we have enable aaa on the asa firewall question is   is it possible to login to asa via console with local authentication and bypass aaa  ... View more

Hi   Requirement is we have configure  span and its working fine but we need to filter the traffic.scenario is     1 deny one host source  to host destination 2  try to configure vlan map and when configuring filter access group command it gives error  "acl/vlan fitler not supported for TX direction   How we can achieve this.snapshot of some configuration attached ... View more

Hi Team,   Getting below error while saving the configuration   Unable to save the configuration due to error '' Unable to open flash config.txt.new''  I can see below below bug detail but i can;t see details   CSCto07667issue with two of his 2x3750 stacks- unable to do write mem   Below is show ver   Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.0(2)SE8, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Wed 13-May-15 22:53 by prod_rel_team ROM: Bootstrap program is C3750E boot loader BOOTLDR: C3750E Boot Loader (C3750X-HBOOT-M) Version 12.2(53r)SE2, RELEASE SOFTWARE (fc1) AUH-ICHQ-SER-13Flr-SW uptime is 21 weeks, 3 days, 7 hours, 5 minutes System returned to ROM by power-on System restarted at 15:32:32 GMT Fri Aug 31 2018 System image file is "flash:c3750e-universalk9-mz.150-2.SE8.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. License Level: lanbase License Type: Permanent Next reload license Level: lanbase cisco WS-C3750X-48P (PowerPC405) processor (revision A0) with 262144K bytes of memory. Processor board ID Last reset from power-on 2 Virtual Ethernet interfaces 1 FastEthernet interface 132 Gigabit Ethernet interfaces 6 Ten Gigabit Ethernet interfaces The password-recovery mechanism is enabled.     ... View more

Please find logs below   Aug  5 05:21:39.891: %DHCPD-4-HA_CONFIG_MISMATCH: STANDBY:DHCP pool wireless-ap configuration on Active is not matched on the Standby. Aug  5 05:23:05.621: %DHCPD-4-HA_CONFIG_MISMATCH: STANDBY:DHCP pool wireless-ap configuration on Active is not matched on the Standby.   show ver Cisco IOS-XE software, Copyright (c) 2005-2015 by cisco Systems, Inc. All rights reserved.  Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0.  The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. (http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software.   ROM: 15.1(1r)SG5 DHCA-B13-GF1-MDF-DSW01 uptime is 6 weeks, 3 days, 22 hours, 27 minutes Uptime for this control processor is 6 weeks, 3 days, 22 hours, 29 minutes System returned to ROM by power-on System restarted at 14:09:39 GST Thu Jun 21 2018 System image file is "bootflash:cat4500es8-universalk9.SPA.03.08.05.E.152-4.E5.bin" Jawa Revision 3, RadTrooper Revision 0x0.0x41, Conan Revision 0x1B9E   ... View more

access-list SERVER-TIMEOUT remark TCP Idle Timeout value for Core Services - 10 Hours access-list SERVER-TIMEOUT extended permit tcp 10.240.178.0 255.255.255.0 any class-map TCP-IdleTimeout-STO-in  description TCP Idle Timeout value for Core Services - 10 Hours  match access-list SERVER-TIMEOUT policy-map STO-policy  description TCP Idle Timeout value for Core Services - 10 Hours  class TCP-IdleTimeout-STO-in   set connection timeout idle 10:00:00 service-policy STO-policy interface SERVER I need to migrate the following to Cisco FTD. But as per the document in FLex config timeout commands are blacklisted. Needs to know how i will migrate to FTD. http://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/flexconfig_policies.html ... View more

Hi Team, i am not seeing any option to renew self signed certifcate on FMC 2000 Please advise ... View more

Hi Team, I am configure OSPF process 2 and getting error %OSPF: Only one OSPF process is allowed.Below is show version   CBI-DR-CORE-SW01(config)#router ospf 2 %OSPF: Only one OSPF process is allowed. CBI-DR-CORE-SW01(config)# CBI-DR-CORE-SW01#show version Cisco IOS Software, s2t54 Software (s2t54-IPBASEK9-M), Version 15.1(1)SY1, RELEASE SOFTWARE (fc5) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2013 by Cisco Systems, Inc. Compiled Wed 01-May-13 12:43 by prod_rel_team   ROM: System Bootstrap, Version 12.2(50r)SYS3, RELEASE SOFTWARE (fc1)   CBI-DR-CORE-SW01 uptime is 2 years, 32 weeks, 4 days, 18 hours, 52 minutes Uptime for this control processor is 2 years, 32 weeks, 4 days, 19 hours, 0 minutes System returned to ROM by power on System restarted at 16:49:39 UTC Mon Sep 8 2014 System image file is "bootdisk:s2t54-ipbasek9-mz.SPA.151-1.SY1.bin" Last reload reason: power-on       This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.   A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html   If you require further assistance please contact us by sending email to export@cisco.com.   cisco WS-C6509-E (M8572) processor (revision ) with 1785856K/262144K bytes of memory. Processor board ID SMC17420018 CPU: MPC8572_E, Version: 2.2, (0x80E80022) CORE: E500, Version: 3.0, (0x80210030) CPU:1500MHz, CCB:600MHz, DDR:600MHz L1:    D-cache 32 kB enabled         I-cache 32 kB enabled   Last reset from power-on 20 Virtual Ethernet interfaces 198 Gigabit Ethernet interfaces 4 Ten Gigabit Ethernet interfaces 2543K bytes of non-volatile configuration memory.   Configuration register is 0x2102     ... View more

