ASA interface utilsation peaks to 100 Mbps

Dear all,
We are using asa 5510 having Version 7.0(7).Some times its DMZ interface and Outside interface utilisation suddently rised to 100 Mbps and come down after 30 sec, That time the cpu utilisation its normal
CPU utilization for 5 seconds = 5%; 1 minute: 6%; 5 minutes: 6%
But internet connection and DMZ server accesing are not working.
Please help me for resolving the issue.
I will send the full config if reqired.
Thanks& Regards
Sihanu.N

In addition to suggestions from Jumora-
1. What servers/serivices you are running in DMZ? Make sure all the servers OS patched up to date.
2. 7.0(7) itself is very old IOS. Consider upgrade IOS to 8.0.x and still the memory utilization on ASA is low, go for 8.2.x.
3. Also, refer to below doc with some information on how to mitigate network attacks on ASAs, this may help you as well..
http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00809763ea.shtml
hth
MS

Similar Messages

  • How to Clear the Input errors in a Cisco ASA Interface?

    Hi Everyone,
                      My Expertise with Cisco ASA is Very less. I have observed Input errors in a Couple of Interfaces in Cisco ASA 5540 Firewall.  
    296867 input errors, 0 CRC, 0 frame, 296867 overrun, 0 ignored, 0 abort
    0 pause input, 0 resume input
    0 L2 decode drops
    102091138038 packets output, 96596756282996 bytes, 2683 underruns
    0 pause output, 0 resume output
    0 output errors, 0 collisions, 2 interface resets
    0 late collisions, 0 deferred
    52 input reset drops, 0 output reset drops, 0 tx hangs
    input queue (blocks free curr/low): hardware (255/230)
    output queue (blocks free curr/low): hardware (255/0)
    I need to Clear the Input errors on this particular Interface.
    Will Clear interface GigabitEthernet 0/0 will help?
    Thanks in Advance,
    Nanda

    Hi,
    Here is an example of using the command on my own ASA5505 firewall
    interface Ethernet0/0
    description WAN Access
    switchport access vlan 10
    ASA# sh interface Ethernet 0/0
    Interface Ethernet0/0 "", is up, line protocol is up
      Hardware is 88E6095, BW 100 Mbps, DLY 100 usec
            Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
            Input flow control is unsupported, output flow control is unsupported
            Description: WAN Access
            Available but not configured via nameif
            MAC address 0025.45f4.0a9a, MTU not set
            IP address unassigned
            9679 packets input, 6532697 bytes, 0 no buffer
            Received 2 broadcasts, 0 runts, 0 giants
            0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
            0 pause input, 0 resume input
            0 L2 decode drops
            0 switch ingress policy drops
            8421 packets output, 2202683 bytes, 0 underruns
            0 pause output, 0 resume output
            0 output errors, 0 collisions, 0 interface resets
            0 late collisions, 0 deferred
            0 rate limit drops
            0 switch egress policy drops
            0 input reset drops, 0 output reset drops
    ASA# clear interface Ethernet0/0
    ASA# sh interface Ethernet 0/0
    Interface Ethernet0/0 "", is up, line protocol is up
      Hardware is 88E6095, BW 100 Mbps, DLY 100 usec
            Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
            Input flow control is unsupported, output flow control is unsupported
            Description: WAN Access
            Available but not configured via nameif
            MAC address 0025.45f4.0a9a, MTU not set
            IP address unassigned
            0 packets input, 0 bytes, 0 no buffer
            Received 0 broadcasts, 0 runts, 0 giants
            0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
            0 pause input, 0 resume input
            0 L2 decode drops
            0 switch ingress policy drops
            0 packets output, 0 bytes, 0 underruns
            0 pause output, 0 resume output
            0 output errors, 0 collisions, 0 interface resets
            0 late collisions, 0 deferred
            0 rate limit drops
            0 switch egress policy drops
            0 input reset drops, 0 output reset drops
    interface Ethernet0/0
    description WAN Access
    switchport access vlan 10
    - Jouni

