About jmaxwellUSAF

jmaxwellUSAF · 02-07-2023

Hi.Please see attached pcap.I'm in a classic argument as to the root cause of a failing transmission. May you please confirm (or not) that the below successful OSI layer 3 communication is evidence that this communication failure is NOT network relat...

jmaxwellUSAF · 02-06-2023

I'm embarrassed to ask this, but I need to confirm...1. What is the difference between configuring a workstation endpoint with a /24 or /32 subnet mask?2. Does workstation endpoint 10.0.0.77/32 on network 10.0.0.0/24 receive its /24 network broadcast...

jmaxwellUSAF · 02-03-2023

(I searched this at Cisco & Google without satisfaction)Hello. I am troubleshooting symptom of sftp communication from internal server not reaching www address.I see in 4431 Router logs...*Feb 3 21:12:12.019: %HTTP-4-SERVER_CONN_RATE_EXCEED: Number o...

jmaxwellUSAF · 02-03-2023

Hi.I have known of the theoretical danger of crashing a device by executing logging commands, now I have experience with it as one of these commands (maybe "show logging" and or "terminal monitor") forced an ASA 5525 HA failover.Regarding the below c...

jmaxwellUSAF · 02-02-2023

GIVEN: Tunnel using local 1.1.1.1, and remote 2.2.2.2, is active between local LAN 172.16.5.0/24 and remote LAN 172.16.9.0/24GOAL: Inject EIGRP advertisement on local ASA1100, so that returning RESPONSE communication from local server 172.16.5.55 rea...

jmaxwellUSAF · 02-07-2023

I'm placing access lists on interfaces and verifying they are being hit by the interesting traffic. This troubleshooting technique is yielding success.I have CONFIRMED the interesting traffic is entering the 4431 incoming int.

jmaxwellUSAF · 02-07-2023

I have CONFIRMED the interesting traffic is exiting the 5525ASA.On the 4431, The CLI analyzer states that there is no zone based firewall detected.It is strange to me that on the 4431 "sh run all" doesn't list the access lists.There exist many access...

jmaxwellUSAF · 02-06-2023

4431 is router between ASA5525 and www. There is little info for me about this device. I do know there are multiple VRFs, and also ACLs. This network is configured less-than correctly. There are no ACLs directly on interfaces.

jmaxwellUSAF · 02-06-2023

"4431#show policy-map type inspect ?% Unrecognized command4431#show policy-map type ?access-control access-control specific policy-mapcontrol Control policy-map and statisticspacket-service Packet Service Policy Mapservice-...

jmaxwellUSAF · 02-06-2023

Ok, I'm going to execute this config. If I confirm task success I'll close this thread.Thank you!

Member Since	‎12-13-2022 02:05 PM
Date Last Visited	‎01-25-2023 12:06 AM
Posts	203
Total Helpful Votes Received	95

User Statistics

User Activity

Please verify that this pcap CONFIRMS there is no OSI layer 3 issue?

Correct workstation endpoint subnet mask?...

"%HTTP-4-SERVER_CONN_RATE_EXCEED: Number of connections per minute has

Which of these logging, debug commands might crash a device?

ASA1100 CLI EIGRP- config return tunneled route to remote server...

Re: "%HTTP-4-SERVER_CONN_RATE_EXCEED: Number of connections per m

Re: "%HTTP-4-SERVER_CONN_RATE_EXCEED: Number of connections per m

Re: "%HTTP-4-SERVER_CONN_RATE_EXCEED: Number of connections per m

Re: "%HTTP-4-SERVER_CONN_RATE_EXCEED: Number of connections per m

Re: ASA1100 CLI EIGRP- config return tunneled route to remote server..