Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Hassan Chalabi
08-07-2019
Stats
Member since
05-16-2015
38
Posts
5
Helpful
2
Solutions
Created by
Hassan Chalabi
in Switching
in Switching
07-24-2018
05:42 AM
07-24-2018
05:42 AM
are you using any aaa servers for authentication? ie radius,ldap, tacacs
is snmp pooling restricted by access-list? what is the snmp version?
is vty restricted by access-list?
... View more
Created by
Hassan Chalabi
in VPN and AnyConnect
in VPN and AnyConnect
06-06-2018
08:41 AM
06-06-2018
08:41 AM
yes the peer is reachable, issue is intermittent, I am trying to isolate the issue before I contact the other side, they dont seem to communicate very well.
... View more
Created by
Hassan Chalabi
in VPN and AnyConnect
in VPN and AnyConnect
06-06-2018
08:09 AM
06-06-2018
08:09 AM
Hi,
this tunnel fails frequently, not sure what could cause, but here is the output of the debug
2 IKE Peer: 123.123.123.123 Type : user Role : responder Rekey : no State : MM_WAIT_MSG3
Jun 06 11:02:45 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:02:53 [IKEv1]IP = 123.123.123.123, Duplicate first packet detected. Ignoring packet. Jun 06 11:02:53 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:03:01 [IKEv1 DEBUG]IP = 123.123.123.123, IKE MM Responder FSM error history (struct &0x00007f6f922c08c0) <state>, <event>: MM_DONE, EV_ERROR-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent-->MM_SND_MSG2, EV_SND_MSG-->MM_SND_MSG2, EV_START_TMR-->MM_SND_MSG2, EV_RESEND_MSG-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent Jun 06 11:03:01 [IKEv1 DEBUG]IP = 123.123.123.123, IKE SA MM:5f35d57e terminating: flags 0x01000002, refcnt 0, tuncnt 0 Jun 06 11:03:01 [IKEv1 DEBUG]IP = 123.123.123.123, sending delete/delete with reason message Jun 06 11:03:29 [IKEv1]IP = 123.123.123.123, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 820 Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing SA payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, Oakley proposal is acceptable Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received NAT-Traversal ver 02 VID Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received NAT-Traversal ver 03 VID Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received NAT-Traversal RFC VID Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received Fragmentation VID Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, IKE Peer included IKE fragmentation capability flags: Main Mode: True Aggressive Mode: True Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing IKE SA payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, IKE SA Proposal # 1, Transform # 1 acceptable Matches global IKE entry # 14 Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, constructing ISAKMP SA payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, constructing NAT-Traversal VID ver RFC payload Jun 06 11:03:29 [IKEv1 DEBUG]IP = 123.123.123.123, constructing Fragmentation VID + extended capabilities payload Jun 06 11:03:29 [IKEv1]IP = 123.123.123.123, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:03:37 [IKEv1]IP = 123.123.123.123, Duplicate first packet detected. Ignoring packet. Jun 06 11:03:37 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:03:45 [IKEv1]IP = 123.123.123.123, Duplicate first packet detected. Ignoring packet. Jun 06 11:03:45 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:03:53 [IKEv1]IP = 123.123.123.123, Duplicate first packet detected. Ignoring packet. Jun 06 11:03:53 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:04:01 [IKEv1 DEBUG]IP = 123.123.123.123, IKE MM Responder FSM error history (struct &0x00007f6f8dd75bf0) <state>, <event>: MM_DONE, EV_ERROR-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent-->MM_SND_MSG2, EV_SND_MSG-->MM_SND_MSG2, EV_START_TMR-->MM_SND_MSG2, EV_RESEND_MSG-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent Jun 06 11:04:01 [IKEv1 DEBUG]IP = 123.123.123.123, IKE SA MM:ea0ba28a terminating: flags 0x01000002, refcnt 0, tuncnt 0 Jun 06 11:04:01 [IKEv1 DEBUG]IP = 123.123.123.123, sending delete/delete with reason message Jun 06 11:04:29 [IKEv1]IP = 123.123.123.123, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 820 Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing SA payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, Oakley proposal is acceptable Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received NAT-Traversal ver 02 VID Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received NAT-Traversal ver 03 VID Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received NAT-Traversal RFC VID Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing VID payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, Received Fragmentation VID Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, IKE Peer included IKE fragmentation capability flags: Main Mode: True Aggressive Mode: True Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, processing IKE SA payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, IKE SA Proposal # 1, Transform # 1 acceptable Matches global IKE entry # 14 Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, constructing ISAKMP SA payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, constructing NAT-Traversal VID ver RFC payload Jun 06 11:04:29 [IKEv1 DEBUG]IP = 123.123.123.123, constructing Fragmentation VID + extended capabilities payload Jun 06 11:04:29 [IKEv1]IP = 123.123.123.123, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:04:37 [IKEv1]IP = 123.123.123.123, Duplicate first packet detected. Ignoring packet. Jun 06 11:04:37 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:04:45 [IKEv1]IP = 123.123.123.123, Duplicate first packet detected. Ignoring packet. Jun 06 11:04:45 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:04:53 [IKEv1]IP = 123.123.123.123, Duplicate first packet detected. Ignoring packet. Jun 06 11:04:53 [IKEv1]IP = 123.123.123.123, IKE_DECODE RESENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 132 Jun 06 11:05:01 [IKEv1 DEBUG]IP = 123.123.123.123, IKE MM Responder FSM error history (struct &0x00007f6f87122290) <state>, <event>: MM_DONE, EV_ERROR-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent-->MM_SND_MSG2, EV_SND_MSG-->MM_SND_MSG2, EV_START_TMR-->MM_SND_MSG2, EV_RESEND_MSG-->MM_WAIT_MSG3, EV_TIMEOUT-->MM_WAIT_MSG3, NullEvent Jun 06 11:05:01 [IKEv1 DEBUG]IP = 123.123.123.123, IKE SA MM:3947d835 terminating: flags 0x01000002, refcnt 0, tuncnt 0 Jun 06 11:05:01 [IKEv1 DEBUG]IP = 123.123.123.123, sending delete/delete with reason message
... View more
- Tags:
- phase1
- vpn
- VPN Phase 1
Labels:
Created by
Hassan Chalabi
in Switching
in Switching
05-30-2018
01:19 PM
05-30-2018
01:19 PM
HI,
I am getting some weird alerts from solarwinds, any one has an explanation?
ALERT NAME
MESSAGE
TRIGGERING OBJECT
ACTIVE TIME
RELATED NODE
Hardware component is in warning or critical state
Hardware component is in warning or critical state
Ethernet3/3 Lane 1 Transceiver Receive Power Sensor
Ethernet3/3 is down (Link not connected)
admin state is up, Dedicated Interface
Hardware: 1000/10000 Ethernet, address: 5087.8944.c4be (bia 5087.8944.c4be)
MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, medium is broadcast
Port mode is fex-fabric
auto-duplex, auto-speed, media type is 10G
Beacon is turned off
Auto-Negotiation is turned on
Input flow-control is off, output flow-control is off
Auto-mdix is turned on
Rate mode is dedicated
Switchport monitor is off
EtherType is 0x8100
EEE (efficient-ethernet) : n/a
Last link flapped 00:03:53
Last clearing of "show interface" counters 10w5d
0 interface resets
Load-Interval #1: 30 seconds
30 seconds input rate 0 bits/sec, 0 packets/sec
30 seconds output rate 0 bits/sec, 0 packets/sec
input rate 0 bps, 0 pps; output rate 0 bps, 0 pps
Load-Interval #2: 5 minute (300 seconds)
300 seconds input rate 56 bits/sec, 0 packets/sec
300 seconds output rate 0 bits/sec, 0 packets/sec
input rate 56 bps, 0 pps; output rate 0 bps, 0 pps
RX
108892 unicast packets 0 multicast packets 0 broadcast packets
0 input packets 2496 bytes
0 jumbo packets 0 storm suppression packets
0 runts 0 giants 0 CRC/FCS 0 no buffer
0 input error 0 short frame 0 overrun 0 underrun 0 ignored