  • ASA interface name and nameif are different

    Hi Everyone,
    On one of ASA  i have this config say
    interface BCISCO
    nameif CISCO
    ip address 192.168.x.x 255.255.0.0 standby IP 192.168.x.x
    Need to understand why we have interface and nameif different here?
    Also when i try to access ASA  by ASDM to ASA  from internal network log shows
    built inbound TCP connection for ASA interface.
    So need to know whenever we access ASA  from internal network it will say inbound connection?
    Or there are some criteria that tells when connection is inbound to ASA?
    Thanks
    MAhesh

    Hi Jouni,
    yes it is in context mode
    72           2013/04/17 10:10:59.640 MST     192.168.100.12  Apr 17 2013 17:10:58: %ASA-6-302013: Built inbound TCP connection 11283929 for Net:192.168.100.17/62287 (192.168.100.17/62287) to identity:192.168.100.12/443 (192.168.100.12/443)
    71           2013/04/17 10:10:59.640 MST     192.168.100.12  Apr 17 2013 17:10:58: %ASA-6-106015: Deny TCP (no connection) from 192.168.100.17/62286 to 192.168.100.12/443 flags FIN ACK  on interface Net
    70           2013/04/17 10:10:59.640 MST     192.168.100.12  Apr 17 2013 17:10:58: %ASA-6-302014: Teardown TCP connection 11283774 for Net:192.168.100.17/62286 to identity:192.168.100.12/443 duration 0:00:03 bytes 381 TCP Reset-O
    69           2013/04/17 10:10:59.640 MST     192.168.100.12  Apr 17 2013 17:10:58: %ASA-6-605005: Login permitted from 192.168.100.17/62286 to Net:192.168.100.12/https for user "cisco"
    68           2013/04/17 10:10:56.343 MST     192.168.100.12  Apr 17 2013 17:10:55: %ASA-6-302013: Built inbound TCP connection 11283774 for Net:192.168.100.17/62286 (192.168.100.17/62286) to identity:192.168.100.12/443 (192.168.100.12/443)
    67           2013/04/17 10:10:56.343 MST     192.168.100.12  Apr 17 2013 17:10:55: %ASA-6-106015: Deny TCP (no connection) from 192.168.100.17/62285 to 192.168.100.12/443 flags FIN ACK  on interface Net
    66           2013/04/17 10:10:56.343 MST     192.168.100.12  Apr 17 2013 17:10:55: %ASA-6-302014: Teardown TCP connection 11283684 for Net:192.168.100.17/62285 to identity:192.168.100.12/443 duration 0:00:03 bytes 381 TCP Reset-O
    65           2013/04/17 10:10:56.343 MST     192.168.100.12  Apr 17 2013 17:10:55: %ASA-6-605005: Login permitted from 192.168.100.17/62285 to Net:192.168.100.12/https for user "cisco"
    64           2013/04/17 10:10:56.343 MST     192.168.100.12  Apr 17 2013 17:10:55: %ASA-6-606001: ASDM session number 0 from 192.168.100.17 started
    63           2013/04/17 10:10:56.343 MST     192.168.100.12  Apr 17 2013 17:10:55: %ASA-6-605005: Login permitted from 192.168.100.17/62284 to Net:192.168.100.12/https for user "cisco"
    62           2013/04/17 10:10:52.733 MST     192.168.100.12  Apr 17 2013 17:10:51: %ASA-6-302013: Built inbound TCP connection 11283684 for Net:192.168.100.17/62285 (192.168.100.17/62285) to identity:192.168.100.12/443 (192.168.100.12/443)
    61           2013/04/17 10:10:52.718 MST     192.168.100.12  Apr 17 2013 17:10:51: %ASA-6-302013: Built inbound TCP connection 11283681 for Net:192.168.100.17/62284 (192.168.100.17/62284) to identity:192.168.100.12/443 (192.168.100.12/443)
    60           2013/04/17 10:10:52.515 MST     192.168.100.12  Apr 17 2013 17:10:51: %ASA-6-106015: Deny TCP (no connection) from 192.168.100.17/62283 to 192.168.100.12/443 flags FIN ACK  on interface Net
    59           2013/04/17 10:10:52.515 MST     192.168.100.12  Apr 17 2013 17:10:51: %ASA-6-302014: Teardown TCP connection 11283636 for Net:192.168.100.17/62283 to identity:192.168.100.12/443 duration 0:00:02 bytes 806 TCP Reset-O
    58           2013/04/17 10:10:52.515 MST     192.168.100.12  Apr 17 2013 17:10:51: %ASA-6-605005: Login permitted from 192.168.100.17/62283 to Net:192.168.100.12/https for user "cisco"
    57           2013/04/17 10:10:52.358 MST     192.168.100.12  Apr 17 2013 17:10:51: %ASA-6-606003: ASDM logging session number 0 from 192.168.100.17 started
    56           2013/04/17 10:10:52.358 MST     192.168.100.12  Apr 17 2013 17:10:51: %ASA-6-605005: Login permitted from 192.168.100.17/62282 to Net:192.168.100.12/https for user "cisco"
    55           2013/04/17 10:10:50.374 MST     192.168.100.12  Apr 17 2013 17:10:49: %ASA-6-302013: Built inbound TCP connection 11283636 for Net:192.168.100.17/62283 (192.168.100.17/62283) to identity:192.168.100.12/443 (192.168.100.12/443)
    54           2013/04/17 10:10:50.140 MST     192.168.100.12  Apr 17 2013 17:10:49: %ASA-6-302013: Built inbound TCP connection 11283629 for Net:192.168.100.17/62282 (192.168.100.17/62282) to identity:192.168.100.12/443 (192.168.100.12/443)
    53           2013/04/17 10:10:50.108 MST     192.168.100.12  Apr 17 2013 17:10:49: %ASA-6-106015: Deny TCP (no connection) from 192.168.100.17/62281 to 192.168.100.12/443 flags FIN ACK  on interface Net
    52           2013/04/17 10:10:50.108 MST     192.168.100.12  Apr 17 2013 17:10:49: %ASA-6-302014: Teardown TCP connection 11283529 for Net:192.168.100.17/62281 to identity:192.168.100.12/443 duration 0:00:02 bytes 3107 TCP Reset-O
    51           2013/04/17 10:10:49.937 MST     192.168.100.12  Apr 17 2013 17:10:49: %ASA-6-605005: Login permitted from 192.168.100.17/62281 to Net:192.168.100.12/https for user "cisco"
    50           2013/04/17 10:10:47.640 MST     192.168.100.12  Apr 17 2013 17:10:46: %ASA-6-302013: Built inbound TCP connection 11283529 for Net:192.168.100.17/62281 (192.168.100.17/62281) to identity:192.168.100.12/443 (192.168.100.12/443)
    Where interface NET is ASA interface with IP 192.168.100.12
    192.168.100.17 is MY PC IP
    This is log while i access the ASA  by https.
    Can you please tell in logs why it has repeat logs for example
    ASDM logging session started  it has this line 2 times
    Thanks
    MAhesh

