Thanks Varun for your prompt reply. I’ve specified the security level as suggested but still didn’t work. DHCP-Client# sh run int e0/0 ! interface Ethernet0/0 nameif outside security-level 0 ip address dhcp setroute DHCP-Client# DHCP-Client# sh int ip br Interface                 IP-Address     OK? Method Status               Protocol Ethernet0/0               unassigned     YES DHCP   up                   up DHCP-Client# sh ip ad System IP Addresses: Interface               Name                   IP address     Subnet mask     Method Ethernet0/0            outside               unassigned     unassigned     DHCP Current IP Addresses: Interface               Name                   IP address     Subnet mask     Method Ethernet0/0             outside               unassigned     unassigned      DHCP DHCP-Client# sh run int e0/0 ! interface Ethernet0/0 nameif outside security-level 0 ip address dhcp setroute DHCP-Client# DHCP-Client# sh int e0/0 Interface Ethernet0/0 "outside", is up, line protocol is up Hardware is linaeth, BW Unknown Speed-Capability, DLY 1000 usec        Auto-Duplex(Full-duplex), (100 Mbps)        Media-type configured as RJ45 connector        MAC address 00ab.a72f.0100, MTU 1500        IP address unassigned        0 packets input, 46 bytes, 0 no buffer         Received 1 broadcasts, 0 runts, 0 giants        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort        0 L2 decode drops        0 packets output, 108624 bytes, 0 underruns        0 output errors, 0 collisions, 0 interface resets        0 babbles, 0 late collisions, 0 deferred        0 lost carrier, 0 no carrier        input queue (curr/max packets): hardware (128/128) software (0/1)        output queue (curr/max packets): hardware (0/0) software (0/1) Traffic Statistics for "outside":        1 packets input, 32 bytes        185 packets output, 106012 bytes        0 packets dropped      1 minute input rate 0 pkts/sec, 0 bytes/sec      1 minute output rate 0 pkts/sec, 86 bytes/sec      1 minute drop rate, 0 pkts/sec      5 minute input rate 0 pkts/sec, 0 bytes/sec      5 minute output rate 0 pkts/sec, 90 bytes/sec      5 minute drop rate, 0 pkts/sec DHCP-Client# D ... View more

Hmm, I guess: AR is stand for Advance Replacement. Am I correct? NBD is stand for Next Business Day in case of a failure How about the following code? SVC CON SU1 AS2A10K9 ASAINC10 ... View more

CON-SU1-ASAINC10 : This is the SMARTNET contract service agreement. CON-SU1-AS1A10K9 : This is the Cisco Software license agreement. This is interesting. 1.       What is the difference between SMARNET & Cisco Software license agreements? 2.       What is the meaning of the following code?      a.      CON      b.      SU1      c.       ASAINC10      d.    AS1A10K9 ... View more

Thanks Marvin for your reply. But I just want to know the meaning of each code. As example: 3FE is 3 Fast Ethernet How about CON SU1 CSSPD SVC AR NBD SUPP SDS ... View more

Utilization (U) Percentage = (Throughput/Data Rate) x 100 Ah, I’ve overlooked the formula given above. Does it mean value of “Data Rate” is always 100,000,000? I’ve just discussed about this matter with my friend and he said “input rate” is enough to determine the bandwidth used in the network. So, obviously Cisco ASA 5505 is just nice as it can support up to 150 Mbps throughput while the throughput on the network just 3000 bits/sec. Is that true? Cisco ASA 5500 Series Model/License Cisco ASA 5505 Base / Security Plus Cisco ASA 5510 Base / Security Plus Cisco ASA 5520 Cisco ASA 5540 Cisco ASA 5550 Product Image (click to enlarge) Network Location Small Business, Branch Office, Enterprise Teleworker Internet Edge Internet Edge Internet Edge Internet Edge, Campus Performance Summary Maximum Firewall throughput 150 Mbps 300 Mbps 450 Mbps 650 Mbps 1.2 Gbps http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html#~mid-range ... View more

