06-25-2010 02:16 PM
Cisco VPN Concentrator 3030 rebooted by itself. Kindly review the logs below:
6/25/2010 5:14:25 PM vpn Notice 47 06/25/2010 17:17:02.430 SEV=4 VRRP/12 RPT=2 Entering Master State for VRID 1 on Interface 2
6/25/2010 5:14:25 PM vpn Notice 46 06/25/2010 17:17:02.430 SEV=4 VRRP/12 RPT=1 Entering Master State for VRID 1 on Interface 1
6/25/2010 5:11:55 PM vpn Warning 2702522 06/25/2010 17:14:24.870 SEV=2 EVENT/42 RPT=385 Save to FTP server failed (99)
6/25/2010 5:11:55 PM vpn Informational 2702521 06/25/2010 17:14:24.870 SEV=6 EVENT/46 RPT=385 Saved event log file log32366.txt (166971 bytes)
6/25/2010 5:11:53 PM vpn Notice 2702518 06/25/2010 17:14:22.720 SEV=4 FTPD/40 RPT=383 FTPC login attempt failed
6/25/2010 5:11:53 PM vpn Notice 2702520 06/25/2010 17:14:22.730 SEV=4 EVENT/39 RPT=386 Event Manager erased file(s) LOG32329.TXT when saving file: log32366.txt
6/25/2010 5:11:53 PM vpn Notice 2702519 06/25/2010 17:14:22.720 SEV=4 EVENT/38 RPT=361 Event Manager detected flash FULL condition
6/25/2010 5:11:53 PM vpn Notice 2702517 06/25/2010 17:14:22.720 SEV=4 FTPD/37 RPT=383 FTPC Command pending timeout
The device rebooted at 5:11 PM and was up at 5:14 PM.06-25-2010 08:12 PM
It appears you have configured the VPN3030 to save log on wrap, this means it creates a file once the buffer is filled with logs, and is left in the flash, which you can view in the file management area. The flash has gotten full too.
In usual situation, the VPN3030 will have saved a crash file for crash situation before it reboots itself. Since flash is full, then there will not have been chance to do this.
If this is the first time this has ever happened, then the best way to move forwards it to clean up the files not needed in flash through file management. Delete any unknown, unwanted files, except for configuration left in there.
Also ensure the ftp server for logging is up and running, and use that for having your logs being saved. Disable the save log on wrap feature.
This way, if ever you have a reboot, hopefully, you get a crash file that can possibly be analyzed.
Based on what you have attached, all we can tell is that you had a none working ftp server for sending logs, and that your flash is full due to the save log on wrap function being enabled and you may have had so many files in flash that has been left unmanaged.
Regards,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide