Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Grant-Security/Network Analyst
08-24-2019
Stats
Member since
11-02-2017
19
Posts
5
Helpful
1
Solution
Created by
Grant-Security/
in Firewalls
in Firewalls
08-22-2019
05:49 AM
08-22-2019
05:49 AM
Interesting. I just came across this on a new build when setting up firepower. Did you find out why this message came up? Any issues with your firepower?
... View more
Created by
Grant-Security/
in VPN and AnyConnect
08-11-2019
08:03 AM
08-11-2019
08:03 AM
I have to update with this simple comment because sometimes the simple things get you in the end. In my case I had everything setup correctly. Nat exempt, split tunneling allowed access to all required networks, and even a nat rule: nat (inside,outside) source static any any destination static AnyConnect_Pool AnyConnect_Pool no-proxy-arp route-lookup ASA# show ip System IP Addresses: Interface Name IP address Subnet mask Method GigabitEthernet1/1 outside x.x.x.x 255.255.255.255 CONFIG GigabitEthernet1/2 inside 10.110.0.1 255.255.255.240 CONFIG GigabitEthernet1/3 office 10.110.10.1 255.255.255.224 CONFIG The problem is the NAT rule, I was able to connect to anything on the inside interface, but because there was a rule that said inside,outside I couldn't get to the office network. Changed the rule to: nat (any,outside) source static any any destination static AnyConnect_Pool AnyConnect_Pool no-proxy-arp route-lookup
... View more
Created by
Grant-Security/
in Firewalls
07-31-2019
06:17 AM
07-31-2019
06:17 AM
@Scott Pettit wrote: Hi Patrick, I hit this on a new W10 machine and tracked the issue down to the newer W10 builds silently swapping the Windows Scripting Host path for "compatibility" which causes that compatibility error. If you go into Start > Cisco ASDM-IDM Launcher > right click the launcher and go to More > Open file location Then you'll be looking at the shortcut to the ASDM launcher, right click it and go to Properties and look at the Target. You'll see a long path to wscript.exe - change this to C:\Windows\System32\wscript.exe (leave the invisible.vbs run.bat on the end as these scripts are used to open up ASDM). After changing this I was able to launch ASDM fine. -Scott Alright, first off that worked! Secondly how in the heck did you figure that one out? And finally why is it doing this now?
... View more
Created by
Grant-Security/
in Wireless and Mobility
06-28-2019
12:04 PM
06-28-2019
12:04 PM
We were recently contacted about wireless issues. I looked on the WLC and noticed 1 of 5 was missing. I assumed it was a POE issue but then I looked at the switch and noticed that the Power was on and I can ping the AP. Any ideas why the unit will come up and network settings are working but will not connect to the WLC? Can I reset the AP via a button or something?
... View more
Created by
Grant-Security/
in Networking Documents
03-11-2019
11:15 AM
03-11-2019
11:15 AM
I meant to show this in the solution:
3750X-CS#sh run inter g1/0/2 Building configuration...
Current configuration : 132 bytes ! interface GigabitEthernet1/0/2 description Sentinel - WAN switchport access vlan 23 switchport mode access no cdp enable end
3750X-CS#sh run inter g1/0/3 Building configuration...
Current configuration : 133 bytes ! interface GigabitEthernet1/0/3 description Sentinel - LAN switchport access vlan 200 switchport mode access no cdp enable end
... View more
Created by
Grant-Security/
in Networking Documents
03-11-2019
09:40 AM
03-11-2019
09:40 AM
Symptoms
Connected to the console port I was getting the following messages over and over again. In my case vlan 23 went to the WAN port on a IPS server and vlan 200 went to the LAN port on the same server. It is not a switch but I was told because it was crossing vlans cdp was reporting the issue even though it wasn't a problem.
Mar 9 23:15:26.022: %CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/3 (200), with 3750X-CS.kbsi-cs.com GigabitEthernet1/0/2 (23).
Mar 9 23:15:30.971: %CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/2 (23), with 3750X-CS.kbsi-cs.com GigabitEthernet1/0/3 (200).
Diagnosis
interface GigabitEthernet1/0/2 description Sentinel - WAN switchport access vlan 23 switchport mode access end
3750X-CS#sh run inter g1/0/3 Building configuration...
Current configuration : 133 bytes ! interface GigabitEthernet1/0/3 description Sentinel - LAN switchport access vlan 200 switchport mode access end
Solution
In this case everything was working as designed. The notification was because the ports were connected to the same device crossing vlans. So we applied "no cdp enable" on both interfaces and the logs messages stopped.
... View more
Created by
Grant-Security/
in Network Management
02-15-2019
12:14 PM
02-15-2019
12:14 PM
I cannot add the following to an interface or to the vlans which is why I believe mine shows to be inactive.
