Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About kim
Stats
Member since
04-09-2014
25
Posts
0
Helpful
0
Solutions
Created by
kim
in Network Management
in Network Management
11-01-2019
02:15 AM
11-01-2019
02:15 AM
Hi everybody, Obviously disabling the http service and deleting the trustpoint isn't enough. Every self signed comes out with the same expiry. So i tried zerorizing and then regenerating the rsa key for ssh. That did it, but thats pretty involved. The version we are running does not have the option to set the snmp trap pki. Pretty involved to upgrade as well. I'm also looking for the smarter way of turning this notice off :) Any suggestions? Cheers
... View more
11-20-2018
10:58 PM
Hey guys,
no problems experienced when pinging from PE to PE.
It most definitely is the license limitation :)
Thanks again!
/Kim
... View more
11-20-2018
03:47 AM
Hi Ashish :)
You are absolutely right :) It must be the rate limit i'm running into. I've attached the wireshark dump showing the ping traffic hitting the limit.
Thanks.
Cheers
... View more
11-19-2018
04:41 AM
Hi guys,
thanks for an awesome resource!
I've run into a small problem in my L2 lab. I've managed to find an XRv image with a working L2 dataplane but with packet loss it seems.
I was testing the XRv image with a multi segment xconnect setup. So i effectively stitch 2 PW's together on a 3rd PE. Anyway when pinging across the evc, there is connectivity. But packets are dropped at the ACs towards the CPEs. Either side shows this issue, two different PEs. This is what i see:
<snip>
CPE6#ping 1.1.1.7 rep 10000 Type escape sequence to abort. Sending 10000, 100-byte ICMP Echos to 1.1.1.7, timeout is 2 seconds: .!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!! !!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!! !!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!. !!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!! !!!!.!!!!!!!!!!!!!!!!!!.
<snip>
The lab runs in esxi 6.5 on a PowerEdge R630 with 2 CPUs and 256Gb memory. The host shows free cpu, mem and disk, plenty infact. PEs are XRv 6.4.1 while the CPEs are CSR1000Vs 16.06.04
Does anyone have any suggestions as to why this happens? Or what can be done? To me it looks like some kind of buffer issue. It looks pretty even and keeps going like that for the duration. I haven't seen any other issues yet.
Any input appreciated!
Thanks in advance.
Cheers
/Kim Tingkær
... View more
Labels:
03-22-2018
01:01 AM
Hi Marvin,
thanks again ;)
Actually we're using both an older 5505 (9.2(4)27) and a newer software on a 5515 (9.6.4.5). Maybe nobody noticed it till now... But it feels like an asdm bug because theres nothing on the cli.
Cheers
... View more
03-22-2018
12:53 AM
Hi Marvin :)
Thanks for the reply! What java version do you use?
Cheers
... View more
03-20-2018
07:09 AM
Hi guys
thanks for an awesome resource!
I have a challenge with ASDM v7.9.1.151 (ASA 9.4.6.5) when adding vpn client profiles.
As you can see below when typing in profile name profile location is automatically filled in with the wrong file extention.
After, having corrected the extention, it complains when I click apply the in the dialog.
In the process i've seen a couple of different errors.
So far we've seen this on just the one box - have you guys seen this?
Cheers
/Kim
... View more
Labels:
03-20-2018
06:54 AM
Hi Guys,
thanks for an awesome resource!
My ASDM reports the following available flash:
I've tried a couple of ASDM versions - back to 7.8.1-151. All show the same garbled output.
Just wanted to see if this is a confirmed bug or if anyone else saw this at all.
Cheers guys
/Kim
... View more
Labels:
02-01-2018
01:36 AM
Hi everyone,
thank you for an awesome resource!
The advisory (cisco-sa-20180129-asa1) shows several fixed releases. Will 9.2.4.25 be available for the 5505? I don't see it in the download section.
I've upgraded the 5505's to 9.2.4.22 and would hate to downgrade to 9.1 :)
Cheers and thanks again.
Best regards
Kim
... View more
Labels:
10-11-2016
01:48 AM
Hi everyone :)
Thanks for a great forum!
I have a C6880-X-LE running this image: c6880x-ipservicesk9-mz.SPA.152-1.SY1a.
It spams the log with long segments of config code. It is getting annoying because it can sometimes empty the buffer entirely with this config code. It seems rather random because. I'm the only one doing kind of configuration on this box so it is not just logging changes. It spams even when i havent touched the box for days.
