Hi, we have the following setup for our network : UserNetwork - ASA5550 - WAN Router 2911 - ISP Netowrk - Branch Routers 877s / 1941s Since last week we started noticing this problem that the branch users started to complain of slow application response.. After verifying it with the ISP and middle network we noticed that if i ping from my machine (ie usernetwork) to the WAN Router interface (facing the ASA) , i get time outs..  which is strange cause this is directly connected to it via ethernet cable. anyone has any idea why this is happning or what should i check first. Regards Zaid ... View more

Hi, we had just installed our ASA 5550 with IOS 8.0(2) a couple of week ago. 2 interfaces from each slot are being used ie 0/0 for Branch users comming via MPLS cloud ,  0/1 for internal LAN users comming form Core Switch  & 1/0 for Server farm LAN   , 1/1  for Internet (outside) the first 3 interface are considered inside with sec set at 100   while the 1/1 is outside with sec at 0. Last night it suddenly started dropping all connections without any warning  or any noticible log form the ASDM logging. the connection drop would happen for 2 - 3 minutes and would work fine for the next 15 minutes or so.. after conencting the console , we found out that the IOS would suddelny go abrupt and show this display ... TP-ASA(config)# TP-ASA(config)# TP-ASA(config)# Thread Name: Dispatch Unit Page fault: Address not mapped     vector 0x0000000e        edi 0x24d184b0        esi 0x0000000d        ebp 0x1c6ceaf8        esp 0x1c6ceae0        ebx 0x09e965e0        edx 0x12d05e80        ecx 0x24d18390        eax 0x00000000 error code 0x00000004        eip 0x0879da5e         cs 0x00000073     eflags 0x00013246        CR2 0x00000014 Cisco Adaptive Security Appliance Software Version 8.2(1) Compiled on Tue 05-May-09 22:45 by builders Hardware:   ASA5550 Crashinfo collected on 17:01:25.799 UTC Tue Jan 31 2012 Traceback: 0: 0805d0d3 1: 0805db77 2: 08a23d7c 3: dd7a86d5 4: dd58d1e0 5: 087a089f 6: 086b16d2 7: 0873537a 8: 08c085c7 9: 081aa6ee 10: 08062413 Stack dump: base:0x1c6ce9f8 size:552, active:552 entries above '==': return PC preceded by input parameters entries below '==': local variables followed by saved regs We suspected this to be an IOS crash and deceided to upgrade the IOS which was also planned at a later stage.. after upgrading the IOS to 8.3.2 , it seems to be working fine... but im still shaky.. as the previous IOS also worked for a couple of weeks before it crashed. my question is : is there anyway i can find out what caused it as there were no changes to the configuration or traffic patten. ? is this a known bug for 8.0(2)  or what... thanks... regards zaid im attaching the data i got on my console when the crash happned and till the time it got normal again .. ... View more

Hi, we have a core switch 4507RE at the data center and 2 departments that connect to it via 10Gig fiber using X2-LRM modules. Each department  has a 3 switch stack and both locations are identical w.r.t type and setup scenario ..   the stack comprises of  1 x 3750E and 2 x 3750G . uplink is from X2 port tengig3/0/1 from the 3750E switch. all of a sudden dept B started facing problem , where the ping would break and throughput comes around 6 - 7 mbps   from that dept to the server behind the core switch.   we also noted CRC error on both sides preodically ...   so .... we replaced the multimode fiber patch cords, re did the splicing , which  stopped the CRC errors to appear. now since morning the uplink port on the 3750E (3/0/1) would suddenly be in "down" state    with (err-disabled) as the status  when i run sh int ten 3/0/1 and i can also see CRC errors and input errors on the same interface..   if i do shut / no shut .. the port is up and active again..    but this has happned 3 times today.. the core swith side is still OK and no CRC / input / output  errors are seen.. now on the 3750E i have  swapped the 10gig module from 3/0/1 to 3/0/2 .  the port is still up but i can see 400 CRC and 500 Input errrors.....     the module is also OK as i had replaced it with dept 1's module.... any anyone please suggest what and how to check ... im totally blank ..  which side has the problem ..... how to trace it ... View more

Hi, we have a core switch 4507RE at the data center and 2 departments that connect to it via 10Gig fiber using X2-LRM modules. Each department  has a 3 switch stack and both locations are identical w.r.t type and setup scenario ..   the stack comprises of  1 x 3750E and 2 x 3750G . uplink is from X2 port tengig3/0/1 from the 3750E switch. all of a sudden dept B started facing problem , where the ping would break and throughput comes around 6 - 7 mbps   from that dept to the server behind the core switch.   we also noted CRC error on both sides preodically ...   so .... we replaced the multimode fiber patch cords, re did the splicing , which  stopped the CRC errors to appear. now since morning the uplink port on the 3750E (3/0/1) would suddenly be in "down" state    with (err-disabled) as the status  when i run sh int ten 3/0/1 and i can also see CRC errors and input errors on the same interface..   if i do shut / no shut .. the port is up and active again..    but this has happned 3 times today.. the core swith side is still OK and no CRC / input / output  errors are seen.. now on the 3750E i have  swapped the 10gig module from 3/0/1 to 3/0/2 .  the port is still up but i can see 400 CRC and 500 Input errrors.....     the module is also OK as i had replaced it with dept 1's module.... any anyone please suggest what and how to check ... im totally blank ..  which side has the problem ..... how to trace it ... View more

