Hi all, just ti let you know the problem has been fixed. I read somewhere on Cisco that the new (5500-X series) ASA's have a "double" power on sequence where they first power on the bootrom module and then power on the main board to complete the power on sequence and start the appliance. So it said that sometimes the sequence can get stuck between these two "power on's". What i did? I left the ASA off power for the weekend (it is an active/standby failover pair member so i took a small risk) and on Monday afternoon i replugged the power and voila!!! It works fine now. Thanks for the help everyone.
... View more
Hi all, during a maintenance window some colleague powered off an ASA 5525X by keeping the power button pushed until it powered down. When we tried to power it back on it does not come back. Unplugged and re-plugged the power cable and still no luck. It refuses to come back on although we tried leaving it to power up by itself or tried pressing the button for 3-10 seconds or push it repeatedly. When we put the power plug in the interfaces light up (which means that power is passed to them from the PSU so probably not a faulty PSU). Any ideas maybe???? |Anyone???
... View more
Hi all,
i was wondering if anyone could point me to a document containing the required information/prerequisites to upgrade my current ASA 5525-X firewalls to the newer Firepower releases.
The firewalls are covered by smart net contract until April 2019. They contain a software on chassis IPS module and they have no hard disks.
Thanks a lot in advance.
... View more
I tried everything. I talked to the ISP, i changed the mem modules, i changed a router (swapped for another 3845), as it seems good old CPU of 3845 is too small to handle modern BGP issues (or is faulty). Since the router is EoL i'll solve my issues with an ASR1001.
... View more
I tried everything. I talked to the ISP, i changed the mem modules, i changed a router (swapped for another 3845), as it seems good old CPU of 3845 is too small to handle modern BGP issues (or is faulty). Since the router is EoL i'll solve my issues with an ASR1001.
... View more
I have two blocks of IP addresses. Block 1 is a /28 given to me by my ISP where my current services reside. Block 2 is a /22 from RIPE which i need to advertise to my GBP peers. Block 2 is advertised fine and i have NO problem with it. My config snippet does not include the network staements because i have no problem with them.
... View more
FW blocking the incoming connections? No. The firewall is already working with the IP block i have from the ISP. BGP neighbor 6 hops away? ISP asked me to.
... View more
Unicorns!!!!!!!! No just kidding. I am trying to advertise our block of IP's on our ASN. Still though until our services are all migrated to the new block, the old one must still work.
... View more
a) It is a block of 16 IP addresses belonging to the ISP. I suppose they point their routers to our router IP address to find this /28.I do not advertise that subnet to the internet. b) Yes.In fact there is a firewall behind the router and it NAT's internal IP's to the real subnet. Plan is to migrate to the new subnet but the services must still work until then.
... View more
I got a config like yours except i have set interface on the route maps and i do not use the algorithm on cef. It's pretty quck. My config on your router would be no ip cef load-sharing algorithm include-ports source destination route-map ADSL0 permit 10 match ip address 11 or 12 14 set interface Dialer0 ! route-map ADSL1 permit 10 match ip address 11 or 12 14 set interface Dialer1 Hope it helps.
... View more
.jpg "Hall of Fame Community Legend"){kind=icon}
