Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About 1pdemharter
Stats
Member since
06-10-2005
14
Posts
0
Helpful
1
Solution
Certifications
01-22-2020
07:16 AM
Hi, unfortunatelly doesn't work Compiled on Sun 25-Mar-18 17:29 PDT by builders System image file is "disk0:/asa992-lfbff-k8.SPA" Config file at boot was "startup-config" Starting check/repair pass. Starting verification pass. /dev/sdb1: 264 files, 8726/963327 clusters dosfsck(/dev/sdb1) returned 0 Mounting /dev/sdb1 dosfsck 2.11, 12 Mar 2005, FAT32, LFN There are differences between boot sector and its backup. Differences: (offset:original/backup) 65:01/00 Not automatically fixing this. Starting check/repair pass. Starting verification pass. mmhh .....
... View more
01-22-2020
03:36 AM
Hi, I found this too, but there is only asa992-lfbff-k8.SPA on SW download webpage available. I don't see version 9.9(2.39) oder .46? Expanded all. You said above a higher version would not work with firepower 6.2 ? Thx Peter
... View more
01-21-2020
10:49 AM
Hi, I did: ciscoasa# conf t ciscoasa(config)# no boot system disk0:/asa984-15-lfbff-k8.SPA ciscoasa(config)# no boot system disk0:/asa9-10-1-30-lfbff-k8.spa ciscoasa(config)# boot system flash:/asa984-15-lfbff-k8.SPA I got the following info (never saw this?) INFO: Converting flash:/asa984-15-lfbff-k8.SPA to disk0:/asa984-15-lfbff-k8.SPA ciscoasa(config)# . ????????? in my config I see again: boot system disk0:/asa984-15-lfbff-k8.SPA . (see above) some warnings .... Starting udev Configuring network interfaces... done. Populating dev cache dosfsck 2.11, 12 Mar 2005, FAT32, LFN There are differences between boot sector and its backup. Differences: (offset:original/backup) 65:01/00 Not automatically fixing this. Starting check/repair pass. now two warnings WARNING: Attribute already exists in the dictionary. WARNING: Attribute already exists in the dictionary. I deleted the 9.10 from disk0: same result ...
... View more
01-21-2020
10:16 AM
Hi, here it is ..... ciscoasa# show run boot boot system disk0:/asa984-15-lfbff-k8.SPA boot system disk0:/asa9-10-1-30-lfbff-k8.spa ciscoasa# show bootvar BOOT variable = disk0:/asa984-15-lfbff-k8.SPA;disk0:/asa9-10-1-30-lfbff-k8.spa Current BOOT variable = disk0:/asa984-15-lfbff-k8.SPA;disk0:/asa9-10-1-30-lfbff-k8.spa CONFIG_FILE variable = Current CONFIG_FILE variable =
... View more
01-21-2020
09:49 AM
Hi, after update the ASA image, I've noticed the following messages/warnings after reboot: (I use the following ASA image: asa984-15-lfbff-k8.SPA) Configuring network interfaces... done. Populating dev cache dosfsck 2.11, 12 Mar 2005, FAT32, LFN There are differences between boot sector and its backup. Differences: (offset:original/backup) 65:01/00 Not automatically fixing this. Starting check/repair pass. Starting verification pass. /dev/sdb1: 108 files, 848974/1919830 clusters dosfsck(/dev/sdb1) returned 0 Mounting /dev/sdb1 and Total NICs found: 14 i354 rev03 Gigabit Ethernet @ irq255 dev 20 index 08 MAC: 7488.bb56.3243 ivshmem rev03 Backplane Data Interface @ index 09 MAC: 0000.0001.0002 en_vtun rev00 Backplane Control Interface @ index 10 MAC: 0000.0001.0001 en_vtun rev00 Backplane Int-Mgmt Interface @ index 11 MAC: 0000.0001.0003 en_vtun rev00 Backplane Ext-Mgmt Interface @ index 12 MAC: 0000.0000.0000 en_vtun rev00 Backplane Tap Interface @ index 13 MAC: 0000.0100.0001 WARNING: Attribute already exists in the dictionary. sh module shows: (see below attached picture) I do not really found a solution to to fix it. Some recommend to do a ROMMON update? Does anyone has an idea, how to fix the it? It seems up to now, that the ASA works as before, but especially the boot sector thing makes me a little bit nervous. Many thx in advance Peter Peter
... View more
Labels:
05-14-2019
08:35 AM
Hi all, I have an ASA L2L ASA connection (including VPN Dial-In on both ASAs) up and running. Additionally Internet connection works fine. LAN 1----- ASA1 --------IPSec-VPN-L2L----- ASA2 ----- LAN 2. All works fine. Now I added a cisco 2960-x switch with an SVI Interface an 2 vlan to LAN 1. VLAN 10-----SVI ------LAN1(VLAN1) ------ASA1-----IPSecVPN-----ASA2-----LAN2. VLAN20------! From VLAN 10, 20, 1 I can ping the Internet, but from VLAN 10,20 I can't reach LAN2 behind ASA2. On ASA1 I extended my crypto-map ACL additionally to LAN1 with VLAN10,10 (Subnets) to allow it through the VPN Tunnel. Additionally I added to inside routes on ASA1 facing to the vlan10,20) route inside 10.0.10.0 and 10.20.0 to VLAN1 interface Swicht-SVI-ASA1 transfer subnet. I think routing between switch and asa1 works because Internet access is ok. It seems to me that the source traffic doesn't enter the VPN-tunnel. Interesting. Ping from an host in vlan1-ASA1 through the VPN tunnel to LAN2 works? Any ideas? many thx Peter
... View more
Labels:
03-17-2019
08:41 AM
Hi Jon,
changed the box with and now it works fine. Thx
kind regards
Peter
... View more
03-14-2019
09:36 AM
Hi,
thx for that hint, LTE is branded with now access to expert mode. Think I will change the box.