Hi, we recently started to have a problem in on of the department (DeptB) which has 3x3750E stacked switches with X2-LRM (10G) module on port TG3/0/1 . this connects to the data center's core switch 4507RE's X2-LRM module on port TG2/3. on checking ping from core to the deptB stack is very bad on default ping size as well as on max ping size, the same test for deptA is successful even with max size of 18024bytes... DC_Core#ping 172.16.0.3 size 18024 repeat 1000 Type escape sequence to abort. Sending 1000, 18024-byte ICMP Echos to 172.16.0.3, timeout is 2 seconds: .!....!!!........!.....!.....!!......!..!........!.........!.......... Success rate is 17 percent (12/70), round-trip min/avg/max = 8/9/12 ms [DATA CEN   -----------------------(10G Fiber)--------------------[DEPT B - 3x3750Estack] TER 4507RE] -----------------------10G Fiber)--------------------[DEPT A - 3x3750Estack] i can see Input Error and CRC error on the interface of the 4507 switch's port 2/3 which connects to the DeptB stack of 3750E , where as the DeptB 3750E switches does not have any error on it. DC_Core#sh int tenGigabitEthernet 2/3 TenGigabitEthernet2/3 is up, line protocol is up (connected)   Hardware is Ten Gigabit Ethernet Port, address is 1cdf.0f7e.22e9 (bia 1cdf.0f7e.22e9)   MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec,      reliability 254/255, txload 1/255, rxload 1/255   Encapsulation ARPA, loopback not set   Keepalive set (10 sec)   Full-duplex, 10Gb/s, link type is auto, media type is 10GBase-LRM   input flow-control is on, output flow-control is on   ARP type: ARPA, ARP Timeout 04:00:00   Last input 00:00:03, output never, output hang never   Last clearing of "show interface" counters never   Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0   Queueing strategy: fifo   Output queue: 0/40 (size/max)   5 minute input rate 43000 bits/sec, 5 packets/sec   5 minute output rate 107000 bits/sec, 20 packets/sec      61405553 packets input, 22086233035 bytes, 0 no buffer      Received 1794570 broadcasts (832848 multicasts)      0 runts, 0 giants, 0 throttles      943822 input errors, 943822 CRC, 0 frame, 0 overrun, 0 ignored      0 input packets with dribble condition detected      115639393 packets output, 95074403915 bytes, 0 underruns      0 output errors, 0 collisions, 0 interface resets      0 babbles, 0 late collision, 0 deferred      0 lost carrier, 0 no carrier      0 output buffer failures, 0 output buffers swapped out DC_Core# is this a fiber cable or X2 module problem at the core switch side ??? ... View more

HI, we recently started having a problem where a certan users in an area started complain abt file transfers (user to user / email attachments etc ) in our scenaro the data center has a 4507RE which connects to Dept A via X2 (LRM) port over 10G fiber , similarly for Dept B its the same using the second X2 port (LRM) over 10G fiber. Dept A has a localized network rack with 3x3750E switches stacked. Same is for Dept B.   After the complaint was launched , when we started investigating , the first thing i noticed was that the ping response from the core switch to Dept B stack was breaking... this was my ping response DC_Core#ping 172.16.0.3 repeat 1000 Type escape sequence to abort. Sending 1000, 100-byte ICMP Echos to 172.16.0.3, timeout is 2 seconds: !!!!!!!!.!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!.!!!!!!!!!!!!!!!!!!!!! !!!!.!!!!!!!!!!!.!!!!!!!!!!!!.!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!.!!!!!!!!.!!!!!!!!!!!!!!! !!!!.!!!!!!!!!!!!.!!!!!!!.!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !.!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!.!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!.!.!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!.!!!!.!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!! Success rate is 96 percent (968/1000), round-trip min/avg/max = 1/1/8 ms DC_Core# it breaks even if i specify the minimum datagram size of 36 bytes...  this was disturbing....  so i tried the same with Dept A stack , just to verify it it was a problem with the core.... which ran without a miss.. i tried Dept A stack with the max datagram size of 18024 bytes which also went without a miss.. DC_Core#ping 172.16.0.2 size 18024 repeat 1000 Type escape sequence to abort. Sending 1000, 18024-byte ICMP Echos to 172.16.0.2, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!! Success rate is 100 percent (1000/1000), round-trip min/avg/max = 8/12/36 ms DC_Core# so OBVIOUSLY somthing is wrong with the Dept B stack ...  but i can not see anything on the switch panel or our manage engine OP Manager console. the memory utilization is 20 % , CPU is less then 10%, ... i have tried restarting the stack.. how else can i resolve this ?? what else do i need to look for ? ... View more