0 watchdog 0 bad etype drop 0 bad proto drop 0 if down drop
0 input with dribble 0 input discard
0 Rx pause
TX
108892 unicast packets 0 multicast packets 0 broadcast packets
0 output packets 0 bytes
0 jumbo packets
0 output error 0 collision 0 deferred 0 late collision
0 lost carrier 0 no carrier 0 babble 0 output discard
0 Tx pause
N7004-DC# show int e3/3 transceiver details
Ethernet3/3
transceiver is present
type is Fabric Extender Transceiver
name is CISCO-JDSU
part number is PLRXPL-VC-S43-CG
revision is B
serial number is JUR18520GK3
nominal bitrate is 10300 MBit/sec
Link length supported for 62.5/125um fiber is 10 m
Link length supported for 50/125um OM3 fiber is 100 m
cisco id is --
cisco extended id number is 4
cisco part number is 10-2566-02
cisco product id is FET-10G
cisco vendor id is V02
number of lanes 1
SFP Detail Diagnostics Information (internal calibration)
----------------------------------------------------------------------------
Current Alarms Warnings
Measurement High Low High Low
----------------------------------------------------------------------------
Temperature 35.39 C 75.00 C 5.00 C 70.00 C 10.00 C
Voltage 3.31 V 3.63 V 2.97 V 3.46 V 3.13 V
Current 6.24 mA 10.00 mA 2.59 mA 8.50 mA 3.00 mA
Tx Power -2.15 dBm 2.69 dBm -11.30 dBm -1.30 dBm -7.30 dBm
Rx Power -30.00 dBm -- 2.99 dBm -13.90 dBm -1.00 dBm -9.90 dBm
Transmit Fault Count = 0
----------------------------------------------------------------------------
Note: ++ high-alarm; + high-warning; -- low-alarm; - low-warning
... View more
Labels:
Created by
Hassan Chalabi
in Switching
in Switching
04-10-2018
11:36 AM
04-10-2018
11:36 AM
I couldnt do it remotely, had to go there break the stack, console in, load the bundle mode and restack it again, issue resolved, but i couldnt do it remotely without reloading the master which i cant do., thanks.
... View more
Created by
Hassan Chalabi
in Switching
in Switching
04-02-2018
12:40 PM
04-02-2018
12:40 PM
Thank you Reza,
I went through this document already, the example of converting is from Bundle to install, I need to make the change the other way around.
can you please provide an example on how to convert a stack member from install to bundle?
... View more
Created by
Hassan Chalabi
in Switching
in Switching
04-02-2018
12:10 PM
04-02-2018
12:10 PM
Hi,
I have Catalyst 3850 stack, master in Bundle and member in install mode.
3850s-47#reload slot 2 Stack is in Half ring setup; Reloading a switch might cause stack split Proceed with reload? [confirm] par-toll-3850s-47# Apr 2 18:00:52.836: %STACKMGR-1-RELOAD_REQUEST: 1 stack-mgr: Received reload request for switch 2, reason Reload Slot Command Apr 2 18:00:57.759: %STACKMGR-1-STACK_LINK_CHANGE: 1 stack-mgr: Stack port 1 on switch 1 is down Apr 2 18:00:57.759: %STACKMGR-6-SWITCH_REMOVED: 1 stack-mgr: Switch 2 has been removed from the stack. Apr 2 18:00:57.762: Starting SWITCH-DELETE sequence, switch 2 Apr 2 18:00:57.762: SWITCH-DELETE sequence complete, switch 2 Apr 2 18:04:27.408: %STACKMGR-1-STACK_LINK_CHANGE: 1 stack-mgr: Stack port 1 on switch 1 is up Apr 2 18:04:33.396: %STACKMGR-6-SWITCH_ADDED: 1 stack-mgr: Switch 2 has been added to the stack. Apr 2 18:04:40.897: %INSTALLER-6-AUTO_UPGRADE_NOT_SUPPORTED: 1 installer: The system is not running installed software. Auto upgrade for switch number 1 cannot be initiated Apr 2 18:04:40.897: %INSTALLER-6-AUTO_ADVISE_SW: 1 installer: Switch 2 running installed software has been Apr 2 18:04:40.897: %INSTALLER-6-AUTO_ADVISE_SW: 1 installer: added to the stack Apr 2 18:04:40.897: %INSTALLER-6-AUTO_ADVISE_SW: 1 installer: Switch 2 must be running bundled software Apr 2 18:04:40.897: %INSTALLER-6-AUTO_ADVISE_SW: 1 installer: in order to join the stack 3850s-47#show swi 3850s-47#show switch Switch/Stack Mac Address : 38ed.18aa.2400 - Local Mac Address Mac persistency wait time: Indefinite H/W Current Switch# Role Mac Address Priority Version State ------------------------------------------------------------ *1 Active 38ed.18aa.2400 15 V02 Ready 2 Member 84b5.17e6.d400 14 0 V-Mismatch
how can convert switch 2 from install to bundle mode remotely to resolve the V-Mismatch issue?