Peter
... View more
03-13-2019
11:22 AM
Hi,
I have a strange problem. My 5506-x is connected to Internet via outside interface and connected to a 2960-X switch. On the switch I configured 3 Vlans (SVIs). One (vlan 1) connects the asa inside-int and vlan 10 and 20 is used for end-systems. All works fine each can each other.
Internet ----- outside int ASA -inside --- vlan 1 --------- SVI 2960-x ---- vlan 10 ----- host
backup-int----| |-------vlan 20 ----- host
|
LTE-Router-------------|
No I add a mobile back via LTE Router via SLA monitoring.
Strange thing now, after disconnecting the Internet Router Interface, ASA inserted the backup as configured. I can ping the Internet from the ASA from the switch (can switch back and for both connection, all is fine), but as long as the LTE backup is up my host systems on vlan 10 and 20 cannot ping the Internet (from the hosts I can reach the inside int of the asa, but the it ends.
Any ideas what happens. I enclosed my configs as attachments.
Many thx in advance
Peter
... View more
Labels:
08-08-2018
04:55 AM
Hi Christian,
I have the same problem.
Telekom VDSL50 (Magenta) ---- Draytec Vigor VDSL Modem (works as Bridge, tagged 7) ---- ASA5506-X.
You said, that you have a config up an running. I don't get Internet accees (assume the Telekom Dial-In specifics like Kennung, Zugangsnummer, Mitbenutzer etc. are wrong set. Could you please provide me with your config.
Many thx in advance
Peter
... View more
06-10-2015
07:23 AM
Hi Andrew, first of all thx for your post on ra guardI just configured RA Guard on a 2960 Cat / Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 15.0(2)SE4. Using fake_router6 all works fine ... raguard works as expected... but using flood_router6 ... my subnet crashes ping fail etc., I see lots of drops on the interface (should be, I think) but also 99% CPU load. This behavoir seems to me strange .... because its not a problem of extension headers / fragmentation etc. Stopping flood_router6 all is fine again ....Any ideas? Thanks in advance Peter
... View more
01-22-2020
Hi, unfortunatelly doesn't work Compiled on Sun 25-Mar-18 17:29 PDT by
buildersSystem image file is ...
01-22-2020
Hi,I found this too, but there is only asa992-lfbff-k8.SPA on SW
download webpage available. I don't...
01-21-2020
Hi, I did: ciscoasa# conf tciscoasa(config)# no boot system
disk0:/asa984-15-lfbff-k8.SPAciscoasa(co...
01-21-2020
Hi, here it is ..... ciscoasa# show run bootboot system
disk0:/asa984-15-lfbff-k8.SPAboot system
dis...
01-21-2020
Hi, after update the ASA image, I've noticed the following
messages/warnings after reboot:(I use the...
Created by
1pdemharter
in Firewalls
05-14-2019
05-14-2019
Hi all, I have an ASA L2L ASA connection (including VPN Dial-In on both
ASAs) up and running. Additi...
03-14-2019
Hi, thx for that hint, LTE is branded with now access to expert mode.
Think I will change the box. P...
03-13-2019
Hi, I have a strange problem. My 5506-x is connected to Internet via
outside interface and connected...
08-08-2018
Hi Christian, I have the same problem. Telekom VDSL50 (Magenta) ----
Draytec Vigor VDSL Modem (works...
Public Statistics
| Date Registered | 06-10-2005 12:37 AM |
| Date Last Visited | 01-24-2020 05:36 AM |
| Total Messages Posted | 14 |
