Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About jmfranco
Stats
Member since
08-22-2003
47
Posts
0
Helpful
0
Solutions
Created by
jmfranco
in Application Networking
in Application Networking
12-18-2012
01:17 AM
12-18-2012
01:17 AM
Hi Nicolas. Thanks a lot for your help. As you can see, I was trying from external tftp server, but I have tested from router where NME is inserted too, configured as tftp server, and I obtain the same result. I think I´ll go ahead with hardware replacement. B.R.
... View more
Created by
jmfranco
in Application Networking
in Application Networking
12-18-2012
12:31 AM
12-18-2012
12:31 AM
Hi Nicolas, thanks for your response. Your suggested procedure is fine for NME-WAE. However I think our NME-WAE is crashing before to reach BOOT-PHASE3 as described in procedure, so I don´t know if i have to go ahead with sysimg images. Anyway, I have been testing with diferent sysimg versions, and I always obtain the same result: I obtain "corrupted netboot image" error ServicesEngine boot-loader> show config| IP addr: 1.1.1.9 Netmask: 255.255.255.0 TFTP server : 1.1.1.1 GW IP addr: 1.1.1.1 eth int: external Default boot: chainloader Bootloader Version: 2.1.15.22 Bootloader Name: WAAS_BOOTLOADER Default Helper-file: waas-4.4.5d.5-k9.sysimg Default bootloader: secondary External i/f media: copper ServicesEngine boot-loader> boot helper/ Invalid signature hdr imgaddr[0]: 0x67, g imgaddr[1]: 0x31, 1 imgaddr[2]: 0x64, d imgaddr[3]: 0x31, 1 imgaddr[4]: 0x78, x imgaddr[5]: 0x0, imgaddr[6]: 0x0, imgaddr[7]: 0x0, imgaddr[8]: 0x0, imgaddr[9]: 0x0, imgaddr[10]: 0x0, imgaddr[11]: 0x0, imgaddr[12]: 0x0, imgaddr[13]: 0x0, imgaddr[14]: 0x0, imgaddr[15]: 0x0, imgaddr[16]: 0x2, imgaddr[17]: 0x0, imgaddr[18]: 0x0, imgaddr[19]: 0x0, imgaddr[20]: 0x64, d imgaddr[21]: 0x2>, . imgaddr[22]: 0x6>, n imgaddr[23]: 0x0, imgaddr[24]: 0x??????98, ˜ Corrupted netboot image detected ServicesEngine boot-loader> boot helper/ Invalid signature hdr imgaddr[0]: 0x67, g imgaddr[1]: 0x31, 1 imgaddr[2]: 0x64, d imgaddr[3]: 0x31, 1 imgaddr[4]: 0x78, x imgaddr[5]: 0x0, imgaddr[6]: 0x0, imgaddr[7]: 0x0, imgaddr[8]: 0x0, imgaddr[9]: 0x0, imgaddr[10]: 0x0, imgaddr[11]: 0x0, imgaddr[12]: 0x0, imgaddr[13]: 0x0, imgaddr[14]: 0x0, imgaddr[15]: 0x0, imgaddr[16]: 0x2, imgaddr[17]: 0x0, imgaddr[18]: 0x0, imgaddr[19]: 0x0, imgaddr[20]: 0x64, d imgaddr[21]: 0x2>, . imgaddr[22]: 0x6>, n imgaddr[23]: 0x0, imgaddr[24]: 0x??????98, ˜ Corrupted netboot image detected any idea?
... View more
Created by
jmfranco
in Application Networking
in Application Networking
12-17-2012
07:32 AM
12-17-2012
07:32 AM
Thanks Nicolas, but this procedure is only for WAE appliances. Now I´m trying to load sysimg from usb pendrive connected to one of router 2800 usb ports, and I´m configuring IOS router as TFTP server for sysimg file, but It doesn´t seems to work fine. Anybody could tell me software recovery procedure on this kind of NME platforms? router(config)#tftp-server usbflash1:waas-4.4.7.4-k9.sysimg router(config)#end router#sh run interface integrated-Service-Engine 1/0 ! interface Integrated-Service-Engine1/0 ip address 1.1.1.1 255.255.255.0 service-module ip address 1.1.1.9 255.255.255.0 service-module ip default-gateway 1.1.1.1 no keepalive end router#service-module integrated-Service-Engine 1/0 session Trying 1.1.1.1, 2066 ... Open ServicesEngine boot-loader> ServicesEngine boot-loader> show config IP addr: 10.1.1.9 Netmask: 255.255.255.0 TFTP server : 10.1.1.1 GW IP addr: 10.1.1.1 eth int: internal Default boot: chainloader Bootloader Version: 2.1.15.22 Bootloader Name: WAAS_BOOTLOADER Default Helper-file: /waas-4.4.7.4-k9.sysimg Default bootloader: secondary External i/f media: copper B.R.