Thanks,
... View more
Labels:
Created by
Hassan Chalabi
in Routing
in Routing
08-25-2017
08:45 AM
08-25-2017
08:45 AM
in OSPF if router is point to point and the other is broadcast, routes can show in the database but not in table. can anyone please help understand this behaviour? why ospf doesnt like it? Ref: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/7112-26.html#anc5
... View more
- Tags:
- ospf
Labels:
05-03-2017
11:14 AM
did you find a solution? I have exactly the same problem, I am suspecting the xml file, but I am no ESX pro.
... View more
03-02-2017
12:02 PM
can you post packet tracer output?
run one from an inside ip icmp to 8.8.8.8 after you NAT to the secondary subnet.
something like:
ASA#packet-tracer input inside icmp 10.0.0.1 0 0 8.8.8.8
... View more
03-02-2017
10:04 AM
check the gateway of 123.123.123.192/26 if it is reachable, I am assuming this is a secondary subnet from the ISP that comes from the same interface of the edge router to the outside interface of the FW.
... View more
03-02-2017
09:03 AM
subnet (123.123.123.192/26) is public IP? is it known to your ISP?
... View more
03-02-2017
08:43 AM
quick question please.
When standby unit become active for any reason (of course except HW failure) , does it force its mate to reload?
more like when sec/stby becomes sec/act for any reason does the sec/act force pri/stby to reload? or the pri/stby remain working in monitor?
Thanks,
... View more
- Tags:
- #asa #failover
Labels:
Created by
Hassan Chalabi
in Switching
07-24-2018
07-24-2018
are you using any aaa servers for authentication? ie radius,ldap, tacacs
is snmp pooling restricted ...
Created by
Hassan Chalabi
in VPN and AnyConnect
06-06-2018
06-06-2018
yes the peer is reachable, issue is intermittent, I am trying to isolate
the issue before I contact ...
Created by
Hassan Chalabi
in VPN and AnyConnect
06-06-2018
06-06-2018
Hi, this tunnel fails frequently, not sure what could cause, but here is
the output of the debug 2 I...
05-30-2018
HI, I am getting some weird alerts from solarwinds, any one has an
explanation? ALERT NAME MESSAGE T...
Created by
Hassan Chalabi
in Switching
04-10-2018
04-10-2018
I couldnt do it remotely, had to go there break the stack, console in,
load the bundle mode and rest...
Created by
Hassan Chalabi
in Switching
04-02-2018
04-02-2018
Thank you Reza, I went through this document already, the example of
converting is from Bundle to in...
Created by
Hassan Chalabi
in Switching
04-02-2018
04-02-2018
Hi, I have Catalyst 3850 stack, master in Bundle and member in install
mode. 3850s-47#reload slot 2S...
Created by
Hassan Chalabi
in Routing
08-25-2017
08-25-2017
in OSPF if router is point to point and the other is broadcast, routes
can show in the database but ...
05-03-2017
did you find a solution? I have exactly the same problem, I am
suspecting the xml file, but I am no ...
03-02-2017
can you post packet tracer output? run one from an inside ip icmp to
8.8.8.8 after you NAT to the se...
03-02-2017
check the gateway of 123.123.123.192/26 if it is reachable, I am
assuming this is a secondary subnet...
Public Statistics
| Date Registered | 05-16-2015 11:24 AM |
| Date Last Visited | 08-07-2019 12:17 AM |
| Total Messages Posted | 38 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
.jpg "Hall of Fame Master"){kind=icon}