  • Drvice Manager /!\ next to NVIDIA nforce 10/100 Mbps Ethernet.Device cannot start Code 10

    Product Name and Number:
    HP Pavilion Dv9700
    s/n [Personal Information Removed]
    p/n FE395UA#ABA
    Operating System:
    Windows Vista 64bit
    Current Issue:
    When I open my Device Manager there is an /!\ next to NVIDIA nforce 10/100 Mbps Ethernet.
    When I open it's properties there is a message under the Device Status stating:
    "This device cannot start. (Code 10)"
    It gives me the option to "Search for solutions" which has proven unsuccessful.
    Also, I have the latest driver installed.
    This question was solved.
    View Solution.

    Hi,
    Right click the device itself and select Uninstall.  When this has completed, restart the notebook and let Windows re-discover the device and then check in Device Manager again.
    Regards,
    DP-K
    ****Click the White thumb to say thanks****
    ****Please mark Accept As Solution if it solves your problem****
    ****I don't work for HP****
    Microsoft MVP - Windows Experience

  • NVIDIA nForce 10/100 mbps Ethernet Updated driver

    I am trying to upgrade from Vista to Windows 7. I ran the upgrade advisor and it said that I need to download the updated driver for the NVIDIA nForce 10/100 mbps Ethernet 32bit driver to install after the installation. Where do I download it from and wich file do I download.

