Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About johnlloyd_13
05-22-2019
johnlloyd_13
Member since
12-02-2007
Engager
Personal Web Page : http://wannabecybersecurity.blogspot.com/
3129
Posts
996
Helpful
239
Solutions
Recent Badges
Awards
Spotlight Awards Mobile App Contributor January 2012
1
Created by
johnlloyd_13
in Firewalls
in Firewalls
05-21-2019
12:11 AM
05-21-2019
12:11 AM
hi, please post a show version output.
... View more
Created by
johnlloyd_13
in Switching
in Switching
05-21-2019
12:08 AM
05-21-2019
12:08 AM
hi, did you apply other AAA config? if you haven't save the config, try to reboot the switch.
... View more
Created by
johnlloyd_13
in Switching
in Switching
05-13-2019
01:10 AM
05-13-2019
01:10 AM
hi, as others have mentioned, you need to configure option 43 under DHCP config on your router: R1(dhcp-config)#option 43 hex f104.<WLC IP HEX STRING> see helpful link: http://ccnawirelesswannabe.blogspot.com/2016/07/building-my-ccna-wireless-home-lab.html
... View more
Created by
johnlloyd_13
in Switching
in Switching
05-13-2019
01:05 AM
05-13-2019
01:05 AM
hi, you're global config mode. type 'exit' or 'end' and execute the 'copy' command in privileged exec mode (Switch#)
... View more
05-06-2019
12:32 AM
hi, before making any changes, can your ASA ping to ISP hop .5 (try to mask sensitive info/real IP). did you manually configure a DNS server on your PC?
... View more
04-24-2019
01:07 AM
hi, i got 2x ASA5520 running 8.2 that i want to merge and do HA/failover. one has 20 security contexts and the other 10 contexts. my question, if i configure failover between them, will the context merge to 30? or both units take the higher count of 20? will 8.2 allow failover even though each FW got different context license but the rest are identical? Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 10 <<< GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 750 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Disabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled This platform has an ASA 5520 VPN Plus license. ---- Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 20 <<< GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 750 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Disabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled This platform has an ASA 5520 VPN Plus license.
... View more
Labels:
04-13-2019
01:20 AM
hi leo, i checked the said command was already there but doesn't fix the high CPU. the bug id didn't mention 3.6(4) which is the current IOS. the other switch also has the same code but doesn't show the same symptoms.
... View more
04-12-2019
09:19 AM
that's the link/doc i used for my show commands :) not sure if it's related to a port having low reliability and high output error/drop. #sh int g1/0/12 counters errors Port Align-Err FCS-Err Xmit-Err Rcv-Err UnderSize OutDiscards Gi1/0/12 0 0 18446744073687917395 0 0 18446744073687917395 Port Single-Col Multi-Col Late-Col Excess-Col Carri-Sen Runts Gi1/0/12 0 0 0 0 0 0 #sh int g1/0/12 GigabitEthernet1/0/12 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is c414.3c99.a48c (bia c414.3c99.a48c) MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 251/255, txload 13/255, rxload 3/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output never, output hang never Last clearing of "show interface" counters 00:46:43 Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 168972 Queueing strategy: fifo Output queue: 0/40 (size/max) 30 second input rate 1302000 bits/sec, 778 packets/sec 30 second output rate 5225000 bits/sec, 1137 packets/sec 2672113 packets input, 651052605 bytes, 0 no buffer Received 30856 broadcasts (13432 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 13432 multicast, 0 pause input 0 input packets with dribble condition detected 3902024 packets output, 2459883905 bytes, 0 underruns 168972 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out
... View more
04-12-2019
09:01 AM
hi, we got an issue on a secondary core C3850 3.6.4 which consistently averaging a CPU of 50%+ we got another primary C3850 3.6.4 but has only 2% CPU ave. not sure what could be the culprit. any ideas? C3850#show processes cpu sort | exclude 0.0 Core 0: CPU utilization for five seconds: 99%; one minute: 95%; five minutes: 93% Core 1: CPU utilization for five seconds: 82%; one minute: 87%; five minutes: 91% Core 2: CPU utilization for five seconds: 6%; one minute: 19%; five minutes: 24% Core 3: CPU utilization for five seconds: 18%; one minute: 22%; five minutes: 26% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 5715 4011600 27402184 4878 25.73 26.07 26.42 1088 fed 6258 3292482 92102444 4593 23.34 23.44 23.39 0 pdsd 8581 3259771 25430981 187 2.39 5.04 6.86 0 iosd C3850# show processes cpu detailed process fed sorted | ex 0.0 Core 0: CPU utilization for five seconds: 98%; one minute: 92%; five minutes: 93% Core 1: CPU utilization for five seconds: 100%; one minute: 98%; five minutes: 95% Core 2: CPU utilization for five seconds: 8%; one minute: 13%; five minutes: 19% Core 3: CPU utilization for five seconds: 3%; one minute: 14%; five minutes: 18% PID T C