Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dario.didio
Stats
Member since
09-15-2005
314
Posts
157
Helpful
30
Solutions
02-06-2019
12:57 AM
Apparently it was introduced in 15.2.4E: Features Introduced in Cisco IOS Release 15.2(4)E (LAN Base for Catalyst 2960-X switches; IP Lite for Catalyst 2960-XR switches) Support for Embedded Event Manager (EEM). https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-2_4_e/releasenotes/rn-1524e-2960x-xr.html#pgfId-246822
... View more
02-06-2019
12:43 AM
Hi, according to the feature navigator, it does not support EEM. Also, when I try to configure it, the CLI doesn't accept the commands. We're running 15.2.2.E6
... View more
02-06-2019
12:13 AM
Hi all, We have some VoIP phones located in public hallways. For security reasons, we want the switchport to go into shut or err-disabled once the port goes down; eg when someone disconnects the phone from it's cable. I assume this could be accomplished by an EEM script, but because the switch is a Cat2960X, EEM is not supported. Anyone has an alternative idea to accomplish this? Thanks!
... View more
Labels:
06-11-2018
04:52 AM
Hi Marvin,
Could you elaborate why, when the command 'switchport access vlan 1' is missing from a switchport, RADIUS authentication never starts? Why is it required to have a port explicitly in a VLAN?
Thanks for the info.
Br,
Dario
... View more
03-15-2018
07:44 AM
Hi, 1. Output of show run dhcprelay: dhcprelay server x.x.x.x inside dhcprelay server x.x.x.x inside dhcprelay enable DMZ-1 dhcprelay enable DMZ-2 dhcprelay enable DMZ-3 dhcprelay enable DMZ-4 dhcprelay enable DMZ-5 dhcprelay timeout 90 2. I created a capture using 'capture cap type asp-drop all'
... View more
03-15-2018
05:13 AM
After some more digging, I found in the ASP drops that the ASA is dropping DHCP related messages, coming from our internal server.
4: 13:08:04.482991 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 5: 13:08:04.531039 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 6: 13:08:04.731407 x.x.x.x.67 > 255.255.255.255.68: udp 314 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 7: 13:08:05.176550 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 8: 13:08:05.809528 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 9: 13:08:06.231524 x.x.x.x.67 > 255.255.255.255.68: udp 314 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 10: 13:08:06.481450 x.x.x.x.67 > 255.255.255.255.68: udp 314 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 11: 13:08:06.887878 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 12: 13:08:07.590927 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 13: 13:08:07.718361 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 14: 13:08:08.017790 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation 15: 13:08:08.531192 x.x.x.x.67 > 255.255.255.255.68: udp 318 Drop-reason: (unable-to-create-flow) Flow denied due to resource limitation
Reason is 'flow denied due to resource limitation'.
According to this page: https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/show_asp_drop/show_asp_drop.html
Name: unable-to-create-flow
Flow denied due to resource limitation:
This counter is incremented and the packet is dropped when flow creation fails due to a system resource limitation. The resource limit may be either:
1) system memory
2) packet block extension memory
3) system connection limit
Causes 1 and 2 will occur simultaneously with flow drop reason "No memory to complete flow".
Recommendation:
- Observe if free system memory is low.
- Observe if flow drop reason "No memory to complete flow" occurs.
- Observe if connection count reaches the system connection limit with the command "show resource usage".
Syslogs:
None
None of the above are applicable to us. Could this be a bug? We're running version 9.1(7)23 on an 5510 platform with 1GB memory.
... View more
03-14-2018
09:21 AM
Hi, thanks for the answer, much appreciated! unfortunately, it doesn't solve my problem and I cannot move the DHCP functionality to my ASA, it needs to be relayed. Thanks, Dario
... View more
03-14-2018
09:09 AM
Hi all,
I'm having an issue with DHCP relay on my ASA.
My clients are in a DMZ and my DHCP server is behind the inside interface.
DHCPrelay is configured correctly, but clients are not getting an IP address.
After troubleshooting, I'm under the impression that the problem is that packets sourced from the ASA (which DHCPrelay does) are getting dropped.
When doing a packet trace with source IP the IP address of the ASA's DMZ interface to the DHCP server, the packet is dropped, eventhough I have an explicit rule allowing this.
All examples I run in to with regards to DHCPrelay on ASA, are always with clients on the inside and DHCP server on the DMZ/outside; being the packet going from a higher security level to a lower one. In my case, it is the opposite.