    Hi Marilyn, First things first. Before you upgrade to Windows 7, be sure that you update the BIOS to the latest level. All too often I have people update the operating system only to find out later that the BIOS is causing issues and the HP posted BIOS update will not run with the existing operating system.  You need a NVIDIA nFORCE chipset driver and I will post a link to that for you in just a moment.  However, don't upgrade your PC until you donwnload the drivers and copy them to external media.  This is one of the drivers needed. It's one of the latest nFORCE drivers.

  • Changing the speed of Ethernet Link of the PC to 10 or 100 MBPS

    Hello,
    I need to change Ethernet Speed of the PC programmatically that is change the Speed to either 10 or 100 mbps.
    Is it possible, If yes , then please let me know the procedure. 
    Or atleast I should be able to read the PC Ethernet speed in LabVIEW.
    Thanks
    Solved!
    Go to Solution.

    You dont need .net 4.0 for this (.net 2.0 is good enough) or anything else installed.
    I have attached a VI with the control.
    PS: If you need to load .net 4.0 assemblies in to LabVIEW, you need to follow instructions in this link:
    http://digital.ni.com/public.nsf/allkb/32B0BA28A72AA87D8625782600737DE9
    Beginner? Try LabVIEW Basics
    Sharing bits of code? Try Snippets or LAVA Code Capture Tool
    Have you tried Quick Drop?, Visit QD Community.
    Attachments:
    network info.vi ‏7 KB

  • Upgrade 10 Mbps connection to 100 Mbps

    I replaced my old PC (pentium 4) with a new PC (quad core) in my network (Xbox360 (wired), Wii (wireless), Laptop (wireless) and this PC (wired) on a WRTP54G Voip Router). With my old PC I had no problems, but now I get the message network cable not connected on my new PC. The solution is to reduce my speed from the 1GB Nvidia LAN to 10Mbps full duplex instead of automatic (100 Mbps didn't work). Now it connects to my router, network and internet with 10 Mbps, but this connection is too slow for my network. When I connect my laptop directly with the PC I will get a 100 Mbps connection. And when I connect my Laptop to the router with the same cable as the PC, I also get a 100 Mbps connection.
    Can someone explain the difference between half duplex and full duplex speed?
    Is there a solution to get the connection to 100 Mbps?
    Message Edited by 2J on 07-07-2008 06:03 AM

    Full Duplex = your NIC can send and receive data at the same time. A telephone is an example of full duplex, both parties can talk/here at the same time.
    Half Duplex = your NIC will either send or receive data but will not do both at the same time. A walkie talkie is an example of Half-Duplex, only one person can transmit at a time.
    Sorry I do not deal with the gaming part at all, so I do not have a solution, however if I come across an answer I will certainly post it.
    Good Luck,
    Ttech 

  • Hyper-V host 1Gbps NIC negotiated at 100 Mbps when used for Virtual Switch

    Hi all,
    Hoping someone can shed some light on this one as I’ve been trying to hunt down a solution for a week now.
    Setup
    HP ProLiant ML350 G6 with HP NC326i PCIe Dual Port Gigabit Server Adapter network adapters
    Windows Server 2008 R2 Core with only the Hyper-V role installed
    SBS 2011 installed as guest
    Port 1 on Dual port NIC configured a physical port or management of Host only
    Port 2 on Dual port NIC configured for use as an External Virtual Switch port for use by guests only
    The issue is that the physical port connected to the Hyper-V virtual Switch negotiates with the network switch at 100 Mbps full duplex while the management port negotiates at 1 Gbps full duplex. All clients (brand new HP Z210 workstations) also negotiate
    with the switch at 1 Gbps.
    During file copies and backups the network port connected to the Virtual Switch does not show any errors and transfers data at close to 100 Mbps. File transfers between individual workstations and workstations and server core again show no errors, but transfers
    at 1 Gbps.
    One observation is that the physical NIC connected to the Virtual Switch does not negotiate with the switch until the Hyper-V service has started (I’m guessing) the virtual switch.
    Also, while staging the server the Hyper-V virtual switch created when the server was connected to a 100 Mbps switch not a 1Gbps switch as it is in production.
    Has anyone encountered anything similar and if so how did you get the physical NIC to operate at full capabilities? Any assistance would be greatly appreciated.

