Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About S.Srivas_2
Stats
Member since
10-29-2009
20
Posts
0
Helpful
0
Solutions
01-22-2015
05:40 AM
QoS Error: Sup2T, IOS15.1SY,6506-E, LAN Tengig Ethernet Module: Throws errors when QoS policy applied QoS Erroring: Please advice on the following. Sup2T, IOS15.1SY,6506-E, LAN Ethernet Module: Throws errors when QoS policy applied, (even at 5% total traffic) No errors when QoS not applied, (Testing with Xena Tester). Test indicates error on received end, when QoS applied and no errors when QoS not applied to Tengig interfaces. The following is the relevant config: ############# No errors when service-policy is not applied as below########## WAH-CE-6506E-02# ! interface TenGigabitEthernet2/1 description 8/0-Xena Test Source switchport switchport trunk allowed vlan 1,112,201-209 switchport mode trunk mtu 9216 platform qos vlan-based auto qos voip trust no cdp enable ! interface TenGigabitEthernet1/5 description 8/1-Xena Test Destination description CE to PE switchport switchport mode trunk switchport nonegotiate mtu 9216 platform qos vlan-based no cdp enable ############# Errors when QoS applied . service-policy IN on 2/1 is applied as below########## WAH-CE-6506E-02# ! interface TenGigabitEthernet2/1 description 8/0-Xena Test Source switchport switchport trunk allowed vlan 1,112,201-209 switchport mode trunk mtu 9216 platform qos vlan-based auto qos voip trust no cdp enable service-policy type lan-queuing input IN5-6506E !!!service-policy type lan-queuing output OUT5-6500E ! interface TenGigabitEthernet1/5 description 8/1-Xena Test Destination description CE to PE switchport switchport mode trunk switchport nonegotiate mtu 9216 platform qos vlan-based no cdp enable service-policy type lan-queuing input IN5-6506E service-policy type lan-queuing output OUT5-6500E end ################ policy-map type lan-queuing IN5-6506E class Q5-PREMIUM-RT bandwidth percent 30 class Q5-MANAGEMENT-CTL bandwidth percent 1 class Q5-ENHANCED1-CONF bandwidth percent 10 class Q5-ENHANCED2-STR bandwidth percent 2 class Q5-ENHANCED3-TDA bandwidth percent 10 class Q5-STANDARD1-BLK bandwidth percent 5 class class-default ! policy-map type lan-queuing OUT2-6500E <snip> //////////// sh ver Cisco IOS Software, s2t54 Software (s2t54-ADVENTERPRISEK9-M), Version 15.1(1)SY1, RELEASE SOFTWARE (fc5) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2013 by Cisco Systems, Inc. Compiled Wed 01-May-13 12:43 by prod_rel_team @@@@@@@@@@@@@@@@@ This question is posted also at https://communities.cisco.com/message/172733
... View more
Labels:
Created by
S.Srivas_2
in Other Collaboration Subjects
in Other Collaboration Subjects
03-06-2014
02:52 AM
03-06-2014
02:52 AM
Hi All, I'm serching for information on Cisco switch/router QoS and port configurations for Microsoft Services such as Lync, Polycom phones, mobile phones, PCs, Laptops, Tablets, BYOD, AD, Exchange, etc... It looks like Cisco IP phones etc are setup differently to MS services (such as CoS/DSCP etc...). Any pointers and suggestion is appriciated. Thanks S
... View more
Labels:
11-07-2013
09:08 AM
Further to above, Two ASA 5585-X in two different locations with inside and outside using 10G in Active/Standby. The inside switches also have 10G, so can pass traffic between firewalls. Thinking of putting statefull failover over a VLAN on the inside (10G) and Thinking or rather working out what 1G interfaces are available on ASA-5585-X SSP 20 to connect to the switch. Any pointers to identify available ports (i have no hardware handy at present). Also any thought on 1G port numbers on a SUP2T in the switch. Are the 3 x 1G ports all fibre based? What about ASA 1G ports (again no harware in hand to check SUP2T nor ASA 5585-X port details.) any pointers to relevant docs for ASA and Supervisor would be appriciated. SS
... View more
09-23-2013
09:33 AM
Dear Community. I'm trying to track some static routes via the outside interface and do not want to install a backup route when the static route fails. If tracking failed can the static route be removed from ASA firewall all together, which is redistributed into RIP. ref: Monitoring a Static or Default Route Regards Sinnathurai
... View more
Labels:
05-13-2013
06:13 AM
Both VFCs and FCOEs are up now. (There was an issu in binding to interfaces.) Still not reading the WWNs and MACs from B22/Qlogic/DellM1000e LACP is enabled. Vlan 1 is native Please let me know of any info on how to read WWN and MAC details.