I have added this to avoid some spamming:
logging discriminator FILTER_O msg-body drops Power|POWER|option82|find.*Dest.*MAC logging buffered discriminator FILTER_O 262144
It has however spamed the log with config since before i added this. Here is the show log output:
6880-VSS#show log Syslog logging: enabled (0 messages dropped, 525 messages rate-limited, 4 flushes, 0 overruns, xml disabled, filtering disabled)
Active Message Discriminator: FILTER_O msg-body drops Power|POWER|option82|find.*Dest.*MAC
No Inactive Message Discriminator.
Console logging: disabled Monitor logging: level debugging, 479 messages logged, xml disabled, filtering disabled Buffer logging: level debugging, 7238 messages logged, xml disabled, filtering disabled, discriminator(FILTER_O), 0 messages rate-limited, 107646 messages dropped-by-MD Exception Logging: size (4096 bytes) Count and timestamp logging messages: disabled Persistent logging: disabled Trap logging: level informational, 103906 message lines logged Logging Source-Interface: VRF Name: Log Buffer (262144 bytes):
Oct 1 06:54:48.960: %SYS-SW2-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144), discriminator (FILTER_O) Oct 1 06:54:48.958: %SYS-SW1_STBY-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144), discriminator (FILTER_O) Oct 1 06:54:50.596: %SYS-SW2-5-CONFIG_I: Configured from console by 2ndnet on vty0 (10.10.101.2) Oct 1 06:55:24.273: %SYS-SW2-5-CONFIG_I: Configured from console by 2ndnet on vty0 (10.10.101.2) description Default VLAN 111 switchport switchport trunk allowed vlan 1 switchport mode access switchport access vlan 111 switchport port-security maximum 50 macro description default storm-control broadcast level 5.00 storm-control action shutdown spanning-tree portfast edge spanning-tree guard root ! interface GigabitEthernet111/3/0/29 description Default VLAN 111 switchport switchport trunk allowed vlan 1 switchport mode access switchport access vlan 111 switchport port-security maximum 50 macro description default storm-co switchport mode access switchport access vlan 111 switchport port-security maximum 50 macro description default storm-control broadcast level 5.00 storm-control action shutdown spanning-tree portfast edge spanning-tree guard root ! interface GigabitEthernet107/2/0/18 description Default VLAN 111 switchport switchport trunk allowed vlan 1 switchport mode access switchport access vlan 111 switchport port-security maximum 50 macro description default storm-control broadcast leve Oct 1 06:56:55.530: %SYS-SW2-5-CONFIG_I: Configured from console by 2ndnet on vty0 (10.10.101.2) slot 4 slot-type 357 port-type 61 number 48 virtual-slot 82 slot 5 slot-type 357 port-type 61 number 48 virtual-slot 83 ! module provision fex 108 slot 1 slot-type 357 port-type 61 number 48 virtual-slot 85 slot 2 slot-type 357 port-type 61 number 48 virtual-slot 60 slot 3 slot-type 357 port-type 61 number 48 virtual-slot 61 slot 4 slot-type 357 port-type 61 number 48 virtual-slot 62 slot 5 slot-type 357 port-type 61 number 48 virtual-slot 53 ! module provision fex 110 slot 1 slot-type 357 port-type 61 number 48 storm-control action shutdown spanning-tree portfast edge spanning-tree guard root ! interface GigabitEthernet113/5/0/35 description Default VLAN 111 switchport switchport trunk allowed vlan 1 switchport mode access switchport access vlan 111
Any ideas on how to get rid of this problem?
Cheers and thanks in advance.
/Kim
... View more
Labels:
08-18-2016
11:28 PM
Hi jhonaceti :)
indeed that helped! Infact, i had all 3 + 2 DH algorithms and it didnt work... Even with different the stronger algorithms moved down the list...
Cheers and thanks.