    Hi,
    I purchased one gigabyte switch for home used several days ago, I just performed some copy tests between virtual machines and physical machines(not
    Hyper-V host machine)in the same LAN, the average copy speed is 350Mb/s.
    Best Regards,
    Vincent Hu

  • HA 8510 with 100 Mbps on the Redundant (HA) Port?

    Hi all,
    I need to do some HA setup between two Cisco 8510 controllers.
    I only have the opportunity to connect the two redundant ports with 100 mbps switch link. Wil it work, or MUST it be gigabit connection?
    The two 8510 will replace 2 x 5508, which today is used and is connected via 100Mb switch link.
    By the way, what will happen to the HA WLC if its just the link between the 2 WLC that goes down. Will it start being active, although the primary actually still is active and it's just a redundant link that has gone down?
    Regards. F

    No. It must be 100/1000 or maby even 10/100/1000.
    This is the setup. I plan to replace the 5508 with 2 x 8510 and hope to use the same Access-link.

  • ITunes 11 CPU keeps peaking at 100%

    Most operations in iTunes are resulting in CPU peaks of 100%. This makes iTunes agonisingly slow to use. Can anyone suggest any adjustments to make it less CPU-hungry?

    I was having the same problem.  I have a brand new Macbook Pro Retina 15" 2.4GHz i7. I called support 3 times to try and work it out.  We tried re-installing iTunes and a host of other things. It came down to there being a problem with the library.  I had imported it from an earlier version of iTunes from an older mac  (Where it worked fine.)  In the end I just had to re-load all my songs into the library.  This is no small feat as I have around 185K songs in over 1TB in my music library. 
    The problems i was having were-
    -sluggish performance, gap between song playback, slow searching, slow quitting (Or not quitting at all until a force quit)  It was essentially unusable
    -using 100% or more of CPU.
    -not being able to remove songs from the library.
    - having multiple temp files appearing in the music library folder
    I ended up creating a new library in the music folder in the sidebar. (Its default location).   I keep my files on an external HD, and set up the prefs to keep the music folder there.  You will want to export your playlists somewhere where you can find them and import them after you build the new library.  As long as your files don't move, iTunes should be able to load everything back into the playlists.
       Once everything was set I went to iTunes/Files/Add to Library and manually selected a chunk of my library, then let it process.  I would take a letter or 2  at a time so I could redo if necessary.  (such as bands starting with" A", starting with "B" etc).  normally it would take 3-4 hours per letter.  I would let it do its thing, then quit and restart itunes, make sure it was playing, quitting etc as it should.  It took me 4 days to get the entire library re-entered, then re-loaded my playlists, and now it seems to be working just fine. 
    Obviously this was a pain as it took 4 days to re-do, but there was something about the old library that itunes just couldn't digest.  Now itunes runs at around 2% CPU when playing, maybe 20% when searching etc.  it will quickly play another selection when chosen.  just like it is supposed to. 
    it's the slow way to fix it, but it was the only thing that has worked for me.  I finished this 2 days ago, so time will tell if the problem crops up again, but for now averything seems cool.

  • 100 Mbps bandwidth between 2 location over Ethernet which router model is suitable?

    Hi,
    We want use 100 Mbps bandwidth between 2 location over Ethernet which router model is suitable?
    Sanjay Nalawade.