... View more
05-12-2013
07:53 AM
Additional information below. When port-channel 3 is set to switchport mode fex-fabric the VFC changes to error disabled, but FcOE channels (1-15) changes to UP When port-channel 3 is set to switchport mode trunk, the VFC changes to UP, but FCoE channels changes to down.
... View more
05-12-2013
05:39 AM
Dear Experts, I'm trying to get the VFC up in B22-FEX blade in Dell whic is connecting to Nexus 5596UP. Could you take a look at this and help please. Attaching the config of 5596UP The message I get is # sh int vfc1033 vfc1033 is down (Error Disabled - VLAN L2 down on Eth interface) Bound interface is port-channel3 Hardware is Ethernet Port WWN is 24:08:00:2a:6a:0d:db:3f Admin port mode is F, trunk mode is on snmp link state traps are enabled Port vsan is 2 1 minute input rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 1 minute output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 0 frames input, 0 bytes 0 discards, 0 errors 0 frames output, 0 bytes 0 discards, 0 errors last clearing of "show interface" counters Wed Mar 4 10:27:35 2009 ! Ethernet1/3 is up Dedicated Interface Belongs to Po3 ! port-channel3 is up Hardware: Port-Channel, address: 002a.6a0d.db0a (bia 002a.6a0d.db0a) Description: SIT_DellB22_C1 MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA Port mode is fex-fabric
... View more
Labels:
05-11-2013
05:36 PM
Two config files and one diagram attached. We have two Cisco B22 fabric extenders in our M1000e chassis, and are single homed to the two Cisco Nexus 5596UP, with 2 links on each switch. We are unable to see the WWN’s of the servers in the blade chassis from Nexus switches. [sh flogi database] We also experienced the VFC interface (eg 103/1/1) appear with FEX-FABRIC mode but not in Trunk mode. Eth1/3 is FCoE up, which is the only member of Port-channel 3 (Nexus1), but PoCh 3 is FCoE is down. VFC1033 are down on both Nexus1 and Nexus2. Strangely, with my earlier configs the VFCs were in VSAN 2, but now VFCs are in VSAN 1, even though configured to be in VSAN 2. Configuration from Nexus1 and Nexus2 are attached. Notes on current troubleshooting info is given below. Please note when I changed the uplink Po3 to Trunk, from FEX-Fabric, the ErrorDisabled message has gone however in “sh int vfs 1033” showing as hardware Ethernet, where I expect Hardware virtual fibre channel. N5KMR2E1-2# sh int vfc1033 vfc1033 is down (Error Disabled - VLAN L2 down on Eth interface) Bound interface is port-channel4 Hardware is Ethernet Port WWN is 24:08:00:2a:6a:14:0f:3f Admin port mode is F, trunk mode is on snmp link state traps are enabled Port vsan is 1 1 minute input rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 1 minute output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 0 frames input, 0 bytes 0 discards, 0 errors 0 frames output, 0 bytes 0 discards, 0 errors last clearing of "show interface" counters never N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# sh int vfc1033 vfc1033 is down (Error Disabled - VLAN L2 down on Eth interface) Bound interface is port-channel4 Hardware is Ethernet Port WWN is 24:08:00:2a:6a:14:0f:3f Admin port mode is F, trunk mode is on snmp link state traps are enabled Port vsan is 1 1 minute input rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 1 minute output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 