... View more
Created by
jmfranco
in Application Networking
in Application Networking
12-17-2012
06:03 AM
12-17-2012
06:03 AM
Hi. I have added a new NME-WAE-502-K9 in one of our remote Cisco 2811 routers. This module doesn´t boot, and it seems to be in a loop trying to boot. I´m trying to find documentation about how to proceed with this kind of situations and this kind of network modules, but don´t find anything helpful. Please, could you give me a help? router #service-module integrated-Service-Engine 1/0 status Service Module is Cisco Integrated-Service-Engine1/0 Service Module supports session via TTY line 66 Service Module is failed Service Module heartbeat-reset is enabled Service Module is in fail open Service Module status is not available [Resuming connection 1 to 1.1.1.1 ... ] ServicesEngine boot-loader> ServicesEngine boot-loader> reboot Rebooting !ÿNmi Npx0 Dly P92 Sha0 Kbd0 Cmos Pci Dma0 PrtB Tim Exp Rfsh Geom Initializing memory. Please wait. Mem0 Mem1 Ebda Sha1 CacheE Admgr1 Memmgr1 Adm grEbda Media LowBios Brd2 Cache0 Driver PostDrv Dma1 Irq1 Vec Brd4 Time0 Kbd1 Sp eed Com Vid0 Par PciEnum Vid1 Redir Brd6 Com KbdBuf SMM General Software Firmbase[r] SMM Kernel 1.3.2 Feb 11 2005 11:51:07 Intel(R) E7320 Performance Development Platform EIST: Enhanced Intel Speedstep Driver, V3.0. EIST: Copyright (C) 2003-2006 General Software, Inc. EIST: Built Mar 3 2006, 14:49:27 UsbHid Pwd Msg0 Msg1 Cache1 Mem2 Prot Cache2 Flg Siz0 Msg2 Ata Dsk Npx1 Apm Err Dbg Enb App MemReduce MemSync1 Ext MemSync2 PciRom MemSync3 Setup Time1 Mfg Brd8 Com Admgr2 Cfg Brd10 DDR2 Memory 1023 MB with ECC detected Intel(R) Celeron(R) M processor 1.00GHz BIOS ISE 5.00, Build date: 05/05/06 System Now Booting ... Force to boot from Primary Boot Loader ... 704 832 968 1040 1172 1184 1196 1208 1220 1228 1240 1260 1276 1288 1304 1320 133 2 1348 1368 1380 1644 1784 2060 2204 2344 2860 3376 3640 3904 4168 RSA decrypt r eturned:33 a2f9b14f5b559e31560726525c22077b Booting from Secure primary boot loader..., please wait. [BOOT-ASM] Please enter '***' to change boot configuration: got meta list size: 2, 23, 70, 244 file opened: (hd0,1)+1, -1, -1 file closed: (hd0,1)+1 file opened: (hd0)1+255, -1, -1 file closed: (hd0)1+255 Unable to boot imageÿNmi Npx0 Dly P92 Sha0 Kbd0 Cmos Pci Dma0 PrtB Tim Exp Rfsh Geom Initializing memory. Please wait. Mem0 Mem1 Ebda Sha1 CacheE Admgr1 Memmgr1 Adm grEbda Media LowBios Brd2 Cache0 Driver PostDrv Dma1 Irq1 Vec Brd4 Time0 Kbd1 Sp eed Com Vid0 Par PciEnum Vid1 Redir Brd6 Com KbdBuf SMM General Software Firmbase[r] SMM Kernel 1.3.2 Feb 11 2005 11:51:07 Intel(R) E7320 Performance Development Platform EIST: Enhanced Intel Speedstep Driver, V3.0. EIST: Copyright (C) 2003-2006 General Software, Inc. EIST: Built Mar 3 2006, 14:49:27 UsbHid Pwd Msg0 Msg1 Cache1 Mem2 Prot Cache2 Flg Siz0 Msg2 Ata Dsk Npx1 Apm Err Dbg Enb App MemReduce MemSync1 Ext MemSync2 PciRom MemSync3 Setup Time1 Mfg Brd8 Com Admgr2 Cfg Brd10 DDR2 Memory 1023 MB with ECC detected Intel(R) Celeron(R) M processor 1.00GHz BIOS ISE 5.00, Build date: 05/05/06 System Now Booting ... Force to boot from Primary Boot Loader ... 