hello everybody hope someone can help Recently primary asa 5510 of a failover pair Active/Standby with state sync  ( verison 8.3(1) ) has failed in unrecoverable state  and we need to replace it What I'm willing to ask is what do we need to do that, as regards hardware and licensing Unfortunately I have no info about the failed unit but i can paste here the show activation key detail for the secondary (now active unit) Result of the command: "show activation-key detail" Serial Number: JMX1421xxxx Running Permanent Activation Key: 0xXXXd175 0xXXXXd652 0xXXXX41f0 0xXXXXf0dc 0xXXXX0d97 Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 100 perpetual Inside Hosts : Unlimited perpetual Failover : Active/Active perpetual VPN-DES : Enabled perpetual VPN-3DES-AES : Enabled perpetual Security Contexts : 2 perpetual GTP/GPRS : Disabled perpetual SSL VPN Peers : 2 perpetual Total VPN Peers : 250 perpetual Shared License : Disabled perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual AnyConnect Essentials : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual UC Phone Proxy Sessions : 2 perpetual Total UC Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Intercompany Media Engine : Disabled perpetual This platform has an ASA 5510 Security Plus license. Failover cluster licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 100 perpetual Inside Hosts : Unlimited perpetual Failover : Active/Active perpetual VPN-DES : Enabled perpetual VPN-3DES-AES : Enabled perpetual Security Contexts : 4 perpetual GTP/GPRS : Disabled perpetual SSL VPN Peers : 4 perpetual Total VPN Peers : 250 perpetual Shared License : Disabled perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual AnyConnect Essentials : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual UC Phone Proxy Sessions : 4 perpetual Total UC Proxy Sessions : 4 perpetual Botnet Traffic Filter : Disabled perpetual Intercompany Media Engine : Disabled perpetual This platform has an ASA 5510 Security Plus license. Running Permanent Activation Key: 0xXXXXd175 0xXXXXd652 0xXXXX41f0 0xXXXXf0dc 0xXXXX0d97 Licensed permanent key features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 100 perpetual Inside Hosts : Unlimited perpetual Failover : Active/Active perpetual VPN-DES : Enabled perpetual VPN-3DES-AES : Enabled perpetual Security Contexts : 2 perpetual GTP/GPRS : Disabled perpetual SSL VPN Peers : 2 perpetual Total VPN Peers : 250 perpetual Shared License : Disabled perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual AnyConnect Essentials : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual UC Phone Proxy Sessions : 2 perpetual Total UC Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Intercompany Media Engine : Disabled perpetual The flash permanent activation key is the SAME as the running permanent key. Do I need a new unit with base license? what part number? how can I be shure the license shown above is the hardcoded one or an eventually inherited from primary? Upon adding the new unit (if with base license) can I make this secondary unit primary and be shure the license will not get lost? thank you for any help that will be greatly appreciated ... View more

Hello, hope someone can help me to figure out what's happening this the situation we recently migrated from ise 1.2 to 1.4 and hera no problem made the only exception that the system couldn't retrive the SIDs of  some active directory groups which belonged to two different domains let's say domain2 and domain3 which are bidirectionally trusted with Domain1 (the domain on which the ise nodes are registered) not  a big problem as we did manually set those values and authentications went all ok now we patched the system with patch 6 and as soon the patch was applied the authentications for domain 2 and 3 are no longer happening as the system reports the machine cannot be found at the joinpoint, lots of errors are arising on the dashboard saying domains are not available and dns not reachable, the domains in the forest are ok and not "unusable" of course dns is reachable and the setup is still the same as it was on ise 1.2 and ise 1.4 fresh upgrade (before installing patch 6),  now the whole deployment is rolling back to uninstall patch 6, just wanted to know if someone had this issue and eventually how to solve it  p.s.at this time the nodes have visibility for the domain controllers of domain1 (should we open to the other ones?) thank you in advance for any hint, advice or suggestion ... View more

Please help We are trying to upgrade our PI 2.2.0.0.158 to 2.2.2  using ubf patch "pi222-41.ubf" , this cause the jobs are Not Running and in a stuck state but.... the system rejects it (the patch) with the following errors (non exaustive):   Operation has failed: The artifact MapTilingService.class required by patch CSCur91955 is missing-UPDATE_004 The artifact libXfont-1.2.2-1.0.6.el5_11.x86_64.rpm required by patch CSCur98459 is missing-UPDATE_004 The artifact av_network_interfaces.html required by patch CSCun13936 is missing-UPDATE_004 The artifact DistributeImages.js required by patch CSCur94231 is missing-UPDATE_004 The artifact aems-pal-av-module-2.1.0-1374.xar required by patch CSCur89574 is missing-UPDATE_004 The artifact AclObjectSelector.class required by patch CSCur07071 is missing-UPDATE_004 The artifact ConfigRestIf.class required by patch CSCur45918 is missing-UPDATE_004 The artifact AdvancedIPAddress.js required by patch CSCuq89751 is missing-UPDATE_004 The artifact ImageImporter.js required by patch CSCur94205 is missing-UPDATE_004 The artifact AggregatedCondition.class required by patch CSCus04827 is missing-UPDATE_004 The artifact QoSPolicyConfigDialog.js required by patch CSCus10438 is missing-UPDATE_004 The artifact aems-pal-parameterMap-module-2.1.0-1374.xar required by patch CSCup77708 is missing-UPDATE_004 The artifact AVCPortGroupSelector.js required by patch CSCur07017 is missing-UPDATE_004 The artifact QosProfileManagerImpl.class required by patch CSCus16073 is missing-UPDATE_004 The artifact mobilityGroupConfigDetailList_jsp.class required by patch CSCuq04356 is missing-UPDATE_004 The artifact MobilityGroupConfigEditAction.class required by patch CSCur80193 is missing-UPDATE_004 The artifact MobilityGroupConfigGeneralAction.class required by patch CSCur98071 is missing-UPDATE_004 The artifact interfaceConfigDetail_jsp.class required by patch CS .....MOREMOREMORE   .... and much more this is a supported scenario as stated from documentation for ubf patch   any idea?   thank you in advance   ... View more

Hello    I would like to ask a question regarding the wired devices monitoring section of PI   I know there is a background task that monitors wired devices (switch operational status) status actually set to 5 min and 15 min (full operational status)   There is also a default health monitoring template (for wich like any other template is impossible to see on wich device is deployed)   1 what is the difference between the background task and the template? (they have different polling intervals) 2 how is it possible to verify a monitoring tamplate on wich device or group is applied? 3 what is the difference between interval and full oerational status in the switch operational status backround task settings?   thank you in advance ... View more

on 20_05 we updatedto 2.1 in 22 we begun adding datacenter switches to DVC with public snmp community afterwards we noticed vlan fetching inventory status failed further investigation : on the same day application logging reports: 05/22/14 10:39:26.380 INFO  [admin] [Thread-3] TFTP logs:Unexpected Error in TFTP Server - Server shut down! + org.apache.commons.net.tftp. TFTPPacketException: Bad packet. Datagram data length is too short. now ncs status reports: Ftp Server is running Database server is running Tftp Server is Failure Matlab Server is running NMS Server is running. Plug and Play Gateway is running. SAM Daemon is running ... DA Daemon is running ... Syslog Daemon is running ..   iptables are ok: 47   ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:69 and no process using port 69 is found nor named tftp via netstat grep tftp what is happening? (now I know the crash has been triggered by a security auditing... -.-)   is there a way to restart tftp only rather than the whole ncs ? (maybe via ADE root?)   thank you   ... View more