Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About gordonderick
Stats
Member since
04-09-2007
30
Posts
5
Helpful
0
Solutions
Created by
gordonderick
in Network Security
in Network Security
09-23-2013
11:36 AM
09-23-2013
11:36 AM
Thanks for the respnse. Yes the MAC is 001d.a2af.380b. The last response you are refering to is the response from the switch 10.52.190.4 and not the ASA which is .2. The first 3 are the echo requests destined for the ASA.
... View more
Created by
gordonderick
in Network Security
in Network Security
09-20-2013
03:41 AM
09-20-2013
03:41 AM
Hi, Thanks for replying. I clicked on Correct answer by mistake. See below: cc-nd4-asa5550# sh cap test detail 7 packets captured 1: 11:40:19.700021 001d.a2af.381f 001d.a2af.380b 0x0800 98: 172.18.25.65 > 10.52.190.2: icmp: echo request (DF) (ttl 62, id 0) 2: 11:40:20.699823 001d.a2af.381f 001d.a2af.380b 0x0800 98: 172.18.25.65 > 10.52.190.2: icmp: echo request (DF) (ttl 62, id 0) 3: 11:40:21.699670 001d.a2af.381f 001d.a2af.380b 0x0800 98: 172.18.25.65 > 10.52.190.2: icmp: echo request (DF) (ttl 62, id 0) 4: 11:40:37.494435 001d.a2af.381f 30f7.0dd2.3b42 0x0800 98: 172.18.25.65 > 10.52.190.4: icmp: echo request (DF) (ttl 62, id 0) 5: 11:40:37.495000 30f7.0dd2.3b42 001d.a2af.381f 0x0800 98: 10.52.190.4 > 172.18.25.65: icmp: echo reply (DF) (ttl 255, id 0) 6: 11:40:38.494633 001d.a2af.381f 30f7.0dd2.3b42 0x0800 98: 172.18.25.65 > 10.52.190.4: icmp: echo request (DF) (ttl 62, id 0) 7: 11:40:38.495442 30f7.0dd2.3b42 001d.a2af.381f 0x0800 98: 10.52.190.4 > 172.18.25.65: icmp: echo reply (DF) (ttl 255, id 0) 7 packets shown cc-nd4-asa5550#
... View more
Created by
gordonderick
in Network Security
in Network Security
08-29-2013
05:41 AM
08-29-2013
05:41 AM
Hi julomban , can you think of anything that might help me?
... View more
Created by
gordonderick
in Network Security
in Network Security
08-19-2013
01:51 AM
08-19-2013
01:51 AM
Here you go: cc-nd4-asa5550# sh capture test 12 packets captured 1: 09:45:48.520786 172.18.25.65 > 10.52.190.2: icmp: echo request 2: 09:45:49.520770 172.18.25.65 > 10.52.190.2: icmp: echo request 3: 09:45:50.520877 172.18.25.65 > 10.52.190.2: icmp: echo request 4: 09:47:42.283096 172.18.25.65 > 10.52.190.2: icmp: echo request 5: 09:47:43.283432 172.18.25.65 > 10.52.190.2: icmp: echo request 6: 09:47:44.283508 172.18.25.65 > 10.52.190.2: icmp: echo request 7: 09:48:19.309035 172.18.25.65 > 10.52.190.2: icmp: echo request 8: 09:48:20.308562 172.18.25.65 > 10.52.190.2: icmp: echo request 9: 09:48:23.725884 172.18.25.65 > 10.52.190.4: icmp: echo request 10: 09:48:23.726387 10.52.190.4 > 172.18.25.65: icmp: echo reply 11: 09:48:24.726952 172.18.25.65 > 10.52.190.4: icmp: echo request 12: 09:48:24.727455 10.52.190.4 > 172.18.25.65: icmp: echo reply 12 packets shown Note: 172.18.25.65 is the IP of the NMS server and .4 is the switch (not as labeled in the diagram)
... View more
Created by
gordonderick
in Network Security
in Network Security
08-19-2013
01:42 AM
08-19-2013
01:42 AM
Hi, Thanks for the response. I did try your suggestion but its the same outcome as mentioned in my issue.
... View more
Created by
gordonderick
in Network Security
in Network Security
08-16-2013
07:04 AM
08-16-2013
07:04 AM
I have the above setup. ASA is is Active/Standby mode. From the NMS box i am able to ping the managment interface of the primary ASA 10.52.190.1 but from the NMS i am not able to ping the standby ASA's IP 10.52.190.2. From the primary i can ping the standby and from NMS i can also ping the switch (.3). I added a route on the ASA :- route management 172.18.9.6 255.255.255.255 10.52.190.1 With that i could ping from NMS box to the standby ASA (.2) (and the switch) but could not ping the primary ASA (.1) Is there a way i can get (ping) the standby without causing netowork issues?
... View more
Labels:
05-13-2013
03:53 AM
Can anyone tell me the difference between 'ip vrf receive' and 'ip vrf forwarding', do these 2 commands put the interfaces in the VRF? I have a interface on the core configured with 'ip vrf recieve' (config below). Wheneve the edge device is disconnected from the network the 'ip vrf receive' command disappears from the running config. emnewol#sh run int f1/1.101 Building configuration... Current configuration : 223 bytes ! interface FastEthernet1/1.101 description CKTI149 bandwidth 10000 encapsulation dot1Q 101 ip vrf receive curriculum ip address 10.54.68.21 255.255.255.252 ip policy route-map Native end
... View more
Labels:
05-10-2013
06:15 AM
Please ignore point 2 as the mentioned interface is down and that explains why its not in the routing table.