704 832 968 1040 1172 1184 1196 1208 1220 1228 1240 1260 1276 1288 1304 1320 133 2 1348 1368 1380 1644 1784 2060 2204 2344 2860 3376 3640 3904 4168 RSA decrypt r eturned:33 a2f9b14f5b559e31560726525c22077b Booting from Secure primary boot loader..., please wait. [BOOT-ASM] Please enter '***' to change boot configuration: got meta list size: 2, 23, 70, 244 file opened: (hd0,1)+1, -1, -1 file closed: (hd0,1)+1 file opened: (hd0)1+255, -1, -1 file closed: (hd0)1+255 Unable to boot imageÿNmi Npx0 Dly P92 Sha0 Kbd0 Cmos Pci Dma0 PrtB Tim Exp Rfsh Geom Initializing memory. Please wait. Mem0 Mem1 Ebda Sha1 CacheE Admgr1 Memmgr1 Adm grEbda Media LowBios Brd2 Cache0 Driver PostDrv Dma1 Irq1 Vec Brd4 Time0 Kbd1 Sp eed Com Vid0 Par PciEnum Vid1 Redir Brd6 Com KbdBuf SMM General Software Firmbase[r] SMM Kernel 1.3.2 Feb 11 2005 11:51:07 Intel(R) E7320 Performance Development Platform
... View more
Labels:
10-03-2012
04:50 AM
Ops!! I forgot to paste involved routes from both devices. ASR router ---------------- ip route vrf EXTERNOS2 10.200.24.0 255.255.248.0 10.255.68.245 tag 6 ip route vrf EXTERNOS2 185.1.1.0 255.255.255.0 Tunnel21 tag 6 <--- c819G LAN network Cisco 819G ----------------- ip route 0.0.0.0 0.0.0.0 Tunnel1 ip route 10.255.68.246 255.255.255.255 Cellular0 B.R.
... View more
10-03-2012
04:38 AM
Hi I´m trying to configure IPsec over GRE tunnel between Cisco 819G remote router and ASR 1002 central router using crypto maps. Currently ASR router has two vrf´s (management vrf and EXTERNOS2 vrf) and in the future we are going to deploy different "virtual" routers from this box. I don´t know why it doesn´t work, tunnel interface doesn´t go up. Taking a view to debugs obtained from ASR router (debug crypto isakmp and debug crypto ipsecI see the following errors: Oct 3 13:11:33: IPSEC(validate_proposal_request): proposal part #1 Oct 3 13:11:33: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 10.255.68.246:0, remote= 10.200.25.106:0, local_proxy= 10.255.68.246/255.255.255.255/256/0, remote_proxy= 10.200.25.106/255.255.255.255/256/0, protocol= ESP, transform= NONE (Transport), lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0 Oct 3 13:11:33: Crypto mapdb : proxy_match src addr : 10.255.68.246 dst addr : 10.200.25.106 protocol : 0 src port : 0 dst port : 0 Oct 3 13:11:33: map_db_check_isakmp_profile profile did not match Oct 3 13:11:33: Crypto mapdb : proxy_match src addr : 10.255.68.246 dst addr : 10.200.25.106 protocol : 0 src port : 0 dst port : 0 Oct 3 13:11:33: map_db_check_isakmp_profile profile did not match Oct 3 13:11:33: map_db_find_best did not find matching map Oct 3 13:11:33: IPSEC(ipsec_process_proposal): proxy identities not supported Oct 3 13:11:33: ISAKMP:(35001): IPSec policy invalidated proposal with error 32 Oct 3 13:11:33: ISAKMP:(35001): phase 2 SA policy not acceptable! (local 10.255.68.246 remote 10.200.25.106) anybody could help me to troubleshoot why it doesn´t work? I post you involved configuration sections from ASR and 819G routers B.R.
... View more
Labels:
07-08-2012
11:58 PM
Hi. We are going to deploy a central pool of snasw routers concentrating a lot of SNA resources (Cisco 3845 and 12.4 IOS versions). We are wanting to know about some SNASw limits: - Number of snasw location commands supported by IOS software in this kind of platform. - Number of PU´s. - Number of LU´s. - total active sessions and per LU. B.R.