0 frames input, 0 bytes 0 discards, 0 errors 0 frames output, 0 bytes 0 discards, 0 errors last clearing of "show interface" counters never N5KMR2E1-2# ^C N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# sh int fcoe Ethernet1/1 is FCoE UP Ethernet1/2 is FCoE UP Ethernet1/3 is FCoE UP Ethernet1/4 is FCoE UP Ethernet1/5 is FCoE down Ethernet1/6 is FCoE down Ethernet1/7 is FCoE down Ethernet1/8 is FCoE down Ethernet1/9 is FCoE down Ethernet1/10 is FCoE down Ethernet1/11 is FCoE UP Ethernet1/12 is FCoE UP Ethernet1/13 is FCoE UP Ethernet1/14 is FCoE down Ethernet1/15 is FCoE down Ethernet1/16 is FCoE down Ethernet1/17 is FCoE down Ethernet1/18 is FCoE down Ethernet1/19 is FCoE down Ethernet1/20 is FCoE down Ethernet1/21 is FCoE down Ethernet1/22 is FCoE down Ethernet1/23 is FCoE down Ethernet1/24 is FCoE down Ethernet1/25 is FCoE down Ethernet1/26 is FCoE down Ethernet1/27 is FCoE down Ethernet1/28 is FCoE down Ethernet1/29 is FCoE down Ethernet1/30 is FCoE down Ethernet1/31 is FCoE down Ethernet1/32 is FCoE down Ethernet1/33 is FCoE down Ethernet1/34 is FCoE down Ethernet1/35 is FCoE down Ethernet1/36 is FCoE down Ethernet1/37 is FCoE down Ethernet1/38 is FCoE down Ethernet1/39 is FCoE down Ethernet1/40 is FCoE down port-channel1 is FCoE down port-channel4 is FCoE down port-channel11 is FCoE down port-channel32 is FCoE UP Ethernet104/1/1 is FCoE down Ethernet104/1/2 is FCoE down Ethernet104/1/3 is FCoE down Ethernet104/1/4 is FCoE down Ethernet104/1/5 is FCoE down Ethernet104/1/6 is FCoE down Ethernet104/1/7 is FCoE down Ethernet104/1/8 is FCoE down Ethernet104/1/9 is FCoE UP Ethernet104/1/10 is FCoE UP Ethernet104/1/11 is FCoE UP Ethernet104/1/12 is FCoE UP Ethernet104/1/13 is FCoE UP Ethernet104/1/14 is FCoE UP Ethernet104/1/15 is FCoE UP Ethernet104/1/16 is FCoE down N5KMR2E1-2# ^C N5KMR2E1-2# N5KMR2E1-2# sh int eth1/3 Ethernet1/3 is up Dedicated Interface Belongs to Po4 Hardware: 1000/10000 Ethernet, address: 002a.6a14.0f0a (bia 002a.6a14.0f0a) Description: UAT FEX-B22 DEll_C2-1 MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA Port mode is fex-fabric full-duplex, 10 Gb/s, media type is 10G Beacon is turned off Input flow-control is off, output flow-control is off Rate mode is dedicated Switchport monitor is off EtherType is 0x8100 Last link flapped 01:05:26 Last clearing of "show interface" counters never 30 seconds input rate 13952 bits/sec, 1 packets/sec 30 seconds output rate 2512 bits/sec, 1 packets/sec Load-Interval #2: 5 minute (300 seconds) input rate 14.08 Kbps, 1 pps; output rate 2.05 Kbps, 0 pps RX 6623 unicast packets 1288 multicast packets 1 broadcast packets 7912 input packets 5853743 bytes 2497 jumbo packets 0 storm suppression bytes 0 runts 0 giants 0 CRC 0 no buffer 0 input error 0 short frame 0 overrun 0 underrun 0 ignored 0 watchdog 0 bad etype drop 0 bad proto drop 0 if down drop 0 input with dribble 0 input discard 0 Rx pause TX 4124 unicast packets 1365 multicast packets 0 broadcast packets 5489 output packets 1331087 bytes 0 jumbo packets 0 output errors 0 collision 0 deferred 0 late collision 0 lost carrier 0 no carrier 0 babble 0 output discard 0 Tx pause 1 interface resets N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# sh int po3 Invalid range at '' marker. N5KMR2E1-2# sh int po4 port-channel4 is up Hardware: Port-Channel, address: 