At first, I was wondering where you get value “23144362568” as it’s not part of the output. Then I realize it is in bits. The original output is in bytes. 1 bytes is equal to 8 bits. So we need to multiply the output in bytes with 8 in order to get a bits value. Therefore, 2893045321 bytes x 8 = 23144362568 bits. But, if you’re too lazy to calculate, then we need a online calculator http://www.matisse.net/bitcalc/?input_amount=2893045321&input_units=bytes&notation=legacy bits 23144362568 bytes 2893045321 ... View more

Thanks Vivek for the info. I’ve learned something new today And don’t worry about the calculation as there is a reason why spreadsheet as excel or calculator is created. Here is the answer for that. But I was wondering where do you get the value of “100,000,000” Utilization Percentage (input) 0.003 Utilization Percentage (output) 0.004 Utilization Percentage (total) 0.007 ... View more

Thanks Vivek, I really appreciate it. However, these solutions are not for me as I don’t have a write access to the switches & can’t configure additional tools on the network. But I do have read access to the switches and use any available command on it. I did a quick google on this issue and found similar solution here. How to Check Bandwidth usage on router ? http://answers.yahoo.com/question/index?qid=20070910043818AAaS2Lr So, I’ve performed “sh int Gi0/1” in 5 minutes interval and have the following outputs. sh clock 7:47 7:52 sh int Gi0/1 ... 5 minute input rate 3000 bits/sec, 3 packets/sec 5 minute output rate 4000 bits/sec, 4 packets/sec      1754961 packets input, 383416613 bytes, 0 no buffer      Received 515250 broadcasts (152537 IP multicasts)      0 runts, 0 giants, 0 throttles      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored      0 watchdog, 515250 multicast, 0 pause input      0 input packets with dribble condition detected      1835485 packets output, 295200516 bytes, 0 underruns      0 output errors, 0 collisions, 0 interface resets      0 babbles, 0 late collision, 0 deferred      0 lost carrier, 0 no carrier, 0 PAUSE output      0 output buffer failures, 0 output buffers swapped out ... 5 minute input rate 2000 bits/sec, 3 packets/sec 5 minute output rate 3000 bits/sec, 3 packets/sec      1755859 packets input, 383580756 bytes, 0 no buffer      Received 515457 broadcasts (152599 IP multicasts)      0 runts, 0 giants, 0 throttles      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored      0 watchdog, 515457 multicast, 0 pause input      0 input packets with dribble condition detected      1836470 packets output, 295363529 bytes, 0 underruns      0 output errors, 0 collisions, 0 interface resets      0 babbles, 0 late collision, 0 deferred      0 lost carrier, 0 no carrier, 0 PAUSE output      0 output buffer failures, 0 output buffers swapped out Quick comparisons between these two outputs are as below. Can I determine how much bandwidth used in the network based on this info? Please advise. ITEMS BEFORE AFTER 5 MINUTES DIFFERENCE 5 minute input rate 3000 2000 -1000 5 minute output rate 4000 3000 -1000 packets input 1754961 1755859 898 bytes 383416613 383580756 164143 broadcasts 515250 515457 207 multicasts 152537 152599 62 packets output 1835485 1836470 985 bytes 295200516 295363529 163013 ... View more

Thanks Andrew for your prompt reply. Cacti require some configuration/installation. Is it possible to use available command on the Cisco Switch without using any 3 rd party monitoring tool? ... View more

Are you referring to port opening in Cisco ASA to permit certain traffic? I believe the following document should help. http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/acl_overview.html Adding a Standard Access List hostname(config)# access-list access_list_name standard {deny | permit} {any | ip_address mask} Example: hostname(config)# access-list OSPF standard permit 192.168.1.0 255.255.255.0 http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/acl_standard.html Adding an Extended Access List access-list access_list_name [line line_number] [extended] {deny | permit} protocol source_address mask [operator port] dest_address mask [operator port | icmp_type] [inactive] Example: hostname(config)# access-list ACL_IN extended permit ip any any http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/acl_extended.html Hope this will help. ... View more