... View more
Labels:
11-25-2011
01:01 AM
Hi. We have a new ASR 1002 router in which UnconfiguredIPv4Fia drops counter is increasing continously. Anybody could help me to troubleshoot the reason of this kind of drops? I have tried to look for tech info about it, but I have found nothing. REMOTE-ROUTER-PPAL#sh platform hardware qfp active statistics drop det -------------------------------------------------------------------------------- ID Global Drop Stats Packets Octets -------------------------------------------------------------------------------- 10 BadIpChecksum 160 211168 134 Disabled 42 5956 58 Icmp 34 1600 59 IpTtlExceeded 14 1242 90 Ipv4NoAdj 3417 539994 19 Ipv4NoRoute 10 766 69 Ipv4RoutingErr 786 177807 85 Mlp 1 36 20 QosPolicing 2703 3684922 72 ReassDrop 2 1569 74 ReassNoFragInfo 1 67 79 ReassTimeout 1 0 22 TailDrop 719 923171 208 UnconfiguredIpv4Fia 17554906 17191887731 209 UnconfiguredIpv6Fia 1604 186064 23 Wred 968 1063646 K.R.
... View more
Labels:
Created by
jmfranco
in Application Networking
in Application Networking
02-22-2011
11:56 PM
02-22-2011
11:56 PM
Hi. This week we have deployed a pair of 7341 in our central office and a two remote offices with NME-WAE-502. All seems to work fine, users notice better application time response, but there is something I can´t understand. Taking a view to bandwidth utilization graphs of wan interfaces, I notice a lot of traffic reduction in servers (in central office) to clients (in remote offices) traffic, but I see clients to servers traffic remains the same compared with bandwidth graphs of some days before. Is this the expected behavior? Do I have to see traffic reduction in client to servers traffic? Thanks.
... View more
Created by
jmfranco
in Application Networking
in Application Networking
02-21-2011
04:44 AM
02-21-2011
04:44 AM
Hi Peter. Thanks for your answer. I have configured a SNMP read-only community and a second SNMP read-write-community. I´m looking for to allow to everybody SNMP read-only community access, and only two or three ip addresses could access to SNMP read-write community, using SNMP v2c. I have been testing with "snmp-server access-list ", and this command restrict SNMP access (using read-only or read-write communities) only for IP addresses in ACL. Another devices not specified in ACL are unable to access to WAE devices, even using read-only community. B.R.
... View more
Created by
jmfranco
in Application Networking
in Application Networking
02-15-2011
07:26 AM
02-15-2011
07:26 AM
Hi. We are triying to restrict SNMP write community access in WAE devices. We want only some management platforms ip addresses will be able to access to wae devices using SNMP write community but we are unable to do it using GUI or CLI. CLI has "snmp-server access-list" command, but we don´t find the way to link it with "snmp-server community <...> rw" command. Do you know the way to do it? Thanks!!.
... View more
06-23-2010
04:29 AM
Hi. We are testing port-security in Cat4510+Sup6E with ip phone switch ports (7911 ip phones).We are trying with the following configuration: interface GigabitEthernet4/35 description Usuario switchport access vlan 251 switchport mode access switchport voice vlan 261 switchport port-security maximum 3 switchport port-security maximum 2 vlan access switchport port-security maximum 1 vlan voice switchport port-security switchport port-security violation restrict no logging event link-status load-interval 60 no snmp trap link-status spanning-tree portfast spanning-tree bpduguard enable service-policy output pm_trusted vlan-range 251 service-policy input pm_accesodat vlan-range 261 service-policy input pm_accesovoz If we connect ip phone to switchport, ip phone works fine, but if we connect PC belonging to ip phone, a security-violation occurs and port is shutted down and Ip phone and PC doesn´t works. We have tried only with "switchport port-security maximum 3", and fixing maximum mac addres for voice and data vlans (1 and 2. but it doesn´t work. Taking a view to switch log when we connect pc to ip phone: 090543: Jun 23 13:08:52 CEST: %AUTHMGR-5-SECURITY_VIOLATION: Security violation on the interface Gi4/35, new MAC address (001c.c0e4.c9f4) is seen. 090544: Jun 23 13:08:52 CEST: %AUTHMGR-5-SECURITY_VIOLATION: Security violation on the interface GigabitEthernet4/35, new MAC address (001c.c0e4.c9f4) is seen. 090545: Jun 23 13:08:52 CEST: %PM-4-ERR_DISABLE: security-violation error detected on Gi4/35, putting Gi4/35 in err-disable state 090546: 147038: .Jun 23 13:08:52 CEST: %PM-4-ERR_DISABLE: STANDBY:security-violation error detected on Gi4/35, putting Gi4/35 in err-disable state 001c.c0e4.c9f4 is pc mac address. Can you help us to troubleshoot what is happening? Thanks I think security-violation occurs because switc
... View more
Labels:
06-21-2010
04:57 AM
Hi. Im trying to configure persistent SSH across management Interface in our new Cisco ASR 1004 platforms. Well, It seems to work fine, however when I try ssh to management interface: 1. TACACS+ authentication doesn´t work. Only local authentication (usernames configured in local) works with persistent SSH. Taking a view to ASR 1004 user guide, aaa is not supported over management interface configured for persistent SSH. Ok, it´s clear for me. 2. SSH session is stuck waiting for free TTY line, but only I´m trying to access to it ¿¿??. I only get into router emulation using persistent SSH, in diag mode pressing Ctrl+C or Ctrl+Shift+6, but you know in diag mode we won´t obtain full line vty capabilities. Anybody knows why don´t we obtain TTY line access using persistent SSH? This is our config: transport-map type persistent ssh sshmg rsa keypair-name ASR_CBR4.elcorteingles.es transport interface GigabitEthernet0 banner wait "*** WAITING FOR VTY LINE - CBR4***" banner diagnostic "***DIAGNOSTIC MODE - CUBR4***" connection wait allow interruptible transport type persistent ssh input sshmg B.R. 2.