002a.6a14.0f0a (bia 002a.6a14.0f0a) Description: UAT_DellB22 MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA Port mode is fex-fabric full-duplex, 10 Gb/s Input flow-control is off, output flow-control is off Switchport monitor is off EtherType is 0x8100 Members in this channel: Eth1/3 Last clearing of "show interface" counters never 30 seconds input rate 13464 bits/sec, 1 packets/sec 30 seconds output rate 2216 bits/sec, 0 packets/sec Load-Interval #2: 5 minute (300 seconds) input rate 14.12 Kbps, 1 pps; output rate 2.09 Kbps, 0 pps RX 6672 unicast packets 1298 multicast packets 1 broadcast packets 7971 input packets 5899403 bytes 2517 jumbo packets 0 storm suppression bytes 0 runts 0 giants 0 CRC 0 no buffer 0 input error 0 short frame 0 overrun 0 underrun 0 ignored 0 watchdog 0 bad etype drop 0 bad proto drop 0 if down drop 0 input with dribble 0 input discard 0 Rx pause TX 4153 unicast packets 1375 multicast packets 0 broadcast packets 5528 output packets 1340587 bytes 0 jumbo packets 0 output errors 0 collision 0 deferred 0 late collision 0 lost carrier 0 no carrier 0 babble 0 output discard 0 Tx pause 1 interface resets N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# N5KMR2E1-2# sh flogi database -- INTERFACE VSAN FCID PORT NAME NODE NAME -- fc1/41 2 0x3f0000 21:00:00:1b:32:90:19:44 20:00:00:1b:32:90:19:44 fc1/43 2 0x3f01ef 50:06:01:61:3c:e0:0b:d2 50:06:01:60:bc:e0:0b:d2 fc1/44 2 0x3f02ef 50:06:01:69:3c:e0:0b:d2 50:06:01:60:bc:e0:0b:d2 fc1/45 2 0x3f03ef 50:06:01:69:46:e0:28:57 50:06:01:60:c6:e0:28:57 fc1/46 2 0x3f04ef 50:06:01:6d:46:e0:28:57 50:06:01:60:c6:e0:28:57 fc1/47 2 0x3f05ef 50:06:01:61:46:e0:28:57 50:06:01:60:c6:e0:28:57 fc1/48 2 0x3f06ef 50:06:01:65:46:e0:28:57 50:06:01:60:c6:e0:28:57 Total number of flogi = 7. N5KMR2E1-2# mce style="width: 313px;" cellpadding="0" cellspacing="0" align="left" height="240"> mce style="text-align: justify;">
... View more
05-11-2013
08:32 AM
Hi Leo and others, Is the Nexus version i have is suitable for B22 FEX for Dell? Asking this because of the following web info: Support for DELL FEX Added support for the Cisco Nexus B22 DELL fabric extender. http://www.cisco.com/en/US/docs/switches/datacenter/nexus5500/sw/release/notes/Rel_6_0_2_N1_1/Nexus5500_Release_Notes_6_0_2_N1.html
... View more
05-10-2013
07:28 AM
Dear experts, I have the following errordisabled state on VFc as below. (Trying to get FCoE up and running for FC and automatically read WWN from Dell blades (M1000e) with two Nexus B22 FEX for Dell) The Eth interfaces are showiing N5KMR2E1-1(config-if)# sh int vfc1033 vfc1033 is down ( Error disabled ) !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Why Bound interface is Ethernet1/3 Hardware is Ethernet !!!!!!!!!!!!!!!!!!!!!!!!!!!!!! should this be VFC Port WWN is 24:08:00:2a:6a:0d:db:3f Admin port mode is F, trunk mode is on snmp link state traps are enabled Port vsan is 2 1 minute input rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 1 minute output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec 0 frames input, 0 bytes 0 discards, 0 errors 0 frames output, 0 bytes 0 discards, 0 errors last clearing of "show interface" counters Mon Mar 2 12:32:00 2009 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! N5KMR2E1-1# sh fcoe Global FCF details FCF-MAC is 00:2a:6a:0d:db:00 FC-MAP is 0e:fc:00 FCF Priority is 128 FKA Advertisement period for FCF is 8 seconds VFC MAC details vfc1033 FCF-MAC is 00:2a:6a:0d:db:0a N5KMR2E1-1# sh fcoe database ------------------------------------------------------------------------------- INTERFACE FCID PORT NAME MAC ADDRESS ------------------------------------------------------------------------------- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!