we could not SSH into the ASA. At the moment, we can access the firewall via the console.I turned on debugging on the ASA while I attempted to SSH. The log file in...

loc.nguyen · 07-10-2024

Hi,I tried to understand a spanning tree setting on an old switch so that I can move it to a new switch. The configuration on the old switch is as below:spanning-tree mode mstspanning-tree extend system-id!spanning-tree mst configurationname BACKBONE...

loc.nguyen · 07-02-2024

Hi,We have a VPN site to site tunnel between USA and Asia.The firewall in Asia can ping the Firewall in USA well, no packet loss.However, a Asia Server 10.89.100.5 ping a USA server (10.0.99.73 has packets loss. Packet capture ASP drops show somet...

loc.nguyen · 06-22-2024

Hi,I am moving config from old switch to new switches which are runing IOSXE.I tried copy the config below from old switch to new switch but it did not work. Could you help to explain?mls qosmls qos srr-queue output dscp-map queue 1 threshold 3 56mls...

loc.nguyen · 06-22-2024

Hi,I am working on replacing a switch stack to a new one.There is a section relate to QoS. I think the old switch has some configuration relates to QoS but it doesn't configure properly. Can I just ignore the config for QoS?Please advise. Below is t...

loc.nguyen · 10-14-2024

packet capture shows firewall reset the connection. I did try create new key and upgrade putty, it did not helpcolo-fw1/pri/act# show cap capin6 packets captured1: 13:37:19.791127 10.0.99.39.49044 > 10.0.99.250.22: S 2888070741:2888070741(0) win 2920...

loc.nguyen · 10-14-2024

Thanks.Unfortunately, our contract has expired, and we are in the process of renewing it. It will take some time.I tried all the suggestions, including upgrading my PuTTY to the latest version and changing the SSH settings.At the moment, I believe it...

loc.nguyen · 07-03-2024

The network team at ASA1 worked with its ISP and change routes for it to a better path. Problem is solved. Thanks for your help.

loc.nguyen · 07-02-2024

Nope, the drop in ASP-DROP is still there. 51: 19:25:17.180944 10.89.100.5 > 10.0.99.73 icmp: echo request Drop-reason: (ttl-exceeded) ttl exceeded, Drop-location: frame 0x000000aab4d031a8 flow (NA)/NA71: 19:25:22.168951 10.89.100.5 > 10.0.99.73 icmp...

loc.nguyen · 07-02-2024

Yes, I see replied from inside interface:colo-fw1/pri/act# show cap in | i 10.0.99.731: 12:13:40.132576 10.89.100.5 > 10.0.99.73 icmp: echo request2: 12:13:40.132714 10.0.99.73 > 10.89.100.5 icmp: echo reply3: 12:13:40.441505 10.89.100.5 > 10.0.99.73...

Member Since	‎06-01-2021 07:34 AM
Date Last Visited	‎10-14-2024 10:21 AM
Posts	92
Total Helpful Votes Received	21

User Statistics

User Activity

Could not ssh to ASA after upgrading OS from 9.14.3.18 to version 9.1

MST spanning-tree

ttl-exceeded- packet drop in Site to Site VPN tunnel

Qos on Cisco IOSXE

QoS on Cico Switches

Re: Could not ssh to ASA after upgrading OS from 9.14.3.18 to version

Re: Could not ssh to ASA after upgrading OS from 9.14.3.18 to version

Re: ttl-exceeded- packet drop in Site to Site VPN tunnel

Re: ttl-exceeded- packet drop in Site to Site VPN tunnel

Re: ttl-exceeded- packet drop in Site to Site VPN tunnel