Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About jason.williams
Stats
Member since
12-10-2010
79
Posts
0
Helpful
0
Solutions
08-21-2013
08:28 AM
That was it. I was missing a match ACL line. I just wish it would have been more specific. I had over 100 crypto maps in there. It could say "hey it looks like something is missing in crypto map x"? Thanks for your help.
... View more
08-21-2013
07:41 AM
I'm working on building a configuration on a 5540 running 9.1.2 for L2L VPN. When I reload the device, I get this message: .WARNING: crypto map has incomplete entries *** Output from config line 10665, "crypto map L2LVPN interf..." I seems it's giving me the error on the line where the crypto map is assigned to the outside interface. Unfortunately this message really is not very helpful. I do not have this in production yet. Is there any way I can find out where my problem may be? Thanks. Jason
... View more
Labels:
06-03-2013
03:49 PM
I have a L2L VPN tunnel that completely resets, beginning again with Phase 1, when the IPSec SA timer expires. Even though there are multiple SAs, it still resets the entire tunnel. I see the following errors in the log when this happens: 06-03-2013 12:54:41 Local7.Notice ipRemoved Jun 03 2013 12:54:41 LKM-NVP-L2L-01 : %ASA-5-713050: Group = ipRemoved, IP = ipRemoved, Connection terminated for peer ipRemoved. Reason: Peer Terminate Remote Proxy N/A, Local Proxy N/A 06-03-2013 12:54:41 Local7.Notice ipRemoved Jun 03 2013 12:54:41 LKM-NVP-L2L-01 : %ASA-5-713259: Group = ipRemoved, IP = ipRemoved, Session is being torn down. Reason: User Requested 06-03-2013 12:54:41 Local7.Warning ipRemoved Jun 03 2013 12:54:41 LKM-NVP-L2L-01 : %ASA-4-113019: Group = ipRemoved, Username = ipRemoved, IP = ipRemoved, Session disconnected. Session Type: IKE, Duration: 4h:00m:06s, Bytes xmt: 260129, Bytes rcv: 223018, Reason: User Requested 06-03-2013 12:55:33 Local7.Notice ipRemoved Jun 03 2013 12:55:33 LKM-NVP-L2L-01 : %ASA-5-713041: IP = ipRemoved, IKE Initiator: New Phase 1, Intf inside, IKE Peer ipRemoved local Proxy Address 204.139.127.24, remote Proxy Address 156.30.21.200, Crypto map (L2LVPN) 06-03-2013 12:55:33 Local7.Notice ipRemoved Jun 03 2013 12:55:33 LKM-NVP-L2L-01 : %ASA-5-713119: Group = ipRemoved, IP = ipRemoved, PHASE 1 COMPLETED 06-03-2013 12:55:33 Local7.Notice ipRemoved Jun 03 2013 12:55:33 LKM-NVP-L2L-01 : %ASA-5-713049: Group = ipRemoved, IP = ipRemoved, Security negotiation complete for LAN-to-LAN Group (ipRemoved) Initiator, Inbound SPI = 0x9213bdc9, Outbound SPI = 0x1799a099 06-03-2013 12:55:33 Local7.Notice ipRemoved Jun 03 2013 12:55:33 LKM-NVP-L2L-01 : %ASA-5-713120: Group = ipRemoved, IP = ipRemoved, PHASE 2 COMPLETED (msgid=b8a47603) 06-03-2013 13:02:11 Local7.Notice ipRemoved Jun 03 2013 13:02:11 LKM-NVP-L2L-01 : %ASA-5-713041: Group = ipRemoved, IP = ipRemoved, IKE Initiator: New Phase 2, Intf inside, IKE Peer ipRemoved local Proxy Address 204.139.127.71, remote Proxy Address 156.30.21.200, Crypto map (L2LVPN) 06-03-2013 13:02:11 Local7.Notice ipRemoved Jun 03 2013 13:02:11 LKM-NVP-L2L-01 : %ASA-5-713049: Group = ipRemoved, IP = ipRemoved, Security negotiation complete for LAN-to-LAN Group (ipRemoved) Initiator, Inbound SPI = 0x93f9be6c, Outbound SPI = 0x1799a16d 06-03-2013 13:02:11 Local7.Notice ipRemoved Jun 03 2013 13:02:11 LKM-NVP-L2L-01 : %ASA-5-713120: Group = ipRemoved, IP = ipRemoved, PHASE 2 COMPLETED (msgid=1f6c9acd) Any thoughts on why it would be doing this? Thanks. Jason
... View more
Labels:
04-01-2013
12:30 PM
Well I removed Oracle Java and reinstalled OpenJDK: java version "1.6.0_27" OpenJDK Runtime Environment (IcedTea6 1.12.3) (6b27-1.12.3-0ubuntu1~12.10.1) OpenJDK Server VM (build 20.0-b12, mixed mode) It now works. I'm going to stick with this for now. Thanks. Jason
... View more
04-01-2013
12:17 PM
it does not appear to be. There were 0 packets captured on the ASA when I tried to connet. I also ran Wireshark on my Linux box, and there was nothing there either. I'm guessing it's something with Java and the jnlp file. Here is my Java version: java -version java version "1.6.0_43" Java(TM) SE Runtime Environment (build 1.6.0_43-b01) Java HotSpot(TM) Server VM (build 20.14-b01, mixed mode)
... View more
04-01-2013
11:22 AM
I enabled debugging on the ASA, and the only message that came up was: HTTP: Periodic admin session check (idle-timeout = 1200, session-timeout = 0) There really isn't much information in the log and trace files, but they are attached.