    Hello Sanjay,
    I'm afraid the question is too generic to be addressed in a forum post, since the answer may depend on several variables.
    My suggestion is to contact your Cisco Account Manager and ask for the assistance of a System Engineer who can make a project for your needs.
    Regards,
    Antonio

  • NVIDIA NFORCE 10/100 Mbps Ethernet Upgrade Drivers

    I am doing a Clean Install for upgrade with Win 7 Pro 64-bit OEM. I ran the Win 7 Upgrade Advisor and need advice on these items, on what I need to do for upgrade:
    NVIDIA NFORCE 10/100 Mbps ethernet
    NVIDIA GeForce GT630
    NVIDIA High Definition Audio
    NVIDIA nForce System Management Controller
    Are these upgradeable & will work with Win 7 Pro 64bit?
    This question was solved.
    View Solution.

    Hi,
    You should be able to find the Windows 7 drivers here.  Download the drivers to external media before doing the upgrade.
    Backup your PC and be sure to create the external HP recovery media.
    HP DV9700, t9300, Nvidia 8600, 4GB, Crucial C300 128GB SSD
    HP Photosmart Premium C309G, HP Photosmart 6520
    HP Touchpad, HP Chromebook 11
    Custom i7-4770k,Z-87, 8GB, Vertex 3 SSD, Samsung EVO SSD, Corsair HX650,GTX 760
    Custom i7-4790k,Z-97, 16GB, Vertex 3 SSD, Plextor M.2 SSD, Samsung EVO SSD, Corsair HX650, GTX 660TI
    Windows 7/8 UEFI/Legacy mode, MBR/GPT

  • 100 Mbps support on SFP GLC-T

    Does the GLC-T SFP installed on Cat-6500 WS-X6724-SFP module support 100 Mbps speed ?

    It depends on the hardware the SFP is installed in. Ss you have already discovered in a 3560 (or 3750) the GLC-T SFP can operate at 10, 100 or 1000Mbps. If the GLC-T was installed in a Catalyst 6500 6748-SFP or a 6724-SFP module it will only operate at 1000Mbps.
    I haven't seen a specific list showing the operating speeds of the GLC-T in different platforms. If you look at the documentation for the specific hardware you have you should see whether it supports 10/100/1000 or just 1000BaseT
    3750 details:
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225see/scg/swint.htm#wp1028308
    HTH
    Andy

  • 100 Mbps MPLS but service provider handing of gig fiber?

    Our service provider is providing 100 Mbps MPLS service to one of our remote sites that will accept the handoff via a gig fiber connection into our 3845 router using a GLC-SX-MM SMF tranciever. I'm assuming that I will have to shape the ingress traffic to 100 Mbps. Can anybody send me a link on CCO that explains how to do this? And am I correct that I will have to shape the ingress traffic? Thanks, John

    Hi,
    Even though you have a fiber coming into your remote location your service provider would have rate limited it appropriately in and out from his perspective to 100MB as per the BW sold to you.
    So from your question there should be no need to implement any policing in or out on your router towards the service provider.
    HTH-Cheers,
    Swaroop

  • Time Capsule Gigabit Ports operating at 100 Mbps (no 1000 Mbps speed)

    Hello!
    I'm a Verizon Fios user and recently upgraded to Quantum (150 Mbps up/65 down).
    My network:
    Verizon modem/router with gigabit Ethernet wired to WAN port on TC (3rd Gen).
    Multiple AEX extending the network throughout the house
    VZ router is the DHCP controller, TC set to bridge mode
    For some reason, the port controller on the VZ router is only working at 100 Mbps for whatever port is connected to the TC. I'm certain my TC has gigabit ports (as advertised--they all do, right?) and therefore can't figure out why I can't get the two pieces to operate at gigabit speed (for reference, the VZ modem has indicator lights for 10/100/1000 speeds and the same information is displayed in the router settings).
    The VZ configuration page allows me to manually select port speeds (10 half/full duplex, 100 half/full, 1000 full) or allow it to AUTO select. On auto, the port reports 100 Mbps full duplex with the TC. I tried manually selecting 1000 full duplex, at which point the port goes dark (for lack of a better term--no lights, no activity between the two).
    I'm certain the gigabit functionality exists on the VZ router side: if I plug in my early 2011 MB Pro directly to the port, I get gigabit speeds. I've also tried wiring from VZ router to TC LAN port, with the same result.
    Definitely frustrating: my wired connections are artificially reducing throughput for wireless! Any suggestions would be greatly appreciated: is there a setting I'm missing in Airport Utility?
    Thanks!!
    --Gus

