Hi Team, This is regarding customer  Router CME-SRST license activation problem : https://supportforums.cisco.com/docs/DOC-26706 Based on the above document, enabled license for UC  and CME  and showing that both are as evaluation license. According the above URL , it will be activated as  RTU (right to use) license after 60days.. Would you Pls confirm , can we get RTU license  after 60days even UC9 is  in evaluation period license because all portals provided the configuration  of CME activation after uc9  permanant license. I have tried to make uc9 as permanant license , for that we need a  license but to make permanant , we need a PAK,that customer doesn't have/know. Attached the License details/Sh-tech report/sh version report etc summary output: Index 3 Feature: uck9                            Period left: 8  weeks 3  days      Period Used: 32 minutes 57 seconds      License Type: EvalRightToUse      License State: Active, In Use      License Count: Non-Counted      License Priority: Low Index 10 Feature: cme-srst      Period left: 8  weeks 3  days      Period Used: 17 minutes 56 seconds      License Type: EvalRightToUse      License State: Active, In Use      License Count: 20/0  (In-use/Violation)      License Priority: Low Regards Ramu ... View more

Hi, I have two cisco 4506-E series switches .. We are planning to go for HSRP redundancy for 32 VLANs. Means In a Cisco 4506-E switch , we will configure 32 vlans and among them 16 vlans will be primary and 16VLANs will be standby ans it is viceversa in another core-switch My querie is How many standby groups can we create in Cisco 4506-E switch, Is there any limitation.. If there is any limitation , can we go ahead with VRRP,GLBP? Are there any limitation in VRRP/GLBP? Is there any design related issue can we face if we use same group number to all VLANs? Product details : Model : Cisco 4506-E Sup Model : WS-X45-SUP6L-E IOS  : S45EIPBK9-12254SG Regards Ram Message was edited by: Ramu Ch ... View more

My recommended topology sceanrio as follows :                                                          Internet                                                             |                                                             |                                                        Internet Router                                                              |                                                      Fortigate Firewall                                                              |                                                         Access  -  sw                                                        /                    \                                                    Core-sw-1---------  core-sw-2                                                  /                             \                                                Dist-sw-1 ----------- Dist-sw-2                                             /           \                     /            \                                     Access-1     Access-2         Access-1  Access-2                                        |                   |                      |                |                                    VLAN10        VLAN 20       Vlan 30      VLAN 40 I hope , the above topogy is undersandble and giving short note on the above scenario 1) In this project we are using one cisco 1900 series router as internet router 2) Fortigate firewall is a Internet firewall 3) Two core-sw as 4506 series and two  3750-X as distribution and 2960S switches as access 4) There is a cross connectivity between distribution -1 to core-sw2 and distribution-2 to      Core-sw-1 ( Not shown in Above diagram)     There is connectivity between distribution switches ( shown in diagram) 5) Each access-sw is in each vlan and connected to distribution , end devices are connected to access-switches                                                            Requirements : 1) HSRP configuration including Loadbalancing for each VLAN means some vlans     Core-sw-1 is active and core-sw-2 is standby and viceversa 2)   If we go to  HSRP-Loadbalancing , How to configure VTP , can we  configure two core-switches as server mode then  how it works if  core-switch-1 fails how the vlan database reflects in other  core-switch-2 3) How to configure STP , can we configure Core-Sw-1 as a Root bridge for some vlans and      Core-Sw-2 as root bridge for a remaining vlans , How core-sw-2 will  become a Root bridge for the vlans are through Core-sw-1 , if core-sw-1  gets down 4)  How the redundancy will be happen , if one  core-sw-1 goes down how the repspective vlans traffice will turn through  Core-sw-2 5) How the VTP database will be reflected in Core-sw-2 if Core-Sw-1 gets down 6)  will do intervlan in Distribution switches , is it ok? , can we make  distribution , access switches  as a client mode in VTP configuration , i  think it wont give any issues , so that VLANs configure in Core-Switches will be reflcted in each distribution / access-switches Pls provide a solution for the above and suggest your comments Regards Ramu ... View more

Hi All, Would you Please give information about - Is ASA Cisco firewall supports Secondary IP addressing, If supports my requirement -> Firewall has to configure with 4 Secondary IP address for INSIDE interface -> Outside interface is going for  Internet -> Inside users,who are in different Networks (Going through Secondary interface) should get Internet -> Static NAT has to do for 4 Secondary IP address Network IP addresses. Pls suggest Regards Ramu ... View more

H i Team, Our Local Network is behind the CISCO ASA Firewall.Whenever we are accesiing to Client VPN server,it is getting connected but after few Minutes (May be 5/10/30 Min),the sessions are terminatting. The same traffic through PIX is no issue , only with ASA Firewall. Pls see the following Error and request you give the possible root cause fo this. 2011-04-09 16:15:09    Local4.Info    172.16.1.68    %ASA-6-302016: Teardown UDP connection 87447908 for OUTSIDE:68.22.26.66/4500 to inside:172.16.9.10/4410 duration 0:27:49 bytes 18653 Regards Ramu ... View more

Dear Team, In our organization ,recently we are facing a issue with  VPN connections are disconnecting abruptly in reandom time periods ( 5Min,15Min,1Hr also). We have verified in our SysLog Messages shown as follows: 2011-04-07 19:33:59    Local4.Debug    172.16.1.68    %ASA-7-710005: UDP request discarded from 172.16.40.124/138 to inside:172.16.255.255/138 Here 172.16.40.124 is a LAN IP address,is connecting to Client VPN ,abruptly connecting is getting dropped. Here 172.16.1.68 is Cisco ASA 5520 inside IP address. Few Points to be noticed : - The same was worked well in Cisco Pix 515E Firewall ,After changed to Cisco ASA 5520,it is giving the issue. - All Ports are allowed for outbound traffic with a Source Network 172.16.40.0/24 to their  Client VPN. - This issue is giving for other Subnet Users i.e 172.16.33.0/24 to their Cleint VPN sessions & I allowed all Ports for them for Outbound traffic. - Pls confirm is there  any feature in ASA is casuing for terminating the sessions which was not in Cisco PIX 515E. - ASA version is 8.0(3) Regards Ramu CMC LTD ... View more

Hi Team, while traversing through Cicso ASA Firewall 5520,VPN sessions are disconnecting. In Accelissts for VPN-Outbound traffic from LAN to Client VPN ,we have allowed all Ports. Is there any inspection Rules are cause for this issue. In ASA Firewall,presently the inspection rules are policy-map global_policy class inspection_default   inspect dns preset_dns_map   inspect ftp   inspect h323 h225   inspect h323 ras   inspect netbios   inspect rsh   inspect rtsp   inspect skinny    inspect sqlnet   inspect sunrpc   inspect tftp   inspect sip    inspect xdmcp   inspect pptp Kindly suggest Regards Ramu ... View more

Dear Team, How are you all, Will you give the detailed info about ,how to do Packet capture thru Cisco ASA Firewall to a specific destination Regards Ramu ... View more

Hi Team, Can u Briefly explain what is useful to configure NTP protcol in Cisco devices. How to configure NTP in Cisco ASA & PIX and also suggest the Server IP address .We are from INDIA. Regards Ramu ... View more

Hi Team, We have configured Websense Fitering in ASA 5520 Firewall as follows for default Networks: url-server (inside) vendor websense host 172.*.*.* timeout 30 protocol TCP version 1 filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 filter https 443 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 filter ftp 21 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 My Issue is , i need to by pass the above Rules for 192.168.x.0/24 & 192.168.Y.0/24 hence request you to give me the god Doc: desireble to my requirements or give the commands to configure Regards Ramu ... View more