Hello, I'm trying to figure out what the default netflow sampling rate is on a Cisco 7613 router. I understand that netflow sampling is only for ingress in the 7613 platform?   Configuration: interface g0/0 Ip flow ingress Ip flow egress ! Ip flow-export source Vlan300 Ip flow-export version 9 Ip flow-export destination 192.168.21.99 2055   From the above configuration, what would be the default sampling rate, 1:1? I have not configured ip flow-sampling-mode packet-interval to provide a specific value. Also, I have not configured ip route-cache flow sampled on the interface. Any information is greatly appreciated! Thanks in advance! ... View more

Hello, I have read on several pages that the 3750 x (WS-C3750X-48) has a 64 Gbps backplane and about 101 Mpps throughput. I'm looking to clairfy that the 64 Gbps is on a single standalone switch, not stacked to equal 64 Gbps. I looks like the switch supports line rate non-blocking. CORE.1#show plat pm if-numbers interface gid  gpn  lpn  port slot unit slun port-type lpn-idb gpn-idb ---------------------------------------------------------------------- Gi1/0/1   1    1    1    1/1  1    1    1    local     Yes     Yes Gi1/0/2   2    2    2    1/0  1    2    2    local     Yes     Yes Gi1/0/3   3    3    3    1/3  1    3    3    local     Yes     Yes Gi1/0/4   4    4    4    1/2  1    4    4    local     Yes     Yes Gi1/0/5   5    5    5    1/5  1    5    5    local     Yes     Yes Gi1/0/6   6    6    6    1/4  1    6    6    local     Yes     Yes Gi1/0/7   7    7    7    1/9  1    7    7    local     Yes     Yes Gi1/0/8   8    8    8    1/8  1    8    8    local     Yes     Yes Gi1/0/9   9    9    9    1/11 1    9    9    local     Yes     Yes Gi1/0/10  10   10   10   1/10 1    10   10   local     Yes     Yes Gi1/0/11  11   11   11   1/13 1    11   11   local     Yes     Yes Gi1/0/12  12   12   12   1/12 1    12   12   local     Yes     Yes Gi1/0/13  13   13   13   1/15 1    13   13   local     Yes     Yes Gi1/0/14  14   14   14   1/14 1    14   14   local     Yes     Yes Gi1/0/15  15   15   15   1/17 1    15   15   local     Yes     Yes Gi1/0/16  16   16   16   1/16 1    16   16   local     Yes     Yes Gi1/0/17  17   17   17   1/19 1    17   17   local     Yes     Yes Gi1/0/18  18   18   18   1/18 1    18   18   local     Yes     Yes Gi1/0/19  19   19   19   1/23 1    19   19   local     Yes     Yes Gi1/0/20  20   20   20   1/22 1    20   20   local     Yes     Yes Gi1/0/21  21   21   21   1/25 1    21   21   local     Yes     Yes Gi1/0/22  22   22   22   1/24 1    22   22   local     Yes     Yes Gi1/0/23  23   23   23   1/27 1    23   23   local     Yes     Yes Gi1/0/24  24   24   24   1/26 1    24   24   local     Yes     Yes Gi1/0/25  25   25   25   2/1  1    25   25   local     Yes     Yes Gi1/0/26  26   26   26   2/0  1    26   26   local     Yes     Yes Gi1/0/27  27   27   27   2/3  1    27   27   local     Yes     Yes Gi1/0/28  28   28   28   2/2  1    28   28   local     Yes     Yes Gi1/0/29  29   29   29   2/5  1    29   29   local     Yes     Yes Gi1/0/30  30   30   30   2/4  1    30   30   local     Yes     Yes Gi1/0/31  31   31   31   2/9  1    31   31   local     Yes     Yes Gi1/0/32  32   32   32   2/8  1    32   32   local     Yes     Yes Gi1/0/33  33   33   33   2/11 1    33   33   local     Yes     Yes Gi1/0/34  34   34   34   2/10 1    34   34   local     Yes     Yes Gi1/0/35  35   35   35   2/13 1    35   35   local     Yes     Yes Gi1/0/36  36   36   36   2/12 1    36   36   local     Yes     Yes Gi1/0/37  37   37   37   2/15 1    37   37   local     Yes     Yes Gi1/0/38  38   38   38   2/14 1    38   38   local     Yes     Yes Gi1/0/39  39   39   39   2/17 1    39   39   local     Yes     Yes Gi1/0/40  40   40   40   2/16 1    40   40   local     Yes     Yes Gi1/0/41  41   41   41   2/19 1    41   41   local     Yes     Yes Gi1/0/42  42   42   42   2/18 1    42   42   local     Yes     Yes Gi1/0/43  43   43   43   2/23 1    43   43   local     Yes     Yes Gi1/0/44  44   44   44   2/22 1    44   44   local     Yes     Yes Gi1/0/45  45   45   45   2/25 1    45   45   local     Yes     Yes Gi1/0/46  46   46   46   2/24 1    46   46   local     Yes     Yes Gi1/0/47  47   47   47   2/27 1    47   47   local     Yes     Yes interface gid  gpn  lpn  port slot unit slun port-type lpn-idb gpn-idb ---------------------------------------------------------------------- Gi1/0/48  48   48   48   2/26 1    48   48   local     Yes     Yes Gi1/1/1   49   49   49   0/6  1    49   49   local     Yes     Yes Gi1/1/2   50   50   50   0/7  1    50   50   local     Yes     Yes Gi1/1/3   51   51   51   0/20 1    51   51   local     Yes     Yes Gi1/1/4   52   52   52   0/21 1    52   52   local     Yes     Yes Te1/1/1   53   53   53   0/0  1    1    53   local     Yes     Yes Te1/1/2   54   54   54   0/14 1    2    54   local     Yes     Yes St1       872  872  0    16/0  1    0    0    internal  Yes     Yes CORE.1#show platform port-asic version Port-Asic Version Info: ======================== ASIC-0: Version:4 DeviceType:0x30A ASIC-1: Version:4 DeviceType:0x30A ASIC-2: Version:4 DeviceType:0x30A ... View more