Hi Team, Below messages found in logs Mar 19 09:46:45.980 UAE: %OOM-1-LOW_MEM_CONDITION_REACHED: STANDBY:6 oom_poll.sh: System memory available is less than 10 percent Mar 19 09:47:16.040 UAE: %OOM-1-LOW_MEM_CONDITION_REACHED: STANDBY:6 oom_poll.sh: System memory available is less than 10 percent Mar 19 09:47:46.106 UAE: %OOM-1-LOW_MEM_CONDITION_REACHED: STANDBY:6 oom_poll.sh: System memory available is less than 10 percent Mar 19 09:48:16.169 UAE: %OOM-1-LOW_MEM_CONDITION_REACHED: STANDBY:6 oom_poll.sh: System memory available is less than 10 percent Mar 19 09:48:46.231 UAE: %OOM-1-LOW_MEM_CONDITION_REACHED: STANDBY:6 oom_poll.sh: System memory available is less than 10 percen Show version DOZ-MB-Bxxxxxxxxx uptime is 1 year, 6 weeks, 1 day, 3 hours, 5 minutes Uptime for this control processor is 1 year, 6 weeks, 1 day, 3 hours, 7 minutes System returned to ROM by power-on System restarted at 10:50:30 UAE Fri Feb 5 2016 System image file is "bootflash:cat4500es8-universalk9.SPA.03.06.03.E.152-2.E3.bin" Jawa Revision 3, RadTrooper Revision 0x0.0x41, Conan Revision 0x1449 Last reload reason: power-on This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. License Information for 'WS-X45-SUP8-E' License Level: ipbase Type: Permanent Next reboot license Level: ipbase cisco WS-C4510R+E (P5040) processor (revision 2) with 4194304K bytes of physical memory. Processor board ID xxxxxxxxxxx P5040 CPU at 2.2GHz, Supervisor 8-E Last reset from PowerUp 3 Virtual Ethernet interfaces 384 Gigabit Ethernet interfaces 16 Ten Gigabit Ethernet interfaces 511K bytes of non-volatile configuration memory. Configuration register is 0x2102 ... View more

We have upgraded the ASA from version 8.2 to 9.1(7)11 ,post installation we have to migrate the CSM from CSM 4.4 service pack 2 to 4.12. Please let us know whether we can export the device from the old CSM and import it in new CSM,  Thanks ... View more

Hi , I am getting below error in the logs .There is no impact by i keep getting this alert in the logs AEAUH-INJDC-01NB01-N5KSFSW01 %SATCTRL-FEX101-4-SOHMS_DIAG_WARN: FEX-101 Module 1: Runtime diag detected minor event: Correctable ECC errors <dev=0, count=3> Below is show version Cisco Nexus Operating System (NX-OS) Software TAC support: http://www.cisco.com/tac Documents: http://www.cisco.com/en/US/products/ps9372/tsd_products_support_series_home.html Copyright (c) 2002-2013, Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained herein are owned by other third parties and are used and distributed under license. Some parts of this software are covered under the GNU Public License. A copy of the license is available at http://www.gnu.org/licenses/gpl.html. Software BIOS: version 3.6.0 loader: version N/A kickstart: version 6.0(2)N2(1) system: version 6.0(2)N2(1) Power Sequencer Firmware: Module 1: version v1.0 Module 2: version v1.0 Microcontroller Firmware: version v1.0.0.1 SFP uC: Module 1: v1.1.0.0 QSFP uC: Module not detected BIOS compile time: 05/09/2012 kickstart image file is: bootflash:///n5000-uk9-kickstart.6.0.2.N2.1.bin kickstart compile time: 7/24/2013 3:00:00 [07/24/2013 14:49:21] system image file is: bootflash:///n5000-uk9.6.0.2.N2.1.bin ... View more

Not able to create username root in N7k getting error GBM-Cloud-Core-SW2(config)# username root password cisco User name 'root' is a reserved username and cannot be created or edited if its reserved what is the  purpose of this account ... View more