------------------------------ nothing is displayed here- ---------why? N5KMR2E1-1# N5KMR2E1-1# sh int port-channel 3 fex-intf Fabric FEX Interface Interfaces --------------------------------------------------- Po3 Eth103/1/1 Eth103/1/2 Eth103/1/3 Eth103/1/4 Eth103/1/5 Eth103/1/6 Eth103/1/7 Eth103/1/8 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! should this show the FiberChennel from Dell VM NICs???????????????/ N5KMR2E1-1# N5KMR2E1-1# sh int status -------------------------------------------------------------------------------- Port Name Status Vlan Duplex Speed Type -------------------------------------------------------------------------------- Eth1/1 VPC Peer Link connected trunk full 10G SFP-H10GB-C Eth1/2 VPC Peer Link connected trunk full 10G SFP-H10GB-C Eth1/3 SIT FEX-B22 DEll_C connected 1 full 10G SFP-H10GB-C ------------ why only 1, not trunk??? (connects to FEX) Eth1/4 SIT FEX-B22 DEll_C disabled 1 full 10G SFP-H10GB-C ------------ why only 1, not trunk??? Eth1/5 -- sfpAbsent 1 full 10G --
... View more
Labels:
04-22-2013
12:49 PM
It works. The config was OK. The end stations (Laptop and Switch/Router) routing was not accurate. It is now fied. Thank you Jouni Foress for all the help..
... View more
04-19-2013
07:39 AM
Hi Jouni, We have just tried that, but still not working. Any other suggestion?
... View more
04-19-2013
07:05 AM
Thank you for the above. I changed the security levels. For now I am interested in passing traffic through and will look at the static NAT later. The problem I have at the moment, if I ping from outside PC (gatewway) via interface inside-sit local link to router 10.112.64.222, it does not work, telnet does not work too. PC(xxx.44.38.41)-----(outside XXX.44.38.44)------>ASA------(inside_SIT 10.112.64.1)---------->router (10.112.64.222) Strangely, I can ping from the outside pc (.41) to outside interface (.44) but ASA cannot ping the outside PC (.41)! The new config listing is given below. Appreciate your help on this. sh runn : Saved : ASA Version 8.6(1)2 ! hostname ciscoasa enable password /Omn2PFOBnGlk6iW encrypted passwd 2KFQnbNIdI.2KYOU encrypted names ! interface GigabitEthernet0/0 nameif OUTSIDE security-level 0 ip address XXX.44.38.44 255.255.255.248 ! interface GigabitEthernet0/1 shutdown nameif OUTSIDE_notyet security-level 5 no ip address ! interface GigabitEthernet0/2 nameif INSIDE_SIT security-level 100 ip address 10.112.64.1 255.255.248.0 ! <--- More ---> interface GigabitEthernet0/3 shutdown nameif INSIDE_UAT_notyet security-level 95 no ip address ! interface GigabitEthernet0/4 shutdown no nameif security-level 90 no ip address ! interface GigabitEthernet0/5 shutdown no nameif no security-level no ip address ! interface Management0/0 nameif NetMGT security-level 50 ip address 192.168.1.1 255.255.255.0 management-only ! <--- More ---> boot system disk0:/asa861-2-smp-k8.bin ftp mode passive object network obj-Switch-10.98.74.2 host 10.98.74.2 object network