If relevant, questions related to Nexus 7010 (and maybe 5500) platforms. 1. For rspan, am I correct in assuming that the mirrored traffic traverses all trunks that allow the rspan vlan? IOW there is no mechanism that limits the mirrored traffic to only follow towards the switch that has a destination port configured? 2. For ERSPAN, can the IP interface configured as the GRE destination (not the destination port that hosts the analyzer tool) silk participate in other traffic such as ssh, SNMP, syslog, etc? Thanks, Ed ... View more

Experiencing extremely slow transfer times using scp to transfer an IOS XE image to an ASR-1002(X).  Have attempted using three different routers and two separate servers.  In all cases scp is extremely slow.  A 380MB image is still transferring after three hours. Transferring the same file using tftp takes just over 5 minutes. I have attempted the transfer using a Windows and a Linux scp server. In addition, I have scp'ed files to each of these servers to ensure they were operating properly - in both cases the servers can transfer the file in minutes. -Do not believe it is an issue with the protocol itself or implementation on the servers: other scp transfers to the servers run quickly -Research on this topic returned one response that the issue was due to writing the file to a flash filesystem. I have doubts about this since tftp transfers orders of magnitude more quickly, writing to the same filesystem. I'm researching to see if there is a bug in these versions of code. Next step is to run a packet capture during a transfer to look for clues.  Any experience/solutions to this issue appreciated! -Ed ... View more

Assisting colleague with a failing VM restore. Connection terminates after about 1.5 hours. I do not see a network issue but trying to help him narrow down the culprit. ASA logs indicate the connection was likely reset by TCP Reset-O. Reading shows this typically means the rest originated from the lower security level interface. However both interfaces are at the same sec-level. Is there another way to interpret the teardown log message to definitively state which host initiated reset? I might be able to find the connection build log which may help based on one doc I found. But in case it is not available, can only the teardown log reveal the guilty resetter? Thanks! Ed Sent from Cisco Technical Support Android App ... View more

ASA 5585-SSP-40 running v8.4(6) Configuring using ASDM v7.1(2) Have run into a few instances where newly-applied policies would become jumbled with other policies.  I've seen this before when multiple admins were applying policies at or near the same time, but it occurred again recently and unable to tell if the policies were applied "simultaneously" or if the jumbled policies were applied at significantly different times. Symptom:  When a new policy is applied, portions of the policy are "jumbled" with another policy.  For example, a policy applied this morning showed the correct port that was configured, but the configured destination address became the applied source address, and the applied destination address was the destination address of a different policy. In a separate incident, I had applied a policy that appeared correctly upon application.  Later another admin entered a new policy, and the "Description" from my policy moved from my policy to the new policy. The only other time I've noticed this was during a time when multiple people were making changes simultaneously in a short period of time.  This time it is unclear how far apart the changes were made, but believed the time span was significant enough to where the issue should not have been a stale configuration in one ASDM session.  I cannot rule that out, however. Currently looking for bugs in this ASA version and would appreciate any input if this is a known issue or can be reliably reproduced (so we understand the exact causal scenario). Thanks! -Ed ... View more