Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About russ
Stats
Member since
07-02-2002
64
Posts
18
Helpful
1
Solution
Created by
russ
in Network Management
in Network Management
04-02-2012
12:13 PM
04-02-2012
12:13 PM
Customer has two core 4506 switches at HO site and two core 4506 switches at DR site. They have two L2 links connected in parallel between the sites to each of the core switches, one is an L2 DWDM (1Gbps) link and the other is an L2 VPLS (500Mbps) link. Both links are configured for L3 and L2 extended vlans. The VPLS link is currently configured for L2 extended vlans for the Firewall HA and DMZ vlans. Rather than risk STP for L2 redundancy, is it possible for EEM upon link detection failure of the VPLS link, to reconfigure the trunk port on the other core switches (DWDM link) to allow the Firewall extended vlans across the DWDM link and then unconfigure the trunk when the VPLS link is restored? Cheers
... View more
Labels:
Created by
russ
in Network Management
in Network Management
03-15-2012
04:38 AM
03-15-2012
04:38 AM
On occasions the GUI can take a long time to logon or not load at all. Just tried it now and it has taken approximatley 5 minutes to logon; I noticed the following proceeses have been shutdown by Administrator at the same reported time: 1299 and 1302 DataPurge DFMCTMStartup Process Details Process: 1299 Path: /opt/CSCOpx/bin/cwjava Flags: -cw:jre lib/jre -cp /opt/CSCOpx/MDC/tomcat/shared/lib/MICE.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/NATIVE.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/jdom.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/xalan.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/xerces.jar: /opt/CSCOpx/MDC/tomcat/common/lib/servlet.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/castor-0.9.5.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/castor-0.9.5-xml.jar: /opt/CSCOpx/lib/classpath:/opt/CSCOpx/www/classpath:www/classpath/vbjorb.jar:MDC/tomcat/webapps/upm/WEB-INF/classes: MDC/tomcat/webapps/upm/WEB-INF/lib/ctm.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/log4j.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/jep-3.2.0.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/struts.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmcmn.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmplr.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/xstream-1.1.1.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/xpp3.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmreports.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/cogs.jar -Dnm.jrm.jobid=1299 -Dnm.jrm.instanceid=1041 com.cisco.nm.upm.pollermgmt.jobs.SummarizationJob Startup: Started by operator command. Dependencies: jrm Process Details Process: 1302 Path: /opt/CSCOpx/bin/cwjava Flags: -cw:jre lib/jre -cp /opt/CSCOpx/MDC/tomcat/shared/lib/MICE.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/NATIVE.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/jdom.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/xalan.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/xerces.jar: /opt/CSCOpx/MDC/tomcat/common/lib/servlet.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/castor-0.9.5.jar: /opt/CSCOpx/MDC/tomcat/shared/lib/castor-0.9.5-xml.jar: /opt/CSCOpx/lib/classpath:/opt/CSCOpx/www/classpath:www/classpath/vbjorb.jar:MDC/tomcat/webapps/upm/WEB-INF/classes: MDC/tomcat/webapps/upm/WEB-INF/lib/log4j.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/jep-3.2.0.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/ags.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/xdi.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/ctm.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/deviceselector.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/mibmgr.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmcmn.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmplr.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmreports.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmreports.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/upmreports.jar: MDC/tomcat/webapps/upm/WEB-INF/lib/cogs.jar: MDC/tomcat/shared/lib/ogs-client.jar: MDC/tomcat/shared/lib/ogs-server.jar: MDC/tomcat/shared/lib/ogs-util.jar -Dnm.jrm.jobid=1302 -Dnm.jrm.instanceid=1041 com.cisco.nm.upm.pollermgmt.jobs.MaintenanceJob Startup: Started by operator command. Dependencies: jrm If the server is restarted via the CLI, everything is normal for a few days until GUI access again becomes slow or unresponsive. Any help troubleshooting would be appreciated!
... View more
Labels:
10-22-2010
11:22 AM
Does anyone know if the Anyconnect or IPSec client works on Windows CE? If not is there a free alternative client? Thanks!
... View more
Labels:
10-06-2010
03:20 AM
Hi Doug I've just come across a similar situation during a new install of 3750-X PoE switches, using 715w PSUs. Cisco had shipped C15 power cords but they were fitted with moulded European Continental plugs instead of UK plugs, so the customer thinking they were just standard power cords threw them away. It took two attempts before their supplier finally shipped the correct replacemment leads that fitted and this was the Cisco part number: CAB-7KACU= The same part number is used for 4900 switches and specific 6500 PSUs but documentation mentions it is rated at 10A and not 15A? Russ
... View more
06-30-2010
01:11 AM
Hi Adrian According to the documentation, the proxy server must be located on the inside of the ASA. In this case the Messagelabs proxy is external to the ASA and also doesn't support WCCP. Messagelabs say users that have ASA can install a ML client agent on the ISA server or use proxy-chaining. Client machines can also use the proxy setting in their browsers to point to Messagelabs, however this of course requires additional work and time for the customer to implement, which was not necessary with their old firewall.
