Hello all, I am having a heck of a time with this implementation. Below you will find the topology I am trying to implement (and attached): I am working on the 3945E routers, ASA5520's and 3750X's for this inquiry. All routes show up in all routing tables for all six devices. From the switches I can ping G1/2 and G1/1 on both ASA's however only two of them at a time in any combination (but only two). I found this out by physically disconnecting the circuits as well as performing shut/no shut on the interfaces. DNS also takes its sweet time propagating through as well and in some cases during the manual cutover stops all together and kills any Web site accessibility. All interfaces are GigE and all are directly connected as the drawing shows. This is all in test environment so I can make any changes needed or test any thought process. The ASA's have the same security-level on all interfaces as well as " same-security-traffic permit inter-interface" configured. I am trying to get this to run smoothly with redundancy and resiliency. When I remove one of the firewalls and one of the routers from the topology it works. I can add the firewall and router but once I shut the circuits that one of the firewalls is using my outbound traffic ceases to pass. I know this is a lot to chew on but I am drawing blanks. Any help would be greatly appreciated. -Micah
... View more
Good morning, I have just installed CNA again after deinstalling it. When I initially launch CNA it asks me for my CCO credentials. Apparantly they work becuase I am able to post in this forum however when I click the "OK" button I recieve the following: Can assistance be provided by anyone? Any help would be greatly appreciated. -Micah
... View more
Jude, The commands posted by leolaohoo are good places to look. An example of the sh interface status output is as follows: 3560G-01#show interfaces gigabitEthernet 0/28 status Port Name Status Vlan Duplex Speed Type Gi0/28 connected trunk a-full a-1000 10/100/1000BaseTX SFP An example of the sh idprom interface output is as follows: cvc-3560g-ott1#sh idprom interface gigabitEthernet 0/28 General SFP Information ----------------------------------------------- Identifier : 0x03 Connector : 0x00 Transceiver : 0x00 0x00 0x00 0x08 0x00 0x00 0x00 0x00 Encoding : 0x01 BR_Nominal : 0x0D Vendor Name : CISCO-AVAGO Vendor Part Number : ABCU-5710RZ-CS2 Vendor Revision : 0x20 0x20 0x20 0x20 Vendor Serial Number : AGM120825NE ----------------------------------------------- Other Information And so on... If your SFP is bad you will see the following output: 3560g-01#sh idprom interface gigabitEthernet 0/26 %No module is present If you see nothing at all when you run any of those commands either the interface does not exist or the software might have a bug in my opinion. Hope this helps. -Micah
... View more
Please elaborate on what you mean by "i hadly see the fiber ports." If what you are asking is a matter of trunking (802.1q) the two switches together, you merely need to configure the interfaces as trunks on both switches with the appropriate VLAN's. You will also need the SFP's for each switch and an LC-LC, duplex fiber. The mode of the fiber must match the SPF i.e. GLC-SX-MM is for multi-mode fiber. Example config: Switch-A# config t Enter configuration commands, one per line. End with CNTL/Z. Switch-A(config)# int g0/1 Switch-A(config-if)# switchport trunk encapsulation dot1q Switch-A(config-if)# switchport trunk allowed vlan 10 Switch-A(config-if)# switchport mode trunk Switch-A(config-if)# no shut Switch-A(config-if)# ^z Switch-A# wr me Switch-A# exit Switch-B# config t Enter configuration commands, one per line. End with CNTL/Z. Switch-B(config)# int g0/1 Switch-B(config-if)# switchport trunk encapsulation dot1q Switch-B(config-if)# switchport trunk allowed vlan 10 Switch-B(config-if)# switchport mode trunk Switch-B(config-if)# no shut Switch-B(config-if)# ^z Switch-B# wr me Switch-B# exit Provided that the hardware is in place (SFP's on both switches) and cabling, the above configuration should provide what you are looking for. -Micah
... View more