obj-HMC-1-10.74.132.22 host 10.74.132.22 object network obj-CSM-10.74.132.21 host 10.74.132.21 object-group network DEFAULT-PAT-SOURCE network-object 10.74.132.0 255.255.255.0 network-object 10.112.64.0 255.255.248.0 access-list ALL extended permit ip any any access-list ALL extended permit icmp any any access-list ALL extended permit tcp any any access-list ALL extended permit udp any any access-list ALL extended permit icmp any any echo access-list ALL extended permit icmp any any echo-reply pager lines 24 logging asdm informational mtu OUTSIDE 1500 mtu OUTSIDE_notyet 1500 mtu INSIDE_SIT 1500 mtu INSIDE_UAT_notyet 1500 mtu NetMGT 1500 <--- More ---> icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-66114.bin no asdm history enable arp timeout 14400 ! object network obj-Switch-10.98.74.2 nat (INSIDE_SIT,OUTSIDE) static YYY.111.27.8 object network obj-HMC-1-10.74.132.22 nat (INSIDE_SIT,OUTSIDE) static YYY.111.27.9 object network obj-CSM-10.74.132.21 nat (INSIDE_SIT,OUTSIDE) static YYY.111.27.10 ! nat (INSIDE_SIT,OUTSIDE) after-auto source dynamic DEFAULT-PAT-SOURCE interface access-group ALL in interface OUTSIDE access-group ALL out interface OUTSIDE access-group ALL in interface INSIDE_SIT access-group ALL out interface INSIDE_SIT access-group ALL in interface NetMGT access-group ALL out interface NetMGT route OUTSIDE 0.0.0.0 0.0.0.0 XXX.44.38.41 1 route INSIDE_SIT 10.74.132.0 255.255.255.0 10.112.64.222 1 route INSIDE_SIT 10.98.74.0 255.255.255.0 10.112.64.222 1 route INSIDE_SIT YYY.111.27.0 255.255.255.248 10.112.64.222 1 timeout xlate 3:00:00 <--- More ---> timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 dynamic-access-policy-record DfltAccessPolicy user-identity default-domain LOCAL http server enable http 192.168.1.0 255.255.255.0 NetMGT no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart telnet timeout 5 ssh timeout 5 console timeout 0 dhcpd address 192.168.1.2-192.168.1.254 NetMGT dhcpd enable NetMGT ! threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ssl encryption des-sha1 webvpn <--- More ---> username cisco password 3USUcOPFUiMCO4Jk encrypted ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum client auto message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip <--- More ---> inspect netbios inspect tftp inspect ip-options ! service-policy global_policy global prompt hostname context no call-home reporting anonymous Cryptochecksum:e5787db25a923493187605b7393efe70 : end ciscoasa# ciscoasa# ciscoasa# ciscoasa#
... View more
04-19-2013
05:59 AM
Please find listed is the config below ciscoasa# sh runn : Saved : ASA Version 8.6(1)2 ! hostname ciscoasa enable password /Omn2PFOBnGlk6iW encrypted passwd 2KFQnbNIdI.2KYOU encrypted names ! interface GigabitEthernet0/0 nameif OUTSIDE security-level 10 ip address XXX.44.38.44 255.255.255.248 ! interface GigabitEthernet0/1 shutdown nameif OUTSIDE_notyet security-level 99 no ip address ! interface GigabitEthernet0/2 nameif INSIDE_SIT security-level 0 ip address 10.112.64.1 255.255.248.0 ! <--- More ---> interface GigabitEthernet0/3 shutdown nameif INSIDE_UAT_notyet security-level 1 no ip address ! interface GigabitEthernet0/4 shutdown no nameif no security-level no ip address ! interface GigabitEthernet0/5 shutdown no nameif no security-level no ip address ! interface Management0/0 nameif NetMGT security-level 