... View more
Labels:
06-02-2010
07:48 AM
Hi. We are noticing "someone" is moving ip-phones of meeting rooms (some of them are hands-free). To solve this issue, we want to fix ip-phone mac address to port switch. By this way, meeting rooms IP-phone will work only in fixed switch ports. If "someone" try to disconnect one IP-phone to connect it in another switch port, IP-phone didn´t work. What do you think is the best way to achieve our objective? We are thinking to use port-security in meeting rooms switch ports, but we don´t want to configure port-security in all switch ports (pc switch ports, printers switch ports,...). What is the behavior of port security if switch see Ip-phone mac address in a different port in which port security is not configured? IP-phone mac address could be blocked or allowed? Perhaps "mac address-table" command could be useful. Can you tell me you point of view about this issue?
... View more
Labels:
02-02-2010
11:49 PM
Hi Edison, thanks for your response. Take a look to this port config port. It is the same config for all ports. You can see we have attached a different policy-map for data vlan and voice vlan. interface GigabitEthernet1/3 description Usuario switchport access vlan 253 switchport mode access switchport voice vlan 263 no logging event link-status load-interval 60 no snmp trap link-status spanning-tree portfast spanning-tree bpduguard enable vlan-range 253 service-policy input pm_accesodat vlan-range 263 service-policy input pm_accesovoz If you try "show policy-map interface GigabitEthernet x/y" you will see the same output for all ports (you can see it in attached files, we are thinking show policy-map command is showing aggregated statistics for both vlans), and we want to know if it´s possible to obtain this command output specifically for one port.
... View more
12-18-2012
Hi Nicolas. Thanks a lot for your help. As you can see, I was trying
from external tftp server, but ...
12-18-2012
Hi Nicolas, thanks for your response. Your suggested procedure is fine
for NME-WAE. However I think ...
12-17-2012
Thanks Nicolas, but this procedure is only for WAE appliances. Now I´m
trying to load sysimg from us...
12-17-2012
Hi.I have added a new NME-WAE-502-K9 in one of our remote Cisco 2811
routers. This module doesn´t bo...
10-03-2012
Ops!! I forgot to paste involved routes from both devices.ASR
router----------------ip route vrf EXT...
10-03-2012
HiI´m trying to configure IPsec over GRE tunnel between Cisco 819G
remote router and ASR 1002 centra...
07-08-2012
Hi.We are going to deploy a central pool of snasw routers concentrating
a lot of SNA resources (Cisc...
11-25-2011
Hi.We have a new ASR 1002 router in which UnconfiguredIPv4Fia drops
counter is increasing continousl...
Created by
jmfranco
in Application Networking
02-22-2011
02-22-2011
Hi.This week we have deployed a pair of 7341 in our central office and a
two remote offices with NME...
Created by
jmfranco
in Application Networking
02-21-2011
02-21-2011
Hi Peter.Thanks for your answer.I have configured a SNMP read-only
community and a second SNMP read-...
Created by
jmfranco
in Application Networking
02-15-2011
02-15-2011
Hi.We are triying to restrict SNMP write community access in WAE
devices. We want only some manageme...
06-21-2010
Hi.Im trying to configure persistent SSH across management Interface in
our new Cisco ASR 1004 platf...
Public Statistics
| Date Registered | 08-22-2003 01:14 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 47 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 3 | |
| 4 | |
| 2 | |
| 5 |
.jpg "Hall of Fame Expert"){kind=icon}
