Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About msompong1
Stats
Member since
10-27-2017
9
Posts
15
Helpful
0
Solutions
02-16-2020
02:00 AM
Hi All, Thank you for your all advises, Today I've tried with remove the 2nd Supervisor from the chassis and reinstall again now the Uplink status on 2nd Sup is back and the Te-port 6/1 and 6/3 are working. Regards.
... View more
02-13-2020
10:44 PM
Thank you. I'm running on software version below sh verer Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500es8-UNIVERSALK9-M), Version 03.08.04.E RELEASE SOFTWARE (fc2)
... View more
02-13-2020
10:30 PM
Thank you , Yes you are right ! The first 4 port on each Supervisor card could be functional. But for me the first 4 port on my 2nd Supervisor card are not working.
... View more
02-13-2020
08:17 PM
Hi All, I have the problem and would like to have some advice , I have Cisco 4510R+E with 2 Sup-8e with SSO mode and I've noticed that no LED Uplink status for port 1-4 in standby supervisor and the physical link is down now. Anyone experience with this issue ? And How to fix it ? below is the show module command found both Sup-8e in slot 5 and 6. Chassis Type : WS-C4510R+E Power consumed by backplane : 40 Watts Mod Ports Card Type Model Serial No. ---+-----+--------------------------------------+------------------+----------- 1 24 1000BaseX SFP WS-X4724-SFP-E CAT1904L2V1 2 24 1000BaseX SFP WS-X4724-SFP-E CAT1904L2SU 5 8 Sup 8-E 10GE (SFP+), 1000BaseX (SFP) WS-X45-SUP8-E CAT1902L7SZ 6 8 Sup 8-E 10GE (SFP+), 1000BaseX (SFP) WS-X45-SUP8-E CAT1902L7MX 8 24 1000BaseX SFP WS-X4724-SFP-E CAT1923L32D 10 48 10/100/1000BaseT Premium POE E Series WS-X4748-RJ45V+E CAT1903L5VA Mod Redundancy role Operating mode Redundancy status ----+-------------------+-------------------+---------------------------------- 5 Active Supervisor SSO Active 6 Standby Supervisor SSO Standby hot Below is show interface status command system found the SFP module that connected to the standby Sup sh int statu | in 6/ Te6/1 notconnect 1 full auto No XCVR Te6/2 notconnect routed full auto 10GBase-LR Te6/3 notconnect 1 full auto 10GBase-SR Te6/4 notconnect 1 full auto No XCVR Te6/5 inactive 1 full auto No XCVR Te6/6 inactive 1 full auto No XCVR Te6/7 inactive 1 full auto No XCVR Te6/8 inactive 1 full auto No XCVR Blow is the picture showed that no LED Uplink 1-4 status standby Sup.
... View more
Labels:
Created by
msompong1
in Network Security
in Network Security
07-25-2019
01:04 AM
07-25-2019
01:04 AM
Hi All, Thank you for your reply. I have the more detail to update my current connection show as below My Client ----> L3 switch ----> Checkpoint Firewall x2 (Clustered) ---->Cisco ASA----> Network After I've use the wiresharsk captured the traffic between Checkpoint and ASA I have found some thing. For the ASA with 9.6(1) firmware (this version is working as expected) Checkpoint will forward traffic to ASA with it real physical MAC address as source and ASA reply with the CheckPoint real MAC address as destination. For the ASA with 9.9(2) firmware (this version is not working) Checkpoint will forward traffic to ASA with it real physical MAC address as source and ASA reply with the CheckPoint Virtual MAC address as destination. That is why the communication cannot established. So How can I do on the configuration of 9.9(2) firmware ?
... View more
07-16-2019
07:52 PM
Hi All, I've setup the Cisco ASA 5506x firewall with the simple connection. - outsite interface connect to internet. - inside interface connect to my production. - P2P interface connect to the existing network. My problem is I can't access the ASDM from network behind the P2P link , I've found the log in ASA about my source IP and the service 443 but ASDM client show "Unable to lunch device manager from xx.xx.xx.xx" But when I tried from inside network the ASDM can lunch as expected. I've enable the source network for access ASA as below. http server enable http 192.168.140.0 255.255.255.0 inside http 10.196.0.0 255.255.0.0 P2P And the routing also have route P2P 10.196.0.0 255.255.0.0 10.196.7.1 Please help to advice and thank you in advance.
... View more
Labels:
02-21-2019
12:11 AM
Thank you for your respond.
I'm using the Site-to-Site VPN
Yes I've the interested ACL as below
access-list outside_cryptomap extended permit ip 10.199.20.0 255.255.254.0 object-group DM_INLINE_NETWORK_1
And called in Crypto-MAP
crypto ipsec security-association pmtu-aging infinite crypto ipsec df-bit clear-df outside crypto map outside_map 1 match address outside_cryptomap crypto map outside_map 1 set peer xx.xx.xx.xx
But the client in network 10.199.20.0 can't access to the server in group DM_INLINE_NETWORK_1 and the ASA log show the traffic has been blocked
So I've create the ACL for allow as below
access-list inside_access_in extended permit ip 10.199.20.0 255.255.254.0 object-group DM_INLINE_NETWORK_1
Then very thing work as expected , So I'm not sure this is the right setup?
... View more
02-20-2019
08:01 PM
I've create the site-to-site VPN between my ASA and customer firewall.
I've done it my VPN wizard and Tunnel is up already. But my problem is when my client in LAN interface try to connect the server on another side of VPN, it cannot connect and show blocking in ASA log.
So I've tried by add the ACL to allow source LAN subnet to destination server then the connection was successful.
My question is although we have complete the site-to-site VPN setup , We still need ACL allow the connection again?
... View more
- Tags:
- Cisco Community
Labels:
02-16-2020
Hi All, Thank you for your all advises, Today I've tried with remove the
2nd Supervisor from the cha...
02-13-2020
Thank you.I'm running on software version belowsh vererCisco IOS
Software, IOS-XE Software, Catalyst...
02-13-2020
Thank you , Yes you are right !The first 4 port on each Supervisor card
could be functional.But for ...
02-13-2020
Hi All,I have the problem and would like to have some advice , I have
Cisco 4510R+E with 2 Sup-8e wi...
07-25-2019
Hi All,Thank you for your reply.I have the more detail to update my
current connection show as below...
07-16-2019
Hi All,I've setup the Cisco ASA 5506x firewall with the simple
connection.- outsite interface connec...
Public Statistics
| Date Registered | 10-27-2017 06:44 PM |
| Date Last Visited | 02-19-2020 10:17 AM |
| Total Messages Posted | 9 |
| Total Helpful Votes Received | 15 |
.jpg "VIP Mentor"){kind=icon}