Anyone that can help?
Thanks,
Dario
... View more
Labels:
11-23-2015
06:15 AM
Hi,
I'm trying to configure destination NAT via the NVI on a Cisco router.
I have the command 'ip nat source static...' which works fine for source nat; but I don't kow how to do the destination nat, there is no command ip nat destination...
any help is appreciated!
thanks
... View more
Labels:
09-25-2013
11:26 PM
Hi Carlos, We have C2960-C running the lastest 15 IOS and I can confirm that the bug has been solved. We run them with a couple of VLANs, routed locally and a static default route to the provider edge. All works well. Hope this helps. Br, Dario
... View more
09-18-2013
06:28 AM
Hi all, I had the chance on testing this and I can confirm that on both supervisors, all ports are available. Br, Dario
... View more
09-11-2013
01:36 AM
Hi all, I know that when you have a dual supervisor in a single C4500 chassis, the 8 available ports on the two supervisors become 4 (2 on each instead of 4 on each). But is this also applicable when doing VSS? In other words, when having 2 chassis, in each a supervisor 7E, will the available ports on each supervisor be 4 or the reduced 2? http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps4324/images/data_sheet_c78-612364-2.jpg http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps4324/data_sheet_c78-612364.html Thanks alot! Br, Dario
... View more
Labels:
05-24-2013
09:42 AM
Hi all, I need to upgrade a pair of ACE30s to 8Gbps. According to the administration guide, there will be no impact. BUT, it states also: All license installations except one have no adverse impact to an operating ACE. http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/administration/guide/license.html Ofcourse, nothing is said about which one has impact. I assume it's the 16Gbps license but is there someone who can confirm this? Thanks alot! Br, Dario
... View more
Labels:
Created by
dario.didio
in Application Networking
in Application Networking
04-24-2013
08:48 AM
04-24-2013
08:48 AM
Hi Gilles, Is it also supported in routed mode? The ace isn't doing multicast routing right? Actually, the server-side vlan is being routed on the C6500 and has pim sparse-dense mode enabled. We want to move this server-side vlan behind the ace in routed mode. What about the pim? Any ideas? thanks, Dario
... View more
04-05-2013
02:36 AM
Hi, Looking at your log output, it seems like a traceback ==> chances are it is a software related issue. I would suggest to upgrade to version 15.X which has far better IPv6 support. Try upgrading and if the problem persists, we can look deeper into it. Good luck. Br, Dario
... View more
02-06-2019
Apparently it was introduced in 15.2.4E:Features Introduced in Cisco IOS
Release 15.2(4)E(LAN Base f...
02-06-2019
Hi,according to the feature navigator, it does not support EEM.Also,
when I try to configure it, the...
02-06-2019
Hi all,We have some VoIP phones located in public hallways.For security
reasons, we want the switchp...
06-11-2018
Hi Marvin, Could you elaborate why, when the command 'switchport access
vlan 1' is missing from a sw...
03-15-2018
Hi,1. Output of show run dhcprelay:dhcprelay server x.x.x.x
insidedhcprelay server x.x.x.x insidedhc...
03-15-2018
After some more digging, I found in the ASP drops that the ASA is
dropping DHCP related messages, co...
03-14-2018
Hi,thanks for the answer, much appreciated!unfortunately, it doesn't
solve my problem and I cannot m...
03-14-2018
Hi all, I'm having an issue with DHCP relay on my ASA. My clients are in
a DMZ and my DHCP server is...
11-23-2015
Hi, I'm trying to configure destination NAT via the NVI on a Cisco
router. I have the command 'ip na...
09-25-2013
Hi Carlos,We have C2960-C running the lastest 15 IOS and I can confirm
that the bug has been solved....
09-18-2013
Hi all,I had the chance on testing this and I can confirm that on both
supervisors, all ports are av...
09-11-2013
Hi all,I know that when you have a dual supervisor in a single C4500
chassis, the 8 available ports ...
05-24-2013
Hi all,I need to upgrade a pair of ACE30s to 8Gbps.According to the
administration guide, there will...
04-24-2013
Hi Gilles,Is it also supported in routed mode?The ace isn't doing
multicast routing right?Actually, ...
Public Statistics
| Date Registered | 09-15-2005 01:27 AM |
| Date Last Visited | 02-13-2019 08:05 AM |
| Total Messages Posted | 314 |
| Total Helpful Votes Received | 157 |
Helpful Votes Given To
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Community Legend"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 9 | |
| 10 |