    I'm certain the gigabit functionality exists on the VZ router side: if I plug in my early 2011 MB Pro directly to the port, I get gigabit speeds. I've also tried wiring from VZ router to TC LAN port, with the same result.
    Hi Gus
    Let me just clarify the above statement.. wiring VZ to the TC LAN port got the same result as the WAN port.. that is how I am guessing you mean it. Not the same result as the MBP.. which worked fine.. !!
    I do have an answer to slow ethernet speed but it is not a setting in the TC.. TC lacks most settings or control.. although I would do a factory reset just to be sure. You can also run it in double NAT for a test. The WAN port does have speed controls.. but you can only get to them from v5 utility..
    That would be worthwhile to check.. I know you don't want double NAT but it is just to see what happens.
    Otherwise your Gen3 A1355 is suffering capacitor deterioration on the 1.8v line.
    I did fix it on one TC.. it is a rare problem. Normally the caps just die.
    https://sites.google.com/site/lapastenague/a-deconstruction-of-routers-and-modem s/apple-time-capsule-repair/new-issue-with-a1355-gen-3-tc
    I fixed it by soldering a standard low ESR capacitor to the supply..
    Test the TC cold, as the ethernet seemed to work ok until it heated up.
    Good luck with that one.
    How to load 5.6 into ML.
    1. Download 5.6 for Lion.
    http://support.apple.com/kb/DL1482
    Click to open the dmg but do not attempt to install the pkg.. it won't work anyway.
    2. Download and install unpkg.
    http://www.timdoug.com/unpkg/
    Run unpkg on the desktop.. it is very simple.. drag the AirPortUtility56.pkg file over to unpkg.. and it will create a new directory of the same name on the desktop.. drill down.. applications utilities .. there lo and behold is Airport utility 5.6 .. drag it to your main utilities directory or just run it from current location.
    You cannot uninstall 6.1 (now 6.2 if you updated) so don't try.. and you cannot or should not run them both at the same time.. so just ignore the toyland version.. the plastic hammer.. and start using 5.6.. a real tool.
    For screen shots see this post.
    https://discussions.apple.com/thread/4668746?tstart=0

Maybe you are looking for

  • Pages not working after 10.6.2 update - SFWordProcessing plugin missing

    Can someone suggest a solution? After updating both iWorks and then applying the 10.6.2 update, Pages simply will not load. This is the header of the error message: Process: Pages [156] Path: /Applications/iWork '09/Pages.app/Contents/MacOS/Pages Ide

  • Styling XML with XSLT Problem with javax.xml.transform???

    I have been trying to make a transformation and seem to be having a problem in that javax.xml.transform can not be found while using jdk1.3....If I use jdk1.4, there is no problem.... Does anyone know how I can get things to work using jdk1.3??? (Des

  • Black Line in Body of OSX Leopard Mail Email - Resulting from Form Distribution

    I have created a form and am sending it via email to be completed.  In Snow Leopard Mail the resultant email has the attached form and the instructions are hidden by a black band running across the email page.  Any suggestions as to what might be goi

  • List of Inventory Differences (MI20)

    Hi SAP Sifu, actually i've one problem here, how to config this report MI20 to have negative value in different qty, ie Book Quantity : 157 Qty Counted : 133 (Book quantity - Qty Counted = Different Qty / Different Amount) 157-133= -24/378 In the sta

  • Getting runtime error

    hi all i am getting runtime error in this report can any one help me out. Include prg is attached down. REPORT  ZVBLOCKED. INCLUDE ZVBLOCKEDTOP. REPID = SY-REPID. PERFORM GET_DATA. PERFORM APPEND_FIELD. CALL FUNCTION 'REUSE_ALV_BLOCK_LIST_INIT'   EXP