50 ip address 192.168.1.1 255.255.255.0 management-only ! <--- More ---> boot system disk0:/asa861-2-smp-k8.bin ftp mode passive object network obj-Switch-10.98.74.2 host 10.98.74.2 object network obj-HMC-1-10.74.132.22 host 10.74.132.22 object network obj-CSM-10.74.132.21 host 10.74.132.21 access-list ALL extended permit ip any any access-list ALL extended permit icmp any any access-list ALL extended permit tcp any any access-list ALL extended permit udp any any access-list ALL extended permit icmp any any echo access-list ALL extended permit icmp any any echo-reply pager lines 24 logging asdm informational mtu OUTSIDE 1500 mtu OUTSIDE_notyet 1500 mtu INSIDE_SIT 1500 mtu INSIDE_UAT_notyet 1500 mtu NetMGT 1500 icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-66114.bin no asdm history enable <--- More ---> arp timeout 14400 ! object network obj-Switch-10.98.74.2 nat (INSIDE_SIT,OUTSIDE) static YYY.111.27.8 object network obj-HMC-1-10.74.132.22 nat (INSIDE_SIT,OUTSIDE) static YYY.111.27.9 object network obj-CSM-10.74.132.21 nat (INSIDE_SIT,OUTSIDE) static YYY.111.27.10 access-group ALL in interface OUTSIDE access-group ALL out interface OUTSIDE access-group ALL in interface INSIDE_SIT access-group ALL out interface INSIDE_SIT access-group ALL in interface NetMGT access-group ALL out interface NetMGT route OUTSIDE 0.0.0.0 0.0.0.0 XXX.44.38.41 1 route INSIDE_SIT 10.74.132.0 255.255.255.0 10.112.64.222 1 route INSIDE_SIT YYY.111.27.0 255.255.255.248 10.112.64.222 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 <--- More ---> dynamic-access-policy-record DfltAccessPolicy user-identity default-domain LOCAL http server enable http 192.168.1.0 255.255.255.0 NetMGT no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart telnet timeout 5 ssh timeout 5 console timeout 0 dhcpd address 192.168.1.2-192.168.1.254 NetMGT dhcpd enable NetMGT ! threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ssl encryption des-sha1 webvpn ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map <--- More ---> parameters message-length maximum client auto message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip inspect netbios inspect tftp inspect ip-options ! service-policy global_policy global prompt hostname context no call-home reporting anonymous <--- More ---> Cryptochecksum:b1ec95bb23b2a7fbc3177b8774527f15 : end ciscoasa# ciscoasa# ciscoasa# ciscoasa# ciscoasa# ciscoasa# ciscoasa# sh ver Cisco Adaptive Security Appliance Software Version 8.6(1)2 Device Manager Version 6.6(1) Compiled on Fri 01-Jun-12 02:16 by builders System image file is "disk0:/asa861-2-smp-k8.bin" Config file at boot was "startup-config" ciscoasa up 7 mins 35 secs Hardware: ASA5512, 4096 MB RAM, CPU Clarkdale 2793 MHz, 1 CPU (2 cores) ASA: 2048 MB RAM, 1 CPU (1 core) Internal ATA Compact Flash, 4096MB BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x1) Boot microcode : CNPx-MC-BOOT-2.00 SSL/IKE microcode : CNPx-MC-SSL-PLUS-0014 IPSec microcode : CNPx-MC-IPSEC-MAIN-0014 Number of accelerators: 1 Baseboard Management Controller (revision 0x1) Firmware Version: 2.4 0: Int: Internal-Data0/0 : address is b0fa.eb97.fc1e, irq 11 1: Ext: GigabitEthernet0/0 : address is b0fa.eb97.fc22, irq 10 <--- More ---> 2: Ext: GigabitEthernet0/1 : address is b0fa.eb97.fc1f, irq 10 3: Ext: GigabitEthernet0/2 : address is b0fa.eb97.fc23, irq 