... View more
04-01-2013
09:55 AM
As the title says, I'm trying to run ASDM on Linux (Mint 14), and failing miserably. I have Oracle Java 6 installed. Other web-based Java apps seem to work fine, however, when I try to open ASDM, whether directly from the ASA web interface or by running the jnlp file directly from my system, the Java splash screen comes up, "thinks" for about 10 seconds, and then closes. Nothing else happens. Any thoughts? Thanks. Jason
... View more
Labels:
03-06-2013
06:43 AM
In pre-8.3, NAT had a group number to match nat to global. How do I do this in 8.4? I need a default pat (0.0.0.0), but I also have specific pat for certain subnets. How do I keep them from overlapping? Will it check more specific nat statements first before it gets to more generic any any or 0.0.0.0? Thanks. Jason
... View more
Labels:
Created by
jason.williams
in Network Security
in Network Security
02-22-2013
08:04 AM
02-22-2013
08:04 AM
Actually I figured it out. proxy arp was enabled on the interface. Once I disabled it (noproxyarp), it fixed my problem.
... View more
Created by
jason.williams
in Network Security
in Network Security
02-22-2013
07:29 AM
02-22-2013
07:29 AM
We have a firewalled segment on an ASA. There are both wired and wireless systems on this segment. We're having an issue where the wireless hosts cannot connect to the wired hosts. Based on the logs, it looks like the traffic from the wireless hosts are trying to go out of the firewall, even though they are on the same IP subnet: %ASA-4-106023: Deny udp src Skylight:10.157.22.53/64529 dst Inside:10.157.22.51/53 by access-group "Skylight_in" [0x0, 0x0] I'm not entirely sure that this is a firewall issue, but since I'm seeing this behavior behind the ASA, I figured I'd start here. Any thoughts? Thanks. Jason
... View more
Labels:
Created by
jason.williams
in IP Telephony and Phones
in IP Telephony and Phones
02-14-2013
11:29 AM
02-14-2013
11:29 AM
I guess that's my problem then. I am using a USB headset for the IPC. I'll play around with the Windows settings. Thanks.
... View more
Created by
jason.williams
in IP Telephony and Phones
in IP Telephony and Phones
02-14-2013
08:30 AM
02-14-2013
08:30 AM
So I just installed the IP Softphone on my computer. Normally I'll listen to music while working. When I start the softphone, the sound then comes out of the speakers instead of the earphones. Once I close the softphone, then it works correctly again. What can I do to fix this? Thanks. Jason
... View more
Labels:
Created by
jason.williams
in Switching
in Switching
01-28-2013
12:59 PM
01-28-2013
12:59 PM
I thought as much, but of course the vendor is telling me "they've done it at other clients", so I had to double check that I didn't miss something new. Thank you for the quick resposes. Jason
... View more
Created by
jason.williams
in Switching
in Switching
01-28-2013
12:42 PM
01-28-2013
12:42 PM
Here's what I'm trying to do. We are having new storage servers installed that will be using NFS. I'm being told that they need to have their connections port channeled. Right now, the servers have connections to 2 different 3750s for HA. Is it possible to configure a port channel between these 2 connections? Thanks. Jason
... View more
Labels:
08-21-2013
That was it. I was missing a match ACL line. I just wish it would have
been more specific. I had ove...
08-21-2013
I'm working on building a configuration on a 5540 running 9.1.2 for L2L
VPN. When I reload the devic...
06-03-2013
I have a L2L VPN tunnel that completely resets, beginning again with
Phase 1, when the IPSec SA time...
04-01-2013
Well I removed Oracle Java and reinstalled OpenJDK:java version
"1.6.0_27"OpenJDK Runtime Environmen...
04-01-2013
it does not appear to be. There were 0 packets captured on the ASA when
I tried to connet. I also ra...
04-01-2013
I enabled debugging on the ASA, and the only message that came up
was:HTTP: Periodic admin session c...
04-01-2013
As the title says, I'm trying to run ASDM on Linux (Mint 14), and
failing miserably. I have Oracle J...
03-06-2013
In pre-8.3, NAT had a group number to match nat to global.How do I do
this in 8.4? I need a default ...
02-22-2013
Actually I figured it out. proxy arp was enabled on the interface. Once
I disabled it (noproxyarp), ...
02-22-2013
We have a firewalled segment on an ASA. There are both wired and
wireless systems on this segment. W...
Created by
jason.williams
in IP Telephony and Phones
02-14-2013
02-14-2013
I guess that's my problem then. I am using a USB headset for the
IPC.I'll play around with the Windo...
Created by
jason.williams
in IP Telephony and Phones
02-14-2013
02-14-2013
So I just installed the IP Softphone on my computer. Normally I'll
listen to music while working. Wh...
Created by
jason.williams
in Switching
01-28-2013
01-28-2013
I thought as much, but of course the vendor is telling me "they've done
it at other clients", so I h...
Created by
jason.williams
in Switching
01-28-2013
01-28-2013
Here's what I'm trying to do. We are having new storage servers
installed that will be using NFS. I'...
Public Statistics
| Date Registered | 12-10-2010 08:00 AM |
| Date Last Visited | 08-18-2017 04:01 AM |
| Total Messages Posted | 79 |
