Hi,   PM over the Customer name and Inventory name. I'll check the transport file Cisco SNTC received to confirm what data was collected/uploaded.   Also, provide me the details from the latest data collection. You can view the info from the CSPC GUI >Job run status tab.   Thanks in advance,   Walt ... View more

    Please Mark the issue as resolved: Thank you Fabian the "Internal Server Error" is a generic error message and we need to get to the most specific message, that is why we need the logs.  if the error on the logs is in fact 404.  then the steps above should work, at least for that error. HTTPs TransportMode has Failed 404:Not Found   If you run those commands in the dark of the actual error at times you may coincidentally fix that problem and if it is the only problem,fix the upload issues.. Many times it is not the case,   The other post you referring based on the wording you posted is also mine.. like this one, the difference there is that the image itself exposed the specific error. https://community.cisco.com/t5/smart-net-total-care-portal-and/upload-fails/m-p/3945791#M12405 ... View more

Hello, Yes I have deleted the cert, recreated it in the SNT portal and applied it. Regards, Scott ... View more

Ok, I bit the bullet and logged a TAC. This is the reply.   "Be advised that CSCve37646 affects all versions of PI from 3.1.5 upwards and has recently been marked as remediated in version 3.3.1u2 which is scheduled to be released over the next month."   ... View more

Q. What is the "delete 20000 sessions" alarm I see on my ACS 5.x dashboard? A. This alert is informational and is generated because the ACS View keeps track of authentication sessions. The ACS View maintains all the sessions (RADIUS/TACACS Authentication/Authorization/Accounting). It can keep only 250,000 sessions at a time. Whenever it crosses 250k, it will try to delete 20k sessions, and will send an alarm (the one that you see on the ACS Dashboard).   https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/115942-delete-20000-sessions-00.html   ... View more

The fix supplied by Cisco was http://support.microsoft.com/kb/824067. Hope this helps anyone else having this issue. Cheers Patrick ... View more

Thanks for your question John, I assume that your packet capture has a filter applied and that your deployment is Transparent (most likely via WCCP on an ASA firewall). If this is the case, then your packet capture would only show SYN+ACK instead of the full three-way handshake. This is per design because the traffic sourcing from the client is technically not coming from the M1/P1/P2 interfaces. When you have WCCP transparent redirection, the proxy creates a Service ID which must also be configured on the ASA firewall (for example) for WCCP. My best analogy would be like walkie-talkies needing to be on the same frequency/channel to communicate with your peer. With this in mind, a secure tunnel is created between the two and traffic coming out of the tunnel is encrypted. This encryption prevents the proxy from including this in a filtered capture because a tunnel interface is created and it is not selectable in the Packet Capture page. ---------Workaround--------- If you are able to capture within a few seconds to reproduce this issue, you may wish to consider applying NO FILTER to the capture and saving/running it. This will include the tunnel interface which will then show the full TCP handshake. The only problem this creates is that you will then have to filter the capture to isolate the traffic created just by your test machine and saving the trimmed capture in a new file.  With Wireshark, you can find instructional videos online or the Wireshark user guide to best filter traffic. Hope this helps, Juan ... View more

We have to change  ACL manually after the migration . ACL's doesn't not get updated after upgradation only Nat get updated .  ... View more

Hi Jason, thanks for the suggestions. I have tried 3des, but with the same results. Nothing fancy in the router config. I will try a capture when I have the chance though. Regards, Scott ... View more

Is this what you are looking for http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080ad6b8d.shtml Sent from Cisco Technical Support iPhone App ... View more

Yes I thought that might be the case, that it has not been out long enough to find issues. When will Cisco stablilise their versions? I think I will go with 8.0. Good luck with your RAM upgrade. I have not seen the command to TFTP silicone chips yet. ... View more

What you have is fine. For guest, that will be centrally switched so you don't need to create a local vlan. You just need to have a dynamic interface in which the guest traffic will use when it gets tunneled back to the WLC. Keeping vlan ids consistent is good. Sent from Cisco Technical Support iPhone App ... View more