TID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process (%) (%) (%) 5715 L 1 6155 4009829 1574356 0 24.76 24.66 24.49 0 fed-ots-main 5715 L 3 9087 1784445 9273872 0 0.54 0.71 0.66 0 PunjectTx 5715 L 3 6158 259374 9013314 0 0.25 0.25 0.25 0 fed-ots-nfl C3850# show processes cpu detailed process pdsd sorted | ex 0.0 Core 0: CPU utilization for five seconds: 91%; one minute: 93%; five minutes: 93% Core 1: CPU utilization for five seconds: 99%; one minute: 94%; five minutes: 94% Core 2: CPU utilization for five seconds: 5%; one minute: 16%; five minutes: 18% Core 3: CPU utilization for five seconds: 9%; one minute: 10%; five minutes: 16% PID T C TID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process (%) (%) (%) 6258 L 1540442 9209233 4593 23.89 23.92 23.80 0 pdsd 6258 L 0 8533 1349466 3162035 0 23.89 23.91 23.79 0 pdsd C3850# show processes cpu detailed process iosd sorted | ex 0.0 Core 0: CPU utilization for five seconds: 97%; one minute: 94%; five minutes: 94% Core 1: CPU utilization for five seconds: 100%; one minute: 96%; five minutes: 95% Core 2: CPU utilization for five seconds: 6%; one minute: 14%; five minutes: 18% Core 3: CPU utilization for five seconds: 5%; one minute: 9%; five minutes: 16% PID T C TID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process (%) (%) (%) 8581 L 2935671 2542610 186 2.62 2.32 3.90 0 iosd 230 I 1679065 3548848 0 4.11 3.44 3.11 0 Spanning Tree 197 I 4032665 2719257 0 0.22 0.44 0.44 0 Tunnel IOSd shim DB
... View more
- Tags:
- 3850
Labels:
03-18-2019
07:08 PM
hi,
the amber/orange ports are usually speed/duplex mismatch.
make sure the settings are the same on both devices.
... View more
03-15-2019
09:11 PM
hi marvin,
i just did a factory reset both using 'config factory-default' and 'write erase' and 'reload' but the anyconnect essentials license is still there. any thoughts?
(config)# config factory-default Based on the management IP address and mask, the DHCP address pool size is reduced to 253 from the platform limit 256
WARNING: The boot system configuration will be cleared. The first image found in disk0:/ will be used to boot the system on the next reload. Verify there is a valid image on disk0:/ or the system will not boot.
Begin to apply factory-default configuration: Clear all configuration Executing command: interface management0/0 Executing command: nameif management INFO: Security level for "management" set to 0 by default. Executing command: ip address 192.168.1.1 255.255.255.0 Executing command: security-level 100 Executing command: no shutdown Executing command: exit Executing command: http server enable Executing command: http 192.168.1.0 255.255.255.0 management Executing command: dhcpd address 192.168.1.2-192.168.1.254 management Executing command: dhcpd enable management Executing command: logging asdm informational Factory-default configuration is completed ciscoasa(config)# ciscoasa(config)# sh ver
Cisco Adaptive Security Appliance Software Version 8.2(5) Device Manager Version 6.4(5)
Compiled on Fri 20-May-11 16:00 by builders System image file is "disk0:/asa825-k8.bin" Config file at boot was "startup-config"
ciscoasa up 29 days 12 hours
Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 1600 MHz Internal ATA Compact Flash, 256MB BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0) Boot microcode : CN1000-MC-BOOT-2.00 SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03 IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: GigabitEthernet0/0 : address is f866.f2b1.491e, irq 9 1: Ext: GigabitEthernet0/1 : address is f866.f2b1.491f, irq 9 2: Ext: GigabitEthernet0/2 : address is f866.f2b1.4920, irq 9 3: Ext: GigabitEthernet0/3 : address is f866.f2b1.4921, irq 9 4: Ext: Management0/0 : address is f866.f2b1.4922, irq 11 5: Int: Not used : irq 11 6: Int: Not used : irq 5
Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 2 GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 750 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Enabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled
This platform has an ASA 5520 VPN Plus license.
Serial Number: JMX1619X123 Running Activation Key: 0x291bff73 0xa43798a6 0xb9809d80 0xfce4a060 0x4418c123 Configuration register is 0x1 Configuration last modified by enable_15 at 09:07:47.052 UTC Sat Mar 16 2019
ciscoasa(config)# wr er Erase configuration in flash memory? [confirm] [OK] ciscoasa(config)# reload System config has been modified. Save? [Y]es/[N]o: Proceed with reload? [confirm] ciscoasa(config)#
Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 2 GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 750 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Enabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled
This platform has an ASA 5520 VPN Plus license.
... View more
03-15-2019
09:05 PM
hi marvin,
thanks for confirming my thought of doing a factory reset.
will try to do it. have a great weekend!
... View more
03-15-2019
06:55 PM
hi,
HW upgrade is not an option for now due to budget constraint and this is in a very remote location (not a priority). that's why an alternative was to temporarily enable HA while waiting for resource/budget approval.
