Recent content by Staticfactory

Thanks for your reply Richard... that would certainly be a good place to look if we were running QoS on either of the ASAs in question. I was also thinking that it could be related to MTU but it's an issue that just started to appear across the entire subnet. Fortunately for me, the issue...

I have an L2L Tunnel between an ASA5540 and an ASA5505 that has been working correctly for months. No updates have taken place, but I'm now seeing about 50% packet loss between the sites. The isakmp/ipsec tunnels are active and are not displaying any errors/drops/discards. I don't see any...

We wondered if maybe it was an overflow issue but can't find anything that would lead us to believe it, or indicate the source of the problem. The only thing that these switches have in common besides being 4948s is that they are all server switches, and it's most HP servers behind them (but not...

Wish I could, but we don't have TAC support on these switches (or I wouldn't be bugging you guys) ;) Wasn't my idea to not have the coverage either...

No, they reboot at different intervals, usually a few weeks to a few months apart. They are also plugged into different rack power strips on one massive UPS (along with other switch models that have no odd behavior). Just doing some investigating and it appears to create a dump, but I'm not...

Thanks for the reply brianinms -- definitely a good place to start. We have a group of about 16 switches that are attached to the same UPS and (so far) it's only the 4948-10GEs that reboot themselves at seemingly random intervals. Solarwinds would also report the node as down/up in the case of...

We're encountering a very strange problem with Catalyst 4948-10GE switches that are rebooting themselves without cause (that we can find). Nothing appears in syslog or any other error logs but Solarwinds does see them reboot and the uptime reflects the reboot as well. Has anyone ever had this...

It's landing on the DefaultL2LGroup when it establishes IKE phase 1 (and it appears to like the pre-shared keys) so I'm a little confused.

I should also mention that I'm not even sure if the 3002 is capable of tunneling L2L... we had it connect correctly using an RA configuration.

The NAT Bindings for the tunnel (should there be a NAT device between the 2 end-points) in order to successfully traverse the NAT.

We are trying to get an old Cisco 3002 hardware VPN client to connect site-to-site with our central ASA5540 running the latest IOS version. The client and the ASA successfully complete the IKE Phase 1 negotiations using a pre-shared key, but then the VPN device appears to stop responding and...

I've had issues when my local ip pool subnet overlaps with the inside subnet. Try using 192.168.2.xxx instead.

By scrubbed config, he means to put X's in place of the middle 2 octets of any public addresses in your config, thus eliminating any security concerns. Without being able to see the entire configuration it's often very difficult to pin-point configuration issues.

OWA as in Outlook Web Access? What kind of "performance optimization" are you looking for?

You need to use the tunnel-group name and associated pre-shared key as the "Group Authentication" information in the Cisco VPN client. Once you connect to the host using this information, it should prompt you for the local username and password that you configured.