... View more
06-09-2016
01:38 AM
Same here :(
<snip>
Dynamic Filter: Updater client fetching data Dynamic Filter: update starting DBG:01:228214043:ce0f9394:0000: Creating fiber 0xd06913c0 [ipe_request_fiber], stack(16384) = 0xd06ba2e0..0xd06be2dc (fc=2), sys 0xc81e2c2c (FIBERS/fibers.c:fiber_create:544) DBG:02:228214180:d06913c0:0000: Jumpstarting ipe_request_fiber 0xd06913c0, sys 0xce0f9348 (FIBERS/fibers-jumpstart.c:_fiber_jumpstart:36) Dynamic Filter: Created lua machine, launching lua script DBG:03:228227693:d06913c0:0000: Connecting to 00000000:87710416 (SAL/netsal.c:netsal_client_sock_connect:323) DBG:04:228227785:d06913c0:0000: otherPifNum 3, nexthop4 17c5953 (SAL/netsal.c:netsal_client_sock_connect:374) DBG:05:228227866:d06913c0:0000: about to call netsal__safe_encapsulate for (sal-np/ssl/CONNECT/3/208.90.58.5/443/M/0/NOTUNGW) (SAL/netsal.c:netsal_client_sock_connect:446) DBG:06:228228490:d06913c0:0000: connection timeout set for 10 seconds (SAL/netsal.c:netsal_client_sock_connect:473) ERROR: Dynamic Filter: update failed vpn# DBG:07:228823965:d06913c0:0000: Channel NP p=0xc84210e0 0/0 more buffered (SAL/channel-np.c:_sal_np_close:951) Dynamic Filter: Successfully finished lua script DBG:08:228826192:d06913c0:0000: Fiber 0xd06913c0 finished leaving 3 more (FIBERS/fibers-jumpstart.c:_fiber_jumpstart:64) DBG:09:228826259:d06913c0:0000: Exiting fiber 0xd06913c0 (FIBERS/fibers.c:fiber__kill:1287) DBG:10:228826313:d06913c0:0000: Fiber 0xd06913c0 terminated, 2 more (FIBERS/fibers.c:fiber__kill:1358) Dynamic Filter: Failed to connect to updater server
<snip>
... View more
09-15-2015
04:17 AM
Hey Peter :) Thanks for your reply! Thats exactly what i've been doing, but your suggestion tells me that maybe this aught to work... Note, addresses changed slightly clients#sh ip int brie | i /7|/8 FastEthernet0/7 10.3.76.122 YES DHCP up up FastEthernet0/8 10.3.76.117 YES DHCP up up The ping: clients#ping vrf cli7 10.3.76.117 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.3.76.56, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) But no dice!... Routing information shows: clients#sh ip route vrf cli7 Gateway of last resort is not set 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 10.3.76.0/24 is directly connected, FastEthernet0/7 L 10.3.76.122/32 is directly connected, FastEthernet0/7 clients#sh ip route vrf cli8 Gateway of last resort is not set 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 10.3.76.0/24 is directly connected, FastEthernet0/8 L 10.3.76.117/32 is directly connected, FastEthernet0/8
... View more
Created by
kim
in Network Management
11-01-2019
11-01-2019
Hi everybody, Obviously disabling the http service and deleting the
trustpoint isn't enough. Every s...
11-20-2018
Hey guys, no problems experienced when pinging from PE to PE. It most
definitely is the license limi...
11-20-2018
Hi Ashish :) You are absolutely right :) It must be the rate limit i'm
running into. I've attached t...
11-19-2018
Hi guys, thanks for an awesome resource! I've run into a small problem
in my L2 lab. I've managed to...
03-22-2018
Hi Marvin, thanks again ;) Actually we're using both an older 5505
(9.2(4)27) and a newer software o...
03-20-2018
Hi guys thanks for an awesome resource! I have a challenge with ASDM
v7.9.1.151 (ASA 9.4.6.5) when a...
03-20-2018
Hi Guys, thanks for an awesome resource! My ASDM reports the following
available flash: I've tried a...
02-01-2018
Hi everyone, thank you for an awesome resource! The advisory
(cisco-sa-20180129-asa1) shows several ...
10-11-2016
Hi everyone :) Thanks for a great forum! I have a C6880-X-LE running
this image: c6880x-ipservicesk9...
08-18-2016
Hi jhonaceti :) indeed that helped! Infact, i had all 3 + 2 DH
algorithms and it didnt work... Even ...
06-09-2016
Same here :( Dynamic Filter: Updater client fetching dataDynamic
Filter: update startingDBG:01:2282...
Public Statistics
| Date Registered | 04-09-2014 05:40 AM |
| Date Last Visited | 12-18-2019 12:07 AM |
| Total Messages Posted | 25 |
.jpg "Hall of Fame Community Legend"){kind=icon}