... View more
03-15-2019
05:13 PM
hi,
i got a pair of ASA 5520 that i want to enable HA-active/standby. since ASA 8.2 requires both units to have identical licenses, i'm unable to enable HA due to anyconnect essentials license not enabled on the primary/active unit.
is there any way to disable or remove the anyconnect essentials on the standby unit in order to have failover/HA? factory reset?
ciscoasa(config)# Mate's license (AnyConnect Essentials Disabled) is not compatible with my license (AnyConnect Essentials Enabled). Failover will be disabled.
ciscoasa(config)# sh ver
Cisco Adaptive Security Appliance Software Version 8.2(5)
Device Manager Version 6.4(5)
Compiled on Fri 20-May-11 16:00 by builders
System image file is "disk0:/asa825-k8.bin"
Config file at boot was "startup-config"
ciscoasa up 28 days 10 hours
Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: GigabitEthernet0/0 : address is f866.f2b1.491e, irq 9
1: Ext: GigabitEthernet0/1 : address is f866.f2b1.491f, irq 9
2: Ext: GigabitEthernet0/2 : address is f866.f2b1.4920, irq 9
3: Ext: GigabitEthernet0/3 : address is f866.f2b1.4921, irq 9
4: Ext: Management0/0 : address is f866.f2b1.4922, irq 11
5: Int: Not used : irq 11
6: Int: Not used : irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 150
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
SSL VPN Peers : 2
Total VPN Peers : 750
Shared License : Disabled
AnyConnect for Mobile : Disabled
AnyConnect for Cisco VPN Phone : Disabled
AnyConnect Essentials : Enabled
Advanced Endpoint Assessment : Disabled
UC Phone Proxy Sessions : 2
Total UC Proxy Sessions : 2
Botnet Traffic Filter : Disabled
This platform has an ASA 5520 VPN Plus license.
... View more
Labels:
03-10-2019
07:44 AM
hi,
i've read (and watched livelesson CBT videos) from omar santos:
http://www.ciscopress.com/store/cisco-asa-all-in-one-next-generation-firewall-ips-and-9781587143076
this is one of my favorite site to check on ASA stuff:
https://www.tunnelsup.com/nat-for-cisco-asas-version-8-3/
https://www.tunnelsup.com/site-to-site-vpn-tunnel-between-asa-and-cisco-router/
... View more
Created by
johnlloyd_13
in Switching
Tuesday
Tuesday
hi,did you apply other AAA config?if you haven't save the config, try to
reboot the switch.
Created by
johnlloyd_13
in Switching
2 weeks ago
2 weeks ago
hi,as others have mentioned, you need to configure option 43 under DHCP
config on your router:R1(dhc...
Created by
johnlloyd_13
in Switching
2 weeks ago
2 weeks ago
hi,you're global config mode.type 'exit' or 'end' and execute the 'copy'
command in privileged exec ...
3 weeks ago
hi,before making any changes, can your ASA ping to ISP hop .5 (try to
mask sensitive info/real IP).d...
04-24-2019 01:07 AM
hi,i got 2x ASA5520 running 8.2 that i want to merge and do
HA/failover.one has 20 security contexts...
04-13-2019 01:20 AM
hi leo,i checked the said command was already there but doesn't fix the
high CPU.the bug id didn't m...
04-12-2019 09:19 AM
that's the link/doc i used for my show commands :) not sure if it's
related to a port having low rel...
04-12-2019 09:01 AM
hi,we got an issue on a secondary core C3850 3.6.4 which consistently
averaging a CPU of 50%+we got ...
Created by
johnlloyd_13
in FirePOWER
04-01-2019 01:02 AM
04-01-2019 01:02 AM
hi,for question #1, it depends how many managed devices or sensors are
you deploying. virtual FMC ca...
04-01-2019 12:52 AM
hi marvin,i don't think FMC can be used as NTP server.i don't see any
options under system > time an...
Created by
johnlloyd_13
in FirePOWER
04-01-2019 12:48 AM
04-01-2019 12:48 AM
hi,marvin is correct. you'll need the MGMT port and IP to be used for
the FP module default GW.this ...
03-22-2019 07:29 AM
hi,you can do a fresh install to the latest code you want.see helpful
link.http://wannabecybersecuri...
Created by
johnlloyd_13
in FirePOWER
03-22-2019 07:23 AM
03-22-2019 07:23 AM
hi,did you click 'Click Store ASA FirePOWER Changes' at the bottom?
Public Statistics
| Date Registered | 12-02-2007 03:31 AM |
| Date Last Visited | 05-22-2019 12:07 AM |
| Total Messages Posted | 3,129 |
| Total Helpful Votes Received | 996 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 121 | |
| 5 | |
| 185 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Guru"){kind=icon}
.jpg "VIP Advisor"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 15 | |
| 15 | |
| 5 |
Awards
Community Spotlight Award
Mobile App Contributor January 2012