5 4: Ext: GigabitEthernet0/3 : address is b0fa.eb97.fc20, irq 5 5: Ext: GigabitEthernet0/4 : address is b0fa.eb97.fc24, irq 10 6: Ext: GigabitEthernet0/5 : address is b0fa.eb97.fc21, irq 10 7: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 0 8: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 0 9: Int: Internal-Data0/2 : address is 0000.0001.0003, irq 0 10: Ext: Management0/0 : address is b0fa.eb97.fc1e, irq 0 Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 50 perpetual Inside Hosts : Unlimited perpetual Failover : Disabled perpetual VPN-DES : Enabled perpetual VPN-3DES-AES : Enabled perpetual Security Contexts : 0 perpetual GTP/GPRS : Disabled perpetual AnyConnect Premium Peers : 2 perpetual AnyConnect Essentials : Disabled perpetual Other VPN Peers : 250 perpetual Total VPN Peers : 250 perpetual Shared License : Disabled perpetual <--- More ---> AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual UC Phone Proxy Sessions : 2 perpetual Total UC Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Intercompany Media Engine : Disabled perpetual IPS Module : Disabled perpetual This platform has a Base license. Serial Number: FCH1705J532 Running Permanent Activation Key: 0x3705fa5d 0xa8b89a15 0xa5a1f9dc 0xede83004 0x8137d49b Configuration register is 0x1 Configuration has not been modified since last system restart. ciscoasa# ciscoasa# ciscoasa#
... View more
01-22-2015
QoS Error: Sup2T, IOS15.1SY,6506-E, LAN Tengig Ethernet Module: Throws
errors when QoS policy applie...
03-06-2014
Hi All,I'm serching for information on Cisco switch/router QoS and port
configurations for Microsoft...
11-07-2013
Further to above,Two ASA 5585-X in two different locations with inside
and outside using 10G in Acti...
Created by
S.Srivas_2
in Firewalls
09-23-2013
09-23-2013
Dear Community.I'm trying to track some static routes via the outside
interface and do not want to i...
Created by
S.Srivas_2
in Switching
05-13-2013
05-13-2013
Both VFCs and FCOEs are up now.(There was an issu in binding to
interfaces.)Still not reading the WW...
Created by
S.Srivas_2
in Switching
05-12-2013
05-12-2013
Additional information below.When port-channel 3 is set to switchport
mode fex-fabric the VFC change...
Created by
S.Srivas_2
in Switching
05-12-2013
05-12-2013
Dear Experts,I'm trying to get the VFC up in B22-FEX blade in Dell whic
is connecting to Nexus 5596U...
Created by
S.Srivas_2
in Switching
05-11-2013
05-11-2013
Two config files and one diagram attached.We have two Cisco B22 fabric
extenders in our M1000e chass...
Created by
S.Srivas_2
in Switching
05-11-2013
05-11-2013
Hi Leo and others,Is the Nexus version i have is suitable for B22 FEX
for Dell?Asking this because o...
Created by
S.Srivas_2
in Switching
05-10-2013
05-10-2013
Dear experts,I have the following errordisabled state on VFc as
below.(Trying to get FCoE up and run...
04-22-2013
It works.The config was OK. The end stations (Laptop and Switch/Router)
routing was not accurate. It...
04-19-2013
Thank you for the above.I changed the security levels. For now I am
interested in passing traffic th...
Public Statistics
| Date Registered | 10-29-2009 10:42 AM |
| Date Last Visited | 08-18-2017 04:00 AM |
| Total Messages Posted | 20 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 4 | |
| 9 | |
| 5 | |
| 4 | |
| 5 |
.jpg "VIP Mentor"){kind=icon}