Hello, I'm attempting to limit what IP addreses can connect to an ASA using the SSL VPN. I would have thought control-plane policing would have worked, however it did not. Here is what I configured: access-list vpn_control extended permit tcp object-group allowed_clients interface outside ! access-group vpn_control in interface outside control-plane any suggestions would be appreciated. Thanks! ... View more

Hello, I have a issue where I need to port forward a port from the outside to a host on the inside. The outside interface is a priviate (RFC1918), which is NAT'd to an upstream firewall. The problem is rpf-check DROP and %ASA-5-305013: Topology:  Internet--> Provider running nat --> Outside:10.10.10.2 --> Inside:10.1.2.2 - Provider is translating 10.10.10.2 to a public IP address Configuration: interface Ethernet0/0 description Outside WAN nameif outside security-level 0 ip address 10.10.10.2 255.255.255.0 ! interface Ethernet0/2 description Inside nameif inside security-level 100 ip address 10.1.2.1 255.255.255.252 ! route outside 0.0.0.0 0.0.0.0 10.10.10.1 ! object network User-1 host 10.1.2.2 ! object network 80-server host 10.1.2.2 nat (inside,outside) static interface service tcp 80 80 ! nat (inside,outside) after-auto source dynamic User-1 interface ! access-list Outside-In extended permit tcp any object User-1 eq 80 ! access-list Inside extended permit tcp any any ! access-group Outside-In in interface outside access-group Inside in interface inside Syslog: %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for tcp src outside:x.x.x.x/80 dst inside:10.1.2.2/80 denied due to NAT reverse path failure Packet Trace: Phase: 11 Type: NAT Subtype: rpf-check Result: DROP Config: object network 80-server nat (inside,outside) static interface service tcp 80 80 Additional Information: Forward Flow based lookup yields rule: out id=0xad6f5890, priority=6, domain=nat-reverse, deny=false         hits=410, user_data=0xb1662d28, cs_id=0x0, use_real_addr, flags=0x0, protocol=6         src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0         dst ip/id=10.1.2.2, mask=255.255.255.255, port=80, tag=0, dscp=0x0         input_ifc=outside, output_ifc=inside Result: input-interface: outside input-status: up input-line-status: up output-interface: inside output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule Any assistance would be appreciated. Thanks! ... View more

Hello, I'm looking to roll back firmware on 6941 (SIP) phones. The BE 3000 provides a list of installed software and the ability to upgrade. We do not see a way to delete the new .cop files so we can roll back. Any ideas or knowledge articles would be great. Thanks in advance. ... View more

Hello, I'm looking for the ASA 5510 IPS support contract part number? I beleive it's CON-SU3-A?? Any help is appreciated. Thanks! ... View more

Hello, I'm having an issue allowing legitimate network traffic out. My ASA logs are filling up with: %ASA-4-419002: Duplicate TCP SYN from inside:192.168.1.41/xxxx to outside:172.16.1.215/xxxx with different initial sequence number The traffic is known and good traffic. TCP-bypass did not appear to resolve this issue. Are there any other workarounds or suggestions? Thanks in advance, James ... View more

Is there a way through the CLI to have the ASA 5515-x power back on after a power failure? Currently, the only way to restore power is to press the power button. The X series does not have a power switch the same as the 5500 series. Thanks in advance! ... View more

Problem: When the BE-3000 sends an email to a user with a voicemail attached the subject is "Message from Unknown sender (145)". Is there a way to change the subject line to show somehting else? The From and To lines are correct. Thanks in advance! ... View more