... View more
05-10-2013
04:15 AM
Hello, I have come across a strange issue in my network. -Firstly i am trying to understand the difference between ip vrf receive and ip vrf forwarding. -Secondly, i have an interface(FastEthernet1/0.101) in the right vrf forwarding table but i don’t see its IP in the routing table. Weird. -Thirdly whenever the link to 10.54.68.22 goes down the 'IP vrf receive curriculum' disappears from the interface and it needs to be reapplied. I looked for bugs, etc but cant find any information. Configs as bleow. Router is Cisco 7206VXR , IOS: c7200-k91p-mz.122-25.S5. Configs : emnewol#sh run int f1/1.101 Building configuration... Current configuration : 223 bytes ! interface FastEthernet1/1.101 description CKT149 bandwidth 10000 encapsulation dot1Q 101 ip vrf receive curriculum ip address 10.54.68.21 255.255.255.252 ip policy route-map Native end emnewol#sh run int f1/0.101 Building configuration... Current configuration : 201 bytes ! interface FastEthernet1/0.101 description Curriculum VPN encapsulation dot1Q 101 ip vrf forwarding curriculum ip address 10.54.69.230 255.255.255.248 end emnewol#sh ip route vrf curriculum Routing Table: curriculum Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is 192.168.20.10 to network 0.0.0.0 192.168.20.0/30 is subnetted, 1 subnets C 192.168.20.8 is directly connected, GigabitEthernet0/1.50 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 10.54.68.20/30 is directly connected, FastEthernet1/1.101 S 10.61.149.0/24 [1/0] via 10.54.68.22 S* 0.0.0.0/0 [1/0] via 192.168.20.10 emnewol#
... View more
Labels:
Created by
gordonderick
in Application Networking
in Application Networking
04-30-2013
04:13 AM
04-30-2013
04:13 AM
Hi Ajay, Thanks. I was looking for probe example to achieve : send a http/tcp request over port 80 , wait for response, and read it. If the data that is read is what is expected then the probe is pass. I had a look at the guide but it is quite generic and does not give specific information and even does not provide examples of the 'send-data'. I would appreciate if you have some information on this. -Gordon.
... View more
04-29-2013
07:15 AM
Hi Robert, if you say that the connection drops after 30-60 seconds i reckon its something to do with an IOS related bug or a timeout issue. I see that you use pseudowire could this tunnel be droping as it might be traffic based. Im just thinking aloud. -Gordon.
... View more
Created by
gordonderick
in Application Networking
in Application Networking
04-29-2013
06:53 AM
04-29-2013
06:53 AM
Hi Ajay, i guess that is the way forward. Do you know of any link or document that is available that can give me some examples on TCP probes. I tried looking but could not find much information. -Gordon.
... View more
Created by
gordonderick
in Application Networking
in Application Networking
04-29-2013
02:26 AM
04-29-2013
02:26 AM
Hi Ajay, Thanks for the response. The problem i am seeing is that when the probe sends out a request to the proxy server it sends it is http://x.x.x.x where x.x.x.x is the ip address of the proxy server. Is this correct? As you rightly mentioned this is happening because the probe thinks that it is probing a web server. But i want it to think that it is probing a proxy server. Is there a way to make it believe its doing this? -Gordon.
... View more
04-26-2013
08:59 AM
Hello, Im looking at the config and trying to understand what is happening. Before i can come to any conclusion im seeing a basic flaw here. You mentioned : "i have a 876 Router, connected to the Internet and a VPN. From inside i would like to pass all traffic destinied to 192.168.0.0 255.255.255.0 to the VirtualPPP IF" If you see your interface the interface vlan 2 has got an IP 192.168.15.66/24 so any traffc for 192.168.0.0/24 will be routed out this interface since it is directly connected. Have a look at your routing table. (Post it here if possible) Even the config "ip route 192.168.0.0 255.255.248.0 Virtual-PPP1" will not be considered. Let me know.
... View more
09-23-2013
Thanks for the respnse.Yes the MAC is 001d.a2af.380b.The last response
you are refering to is the re...
09-20-2013
Hi,Thanks for replying. I clicked on Correct answer by mistake.See
below:cc-nd4-asa5550# sh cap test...
08-19-2013
Here you go:cc-nd4-asa5550# sh capture test12 packets captured 1:
09:45:48.520786 172.18.25.65 > 10....
08-19-2013
Hi, Thanks for the response. I did try your suggestion but its the same
outcome as mentioned in my i...
08-16-2013
I have the above setup. ASA is is Active/Standby mode. From the NMS box
i am able to ping the managm...
05-13-2013
Can anyone tell me the difference between 'ip vrf receive' and 'ip vrf
forwarding', do these 2 comma...
05-10-2013
Please ignore point 2 as the mentioned interface is down and that
explains why its not in the routin...
05-10-2013
Hello,I have come across a strange issue in my network. -Firstly i am
trying to understand the diffe...
04-30-2013
Hi Ajay,Thanks. I was looking for probe example to achieve : send a
http/tcp request over port 80 , ...
04-29-2013
Hi Robert,if you say that the connection drops after 30-60 seconds i
reckon its something to do with...
04-29-2013
Hi Ajay,i guess that is the way forward. Do you know of any link or
document that is available that ...
04-29-2013
Hi Ajay,Thanks for the response. The problem i am seeing is that when
the probe sends out a request ...
Public Statistics
| Date Registered | 04-09-2007 12:43 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 30 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
.jpg "Hall of Fame Guru"){kind=icon}
