cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
470
Views
0
Helpful
1
Replies

Cisco VPN Concentrator 3030 rebooted by itself

Nadeem Jan
Level 1
Level 1

Cisco VPN Concentrator 3030 rebooted by itself. Kindly review the logs below:

                6/25/2010 5:14:25 PM    vpn        Notice   47 06/25/2010 17:17:02.430 SEV=4 VRRP/12 RPT=2 Entering Master State for VRID 1 on Interface 2

                6/25/2010 5:14:25 PM    vpn        Notice   46 06/25/2010 17:17:02.430 SEV=4 VRRP/12 RPT=1 Entering Master State for VRID 1 on Interface 1

                6/25/2010 5:11:55 PM    vpn        Warning               2702522 06/25/2010 17:14:24.870 SEV=2 EVENT/42 RPT=385 Save to FTP server failed (99)

                6/25/2010 5:11:55 PM    vpn        Informational    2702521 06/25/2010 17:14:24.870 SEV=6 EVENT/46 RPT=385 Saved event log file log32366.txt (166971 bytes)

                6/25/2010 5:11:53 PM    vpn        Notice   2702518 06/25/2010 17:14:22.720 SEV=4 FTPD/40 RPT=383 FTPC login attempt failed

                6/25/2010 5:11:53 PM    vpn        Notice   2702520 06/25/2010 17:14:22.730 SEV=4 EVENT/39 RPT=386 Event Manager erased file(s) LOG32329.TXT when saving file: log32366.txt

                6/25/2010 5:11:53 PM    vpn        Notice   2702519 06/25/2010 17:14:22.720 SEV=4 EVENT/38 RPT=361 Event Manager detected flash FULL condition

                6/25/2010 5:11:53 PM    vpn        Notice   2702517 06/25/2010 17:14:22.720 SEV=4 FTPD/37 RPT=383 FTPC Command pending timeout

The device rebooted at 5:11 PM and was up at 5:14 PM.

1 Reply 1

edadios
Cisco Employee
Cisco Employee

It appears you have configured the VPN3030 to save log on wrap, this means it creates a file once the buffer is filled with logs, and is left in the flash, which you can view in the file management area. The flash has gotten full too.

In usual situation, the VPN3030 will have saved a crash file for crash situation before it reboots itself. Since flash is full, then there will not have been chance to do this.

If this is the first time this has ever happened, then the best way to move forwards it to clean up the files not needed in flash through file management. Delete any unknown, unwanted files, except for configuration left in there.

Also ensure the ftp server for logging is up and running, and use that for having your logs being saved. Disable the save log on wrap feature.

This way, if ever you have a reboot, hopefully, you get a crash file that can possibly be analyzed.

Based on what you have attached, all we can tell is that you had a none working ftp server for sending logs, and that your flash is full due to the save log on wrap function being enabled and you may have had so many files in flash that has been left unmanaged.

Regards,