i want to ask about u4route-mem in VDC Configuration "limit-resource u4route-mem minimum 215 maximum 215", is this RIB Memory for Supervisor ?
because every month when i check show resource u4route-mem the resource is decreased by one, and when i check sh ip bgp sum, the network entries is increased
BGP summary information for VRF default, address family IPv4 Unicast BGP router identifier 10.62.50.250, local AS number 58816 BGP table version is 242636326, IPv4 Unicast config peers 26, capable peers 19 647629 network entries and 861267 paths using 87943244 bytes of memory BGP attribute entries [432858/58868688], BGP AS path entries [348803/9579374] BGP community entries [865/39572], BGP clusterlist entries [0/0] 1902010 received paths for inbound soft reconfiguration 10458 identical, 850791 modified, 1040761 filtered received paths using 48436768 bytes
Resource Min Max Used Unused Avail -------- --- --- ---- ------ ----- u4route-mem 215 215 138 77 77
compare with Oct 2016
BGP summary information for VRF default, address family IPv4 Unicast BGP router identifier 10.62.50.250, local AS number 58816 BGP table version is 187997095, IPv4 Unicast config peers 24, capable peers 21 638666 network entries and 801585 paths using 83860396 bytes of memory BGP attribute entries [422338/57437968], BGP AS path entries [348411/9601816] BGP community entries [892/39728], BGP clusterlist entries [0/0] 1938201 received paths for inbound soft reconfiguration 10585 identical, 790983 modified, 1136633 filtered received paths using 51793184 bytes
sh resource u4route-mem Resource Min Max Used Unused Avail -------- --- --- ---- ------ ----- u4route-mem 215 215 135 80 80
and i want to know, what happen if the network entries keep increasing and the u4route-mem became 0 in available resource ?
... View more
Good Night, i already solved the problem, and now i can go into webvpn, but when i start anyconnect it hang when status for anyconnect is performing update checks The AnyConnect Downloader is performing update checks... and when i used anyconnect secure mobility is always Checking for product updates..
... View more
good evening, i now learning about SSLVPN, and i already install license in 1941 with SSL and security9 License, i learning how to make a gateway for SSLVPN full tunnel, but i meet an obstacles, when i go to my wan ip address https://wan ip address, the browser give this SSL connection error Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have. Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error. my gateway is webvpn gateway gateway_1 ip address wan ip port 443 http-redirect port 80 ssl encryption rc4-md5 ssl trustpoint SSLCS logging enable inservice and the context is webvpn install svc flash0:/webvpn/anyconnect-win-3.0.5080-k9.pkg sequence 1 ! webvpn context context_1 secondary-color white title-color #669999 text-color black ssl authenticate verify all ! ! policy group policy_1 functions svc-enabled banner "Welcome To xxx" svc address-pool "SSLVPN" netmask 255.255.255.0 svc keep-client-installed default-group-policy policy_1 aaa authentication list ciscocp_vpn_xauth_ml_1 gateway gateway_1 max-users 25 logging enable inservice and my sh cryp pki trust Trustpoint SSLCS: Subject Name: cn=SSLCS Serial Number (hex): 01 Persistent self-signed certificate trust point sh cryp key mypubkey rsa Key name: SSLCS Key type: RSA KEYS Storage Device: not specified Usage: General Purpose Key Key is not exportable. Key Data: 30819F30 0D06092A 864886F7 0D010101 05000381 8D003081 89028181 00B9D4D1 498E3706 95AE17BE 7FC1EAE3 E1F814BB D3492052 C34E9DC9 78D68969 1F12AE13 A2D1F0C2 FBE49C8D C72EC74F 59C46F4A 116D7128 D24FFB7A AF6677C8 9763DE91 74591031 65646D0E 163F20D2 7C08D5DE 3743B9D6 8CE8B7BD 61E97730 2449DD18 7465E0D1 6D223E7F E4361967 98DA1093 247395DF 18853E62 E8416B50 E1020301 0001 and by cryp pki server Certificate Server SSLCS: Status: enabled State: enabled Server's configuration is locked (enter "shut" to unlock it) Issuer name: CN=SSLCS CA cert fingerprint: D621B1BB 3DD8D9CD EB2B34EC D11AB0E2 Granting mode is: manual Last certificate issued serial number (hex): 1 CA certificate expiration timer: 18:14:47 GMT Sep 4 2022 CRL NextUpdate timer: 06:14:49 GMT Sep 7 2012 Current primary storage dir: flash:/SSLCS Database Level: Complete - all issued certs written as <serialnum>.cer i want to ask, what happen to the gateway?? and how to solve it thanks
... View more