3750X-06(config)#inter g1/0/1 3750X-06(config-if)#ip flow monitor NETFLOW-MONITOR sampler NETFLOW-SAMPLER input % Flow Monitor: 'NETFLOW-MONITOR' could not be added.
3750X-06#sh flow monit Flow Monitor NETFLOW-MONITOR: Description: NETFLOW-MONITOR Flow Record: NETFLOW-RECORD Flow Exporter: NETFLOW-EXPORTER (inactive) Cache: Type: normal Status: not allocated Size: 128 entries / 0 bytes Cache: Type: normal (Platform cache) Status: not allocated Size: Unknown
Why can't I add IP monitor commands? Is it the switch that is the problem? I am using a 3750-X.
... View more
Created by
Grant-Security/
in Small Business Switches
02-12-2019
02:21 PM
02-12-2019
02:21 PM
I have the same issue. Based on the link below the temp should be much lower. Where is the system temp value read from? If it is air flow as you state then why doesn't it report that reading? It doesn't even match the snmp data I am getting on my collector.
53 C is HOT(127F)
3560cx-1#show env all SYSTEM TEMPERATURE is OK System Temperature Value: 53 Degree Celsius System Temperature State: GREEN Yellow Threshold : 89 Degree Celsius Red Threshold : 96 Degree Celsius
... View more
02-12-2019
11:06 AM
What is the purpose of the vlan configuration X command? Can someone point me to the documentation? I assume this allows you to get input from all these vlans to the flow monitor?
!
vlan configuration 20
ip flow monitor MONITOR input
!
... View more
Created by
Grant-Security/
in Advanced Threats
02-07-2019
02:16 PM
02-07-2019
02:16 PM
Is there a way to force a downgrade? I assume if I select a 6.1.x version it would downgrade the clients accordingly? This issue is reported on all 6.2.x versions so I don't want them running any version of 6.2.
... View more
Created by
Grant-Security/
in Switching
02-04-2019
12:12 PM
02-04-2019
12:12 PM
I have three printers that are reporting high utilization on three different ports but on the same switch in the stack(5 switches in the stack). This just started this weekend and I thought at first it maybe a problem with Orion(Solarwinds) but you can see below that the transmit is high with these printers. Is there a problem and where do I begin to look?
C3750-CS#show controllers gigabitEthernet 3/0/13 utilization Receive Bandwidth Percentage Utilization : 0 Transmit Bandwidth Percentage Utilization : 74 C3750-CS#show controllers gigabitEthernet 3/0/22 utilization Receive Bandwidth Percentage Utilization : 0 Transmit Bandwidth Percentage Utilization : 74 C3750-CS#show controllers gigabitEthernet 3/0/26 utilization Receive Bandwidth Percentage Utilization : 0 Transmit Bandwidth Percentage Utilization : 73 C3750-CS#sh inter g3/0/13 GigabitEthernet3/0/13 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.770d (bia 0016.c7e9.770d) Description: East Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 76/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:22, output hang never Last clearing of "show interface" counters 02:58:17 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7632695 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 30112000 bits/sec, 2550 packets/sec 2207 packets input, 150608 bytes, 0 no buffer Received 1802 broadcasts (2 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 2 multicast, 0 pause input 0 input packets with dribble condition detected 35784035 packets output, 52886106339 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out C3750-CS#sh inter g3/0/22 GigabitEthernet3/0/22 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.7716 (bia 0016.c7e9.7716) Description: Admin Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 75/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:19, output hang never Last clearing of "show interface" counters 02:58:14 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7634485 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 29612000 bits/sec, 2507 packets/sec 15120 packets input, 1000764 bytes, 0 no buffer Received 1805 broadcasts (2 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 2 multicast, 0 pause input 0 input packets with dribble condition detected 35797434 packets output, 52906725657 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out C3750-CS#sh inter g3/0/26 GigabitEthernet3/0/26 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.771a (bia 0016.c7e9.771a) Description: Upstairs Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 75/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:16, output hang never Last clearing of "show interface" counters 02:58:14 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7642390 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 29612000 bits/sec, 2507 packets/sec 451 packets input, 31674 bytes, 0 no buffer Received 2 broadcasts (0 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 35852521 packets output, 52987579548 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:09, output hang never Last clearing of "show interface" counters 02:50:36 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7582667 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 72344000 bits/sec, 6029 packets/sec 15020 packets input, 993006 bytes, 0 no buffer Received 1728 broadcasts (2 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 2 multicast, 0 pause input 0 input packets with dribble condition detected 35352472 packets output, 52289135482 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out C3750-CS#sh inter g3/0/26 GigabitEthernet3/0/26 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.771a (bia 0016.c7e9.771a) Description: Upstairs Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 181/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:07, output hang never Last clearing of "show interface" counters 02:50:38 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7581407 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 71156000 bits/sec, 5931 packets/sec 451 packets input, 31674 bytes, 0 no buffer Received 2 broadcasts (0 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 35340415 packets output, 52268969752 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out
... View more
Labels:
Created by
Grant-Security/
in Email Security
11-12-2018
08:36 AM
11-12-2018
08:36 AM
In correct!
