I have upgraded Cisco Prime Infrastructure to version 3.4 and WSA stuck in "is starting" mode: There are two WSA bugs in RELEASE NOTES that should be corrected in version 3.4 but I do not have permission to view them.     ... View more

Environment: We have built an environment with DNA Center 1.2.1 that contains 1 bordernode C9500-24Y4C 1st EDGEnode C9300-48P Where the border node is connected to an external router with AS 65000 (asr920) The SDA environment has AS 65244 Issue: We are having trouble getting DHCP for the client network to work. We have an ip helper pointing to a network that is located in the as920. The router gets a dhcp request, sends back a victim to the border, but the offer never reaches the client   After some trubleshooting we've realized that it's our C9500-24Y4C that does not match, we’ve replaced it with the C9300-48P and DHCP is working fine. Assume it's a bug in the C9500-24Y4C when it's completely new and t here is only one software to run on that model today, and it's 16.8.1a ? Any ideas? ... View more

There is no Assurance client data in DNAC for wireless. (Cisco ONE - 3504 Wireless Controller)   ... View more

I would need some help to analyze this error. I have two android Tablets of exactly the same model, although with different versions of Android. The one running version 5 and the other runs version 6. The one which is  running version 5 can connect with EAP-TLS, the other one running version 6 can not. We have a Cisco ISE that authenticates the clients. I have made a debug from WLC as both clients connect separately. You can safely analyze this in more detail, but it feels like one plate does not respond to EAP Requsten as expected. We have other android clients on version 6 that work well. Below, extract the debug for the non-logging board * Dot1x_NW_MsgTask_5: Oct 18 10: 00: 25.779: [PA] a0: 32: 99: 7d: 5b: f5 Entering Backend Auth Req state (id = 237) for mobile a0: 32: 99: 7d: 5b: f5 * Dot1x_NW_MsgTask_5: Oct 18 10: 00: 25.779: [PA] a0: 32: 99: 7d: 5b: f5 WARNING: updated EAP Identifier 1 ===> 237 for STA a0: 3 2: 99: 7d: 5b: f5 * Dot1x_NW_MsgTask_5: Oct 18 10: 00: 25.779: [PA] a0: 32: 99: 7d: 5b: f5 Sending EAP Request from AAA to mobile a0: 32: 99: 7d: 5b: f 5 (EAP Id 237) * Dot1x_NW_MsgTask_5: Oct 18 10: 00: 25.779: [PA] a0: 32: 99: 7d: 5b: f5 Allocating EAP Point for retransmission to mobile a0: 32: 9 9: 7d: 5b: f5 Here, an EAP Response is expected to come, but it does not seem to come anywhere. * apfMsConnTask_2: Oct 18 10: 00: 25.792: [PA] Ms with adaptive capability found * apfMsConnTask_1: Oct 18 10: 00: 25.797: [PA] Ms with adaptive capability found * apfMsConnTask_5: Oct 18 10: 00: 25.885: [PA] Ms with adaptive capability found * apfMsConnTask_1: Oct 18 10: 00: 26.079: [PA] Ms with adaptive capability found * apfMsConnTask_1: Oct 18 10: 00: 26.090: [PA] dot1xDoesPmkIdMatchPmk2, Received 11w Flag: 0 * apfMsConnTask_0: Oct 18 10: 00: 26.179: [PA] Ms with adaptive capability found * apfMsConnTask_1: Oct 18 10: 00: 26.277: [PA] Ms with adaptive capability found * apfMsConnTask_5: Oct 18 10: 00: 26.303: [PA] dot1xDoesPmkIdMatchPmk2, Received 11w Flag: 0 * apfMsConnTask_7: Oct 18 10: 00: 26,310: [PA] dot1xDoesPmkIdMatchPmk2, Received 11w Flag: 0 * apfMsConnTask_7: Oct 18 10: 00: 26,310: [PA] dot1xDoesPmkIdMatchPmk2, Received 11w Flag: 0 * apfMsConnTask_7: Oct 18 10: 00: 26.312: [PA] Ms with adaptive capability found Here is an excerpt from the debut on the plate that works. * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.834: [PA] a0: 32: 99: 7c: d9: b9 Entering Backend Auth Req state (id = 94) for mobile a0: 3 2: 99: 7c: D9: B9 * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.834: [PA] a0: 32: 99: 7c: d9: b9 WARNING: updated EAP Identifier 1 ===> 94 for STA a0: 32 : 99: 7c: D9: B9 * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.834: [PA] a0: 32: 99: 7c: d9: b9 Sending EAP Request from AAA to mobile a0: 32: 99: 7c: d9: b 9 (EAP Id 94) * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.834: [PA] a0: 32: 99: 7c: d9: b9 Allocating EAP Pt for retransmission to mobile a0: 32: 9 9: 7c: D9: B9 Below is an EAP response from the client and then the process goes on. * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.950: [PA] a0: 32: 99: 7c: d9: b9 Received EAPOL EAPPKT from mobile a0: 32: 99: 7c: d9: b9 * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.950: [PA] a0: 32: 99: 7c: d9: b9 Received EAP Response from mobile a0: 32: 99: 7c: d9: b9 (EA P Id 94, EAP Type 13) * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.950: [PA] a0: 32: 99: 7c: d9: b9 Resetting reauth count 0 to 0 for mobile a0: 32: 99: 7c: d9 : B9 * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51.950: [PA] a0: 32: 99: 7c: d9: b9 Entering Backend Auth Response State for mobile a0: 32: 9 9: 7c: D9: B9 * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51,959: [PA] a0: 32: 99: 7c: d9: b9 Processing Access Challenge for mobile a0: 32: 99: 7c: d9: b 9 * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51,959: [PA] a0: 32: 99: 7c: d9: b9 Entering Backend Auth Req state (id = 95) for mobile a0: 3 2: 99: 7c: D9: B9 * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51,959: [PA] a0: 32: 99: 7c: d9: b9 Sending EAP Request from AAA to mobile a0: 32: 99: 7c: d9: b 9 (EAP Id 95) * Dot1x_NW_MsgTask_1: Oct 18 09: 58: 51,959: [PA] a0: 32: 99: 7c: d9: b9 Reusing allocated memory for EAP Point of retransmission ... View more