... View more
05-27-2010
04:08 AM
Yeah, might try the AM option to request such a feature. Thanks for all of your help with this. Russ.
... View more
05-27-2010
03:52 AM
Hi Federico I agree, the customer is really happy with the ASA features, GUI etc its just a shame it can't support such a simple feature which could be a "show stopper". They were also planning to install a second ASA in place of the ClearPath at another site, which also needs to have this transparent proxy feature. Maybe its possible to request this feature from Cisco?
... View more
05-27-2010
03:32 AM
Hi Federico Thanks for the info, but the CSC only works with Trend and not MessageLabs, it would also be additional cost and using regular expressions is not a viable option. So it seems the ASA can not provide the same capability as some small cheap vendor firewall?
... View more
05-27-2010
03:13 AM
Hi Federico Thanks for the reply, I think configuring Websense server or Smart Filter server is not the same as a transparent proxy feature, also you have to specify an IP address rather than a URL for the servers. The ISA server has integrated Websense to filter URLs which the Clearpath FW then redirects to MessageLabs for malicious content filtering.
... View more
05-27-2010
02:18 AM
Hi We have just installed a Cisco 5510 for one of our customers in place of a ClearPath firewall. The problem is the old firewall had the capability of forwarding all Internal Web traffic to the MessageLabs external Web filtering service (proxy1.eu.webscanningservice.com) from the internal ISA server. The following commands on the ClearPath achieved this functionality: 1) cache_peer proxy1.eu.webscanningservice.com parent 3128 0 no-query 2) iptables -t nat -I LAN_dnat -p tcp --dport www -s 192.168.1.10 -j REDIRECT --to-port 8080 FYI - 1.10 is the internal ISA server. My understanding of how this works is that the old firewall had transparent proxy capabilty and redirects all Internal Web traffic to MessageLabs on port 3128. This means port 80 can be blocked on the firewall. Can anyone out there confirm whether or not the ASA has the same capabilty or suggest a workaround? Thanks!
... View more
Labels:
01-06-2010
01:22 AM
I've tried your suggestion but it has made no difference. The names of the IKE peers do appear in brackets under the ASDM VPN L2L configuration connection profiles and using the CLI command "sh cry is sa" but not under the ASDM VPN monitoring as they used to when running v7.24 (asdm 524).
... View more
01-05-2010
07:53 AM
Since upgrading ASAs from v7.24 to v8.21, the ASDM VPN L2L sessions no longer displays the names of the tunnel-group peers as defined by the name command. Works fine in v7.24. I found this a really useful feature to identify remote peers by name rather than IP address. Have Cisco made a backward step?
... View more
Labels:
Created by
russ
in Application Networking
in Application Networking
08-14-2009
12:59 AM
08-14-2009
12:59 AM
Excellent news. Thanks for the prompt response.
... View more
Created by
russ
in Network Management
04-02-2012
04-02-2012
Customer has two core 4506 switches at HO site and two core 4506
switches at DR site. They have two ...
Created by
russ
in Network Management
03-15-2012
03-15-2012
On occasions the GUI can take a long time to logon or not load at all.
Just tried it now and it has ...
10-22-2010
Does anyone know if the Anyconnect or IPSec client works on Windows
CE?If not is there a free altern...
10-06-2010
Hi DougI've just come across a similar situation during a new install of
3750-X PoE switches, using ...
05-27-2010
HiWe have just installed a Cisco 5510 for one of our customers in place
of a ClearPath firewall. The...
01-06-2010
I've tried your suggestion but it has made no difference.The names of
the IKE peers do appear in bra...
01-05-2010
Since upgrading ASAs from v7.24 to v8.21, the ASDM VPN L2L sessions no
longer displays the names of ...
Created by
russ
in Application Networking
08-14-2009
08-14-2009
Excellent news.Thanks for the prompt response.
Public Statistics
| Date Registered | 07-02-2002 01:57 AM |
| Date Last Visited | 08-31-2019 06:02 AM |
| Total Messages Posted | 64 |
| Total Helpful Votes Received | 18 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 15 | |
| 4 | |
| 5 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Mentor"){kind=icon}