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118188-qanda-esa-00.html#anc5
... View more
Created by
Grant-Security/
in Firewalls
10-16-2018
09:08 AM
10-16-2018
09:08 AM
Yes I would be glad to give you all the information that I have ran into with this issue. Bottom line is that FTD at a remote site will not function like the ASA/FirePower at a remote site without preconfiguring locally. Personally due to the fact that if something happens to the unit you may not be able to support that remote location remotely. Cisco suggested that we buy yet another piece of equipment(router) for the remote site so this would function. Absolutely crazy.
That said, they are working on a solution that works similar to the ASA/FirePower but I cannot say when if this will happen. I know sales will tell you that this certainly works and field engineers will support them but there is enough documentation that we gave to TAC showing that it will not function the same. I do like FTD for the most part(we are running a 2110 locally) but I elected to reimage my ASA's with ASA/FirePower for my remote locationsl. If you need to links I could do some looking to show you others that too discovered what we did.
Best of luck and just reimage for now IMO.
... View more
Created by
Grant-Security/
in VPN and AnyConnect
05-30-2018
09:41 AM
05-30-2018
09:41 AM
No solutions?
... View more
Created by
Grant-Security/
in Firewalls
03-29-2018
09:12 AM
03-29-2018
09:12 AM
yes show inventory has always shown the correct chassis serial number, but what is crazy is that the show run or show version doesn't match. The real question is why is this the case?
... View more
Latest Contributions by Grant-Security/Network Analyst
- Latest Contributions by Grant-Security/Network Analyst
- Discussions Grant-Security/Network Analyst has Participated In
- TKBs Grant-Security/Network Analyst has Participated In
- Blogs Grant-Security/Network Analyst has Participated In
- Events Grant-Security/Network Analyst has Participated In
- Videos Grant-Security/Network Analyst has Participated In
Created by
Grant-Security/Network Analyst
in Firewalls
08-22-2019
08-22-2019
Interesting. I just came across this on a new build when setting up
firepower. Did you find out why ...
Created by
Grant-Security/Network Analyst
in VPN and AnyConnect
08-11-2019
08-11-2019
I have to update with this simple comment because sometimes the simple
things get you in the end. In...
Created by
Grant-Security/Network Analyst
in Firewalls
07-31-2019
07-31-2019
@Scott Pettit wrote:Hi Patrick, I hit this on a new W10 machine and
tracked the issue down to the ne...
Created by
Grant-Security/Network Analyst
in Wireless and Mobility
06-28-2019
06-28-2019
We were recently contacted about wireless issues. I looked on the WLC
and noticed 1 of 5 was missing...
Created by
Grant-Security/Network Analyst
in Networking Documents
03-11-2019
03-11-2019
I meant to show this in the solution: 3750X-CS#sh run inter
g1/0/2Building configuration... Current ...
Created by
Grant-Security/Network Analyst
in Networking Documents
03-11-2019
03-11-2019
Symptoms Connected to the console port I was getting the following
messages over and over again. In ...
Created by
Grant-Security/Network Analyst
in FirePOWER
02-27-2019
02-27-2019
The problem was with Putty. As of version 6.3 of FMC the encryption
requirements have changed requir...
Created by
Grant-Security/Network Analyst
in FirePOWER
02-27-2019
02-27-2019
I discovered today that I cannot ssh into FMC(not sure if I have since
upgrading to 6.3). I am able ...
Created by
Grant-Security/Network Analyst
in Network Management
02-15-2019
02-15-2019
I cannot add the following to an interface or to the vlans which is why
I believe mine shows to be i...
Created by
Grant-Security/Network Analyst
in Small Business Switches
02-12-2019
02-12-2019
I have the same issue. Based on the link below the temp should be much
lower. Where is the system te...
02-12-2019
What is the purpose of the vlan configuration X command? Can someone
point me to the documentation? ...
Created by
Grant-Security/Network Analyst
in Advanced Threats
02-07-2019
02-07-2019
Is there a way to force a downgrade? I assume if I select a 6.1.x
version it would downgrade the cli...
Created by
Grant-Security/Network Analyst
in Switching
02-04-2019
02-04-2019
I have three printers that are reporting high utilization on three
different ports but on the same s...
Created by
Grant-Security/Network Analyst
in Email Security
11-12-2018
11-12-2018
In correct!
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118188-qand...
Created by
Grant-Security/Network Analyst
in Firewalls
10-16-2018
10-16-2018
Yes I would be glad to give you all the information that I have ran into
with this issue. Bottom lin...
Public Statistics
| Date Registered | 11-02-2017 09:04 AM |
| Date Last Visited | 08-24-2019 08:58 AM |
| Total Messages Posted | 19 |
| Total Helpful Votes Received | 5 |