Hello, We tried to operate QSFP-H40G-ACU7M = on our ASR9k6 (Version 5.3.1) on our 2x40 line card. But we get the following:  DESCR: "Unknown or Unsupported CPAK Module" Operational data for interface FortyGigE0 / 1/0/0: State:      Administrative state: enabled      Operational state: Down (Reason: Security failure (not a valid part))      LED state: Red On What can be the problem? If I can see that these modules are supported on ASR9k in our SW version? On Table# 8: https://www.cisco.com/c/en/us/products/collateral/routers/asr-9000-series-aggregation-services-routers/data_sheet_c78-624747.html BTW: Although! just for testing, we have also run with transceiver permit pid all, same result. ... View more

We have ISE V2.1.0.474 Patch 3. I guess we’re having problem with replication. When we look at VM, it is shown that primary node is used 280+ GB and Secondary (new) is used 72+ GB? It's a big difference, the primary is taking much more space than secondary, we need to clean the Primary. My question is how to clean the disk on ISE that had problems. sh disk (On primary) Internal filesystems: / : 16% used ( 2213420 of 14987616) /dev : 0% used ( 0 of 8124672) /dev/shm : 0% used ( 0 of 8134360) /run : 1% used ( 50036 of 8134360) /sys/fs/cgroup : 0% used ( 0 of 8134360) /tmp : 2% used ( 18704 of 1983056) /boot : 24% used ( 108016 of 487634) /opt : 30% used ( 50227372 of 180485852) /storedconfig : 2% used ( 1585 of 95054) /run/user/0 : 0% used ( 0 of 1626876) /run/user/440 : 0% used ( 0 of 1626876) /run/user/321 : 0% used ( 0 of 1626876) all internal filesystems have sufficient free space sh disk (on Secondary) Internal filesystems: / : 16% used ( 2228260 of 14985756) /dev : 0% used ( 0 of 8124700) /dev/shm : 0% used ( 0 of 8134360) /run : 1% used ( 41928 of 8134360) /sys/fs/cgroup : 0% used ( 0 of 8134360) /boot : 24% used ( 107914 of 481746) /storedconfig : 2% used ( 1600 of 89231) /tmp : 1% used ( 6452 of 1975372) /opt : 23% used ( 60732172 of 283687164) /run/user/440 : 0% used ( 0 of 1626876) /run/user/0 : 0% used ( 0 of 1626876) /run/user/301 : 0% used ( 0 of 1626876) /run/user/321 : 0% used ( 0 of 1626876) /run/user/322 : 0% used ( 0 of 1626876) /run/user/304 : 0% used ( 0 of 1626876) /run/user/303 : 0% used ( 0 of 1626876) all internal filesystems have sufficient free space ... View more

ASA Firepower software module stops forwarding traffic and i can't see anything in any logs That could cause this problem. If we redeploy policy's without any changes it starts work again !!!   Installed ASA Firepower version/files asasfr-sys-6.2.0-362.pkg asasfr-5500x-boot-6.2.0-2.img Cisco Adaptive Security Appliance Software Version 9.8(1) Firepower Extensible Operating System Version 2.2(1.47) Device Manager Version 7.8(1)   Any idea what this problem can have for causes ??? ... View more