ASA5520 9.0(1) basic config

Folks,
I have an asa5520 runing 9.0 that I want to setup for simple NAT, i,e 4.3.2.1/30 on the outside 192.168.1.1/24 on the inside with dynamic NAT outbound. The new IOS has thrown me for a loop.. I have everything working except the NAT. Can somebody do an SDM screen shot of the Dynamic NAT entry? Even if the IP's are different, I can figure it out...
Also, is there a way to make the unused ethernet interfaces gig0/2 and 0/3 into switch ports on the internal net?
(or VLAN like you could do on the 5505)?

Hello,
This Guide should help you:
http://www.cisco.com/en/US/docs/security/asa/asa83/asdm63/configuration_guide/nat_objects.html#wp1074591
for internet access, look at "Configuring Dynamic PAT (Hide)" Section.
Regards,
Felipe.

Similar Messages

Help with a 6RD Basic config!

Hi there,
I am trying to start a basic setup to demonstrate 6RD and I am in trouble for a few hours. I just found an excellent pdf on this site and I tried to use it to start something using the same config but I did not have any success for the ulimated "ping" test !
I am using a very simple and basci setup using a:
        CE ------ IP Router --------BR
This is my relevant config for the CE :
interface Loopback0
ip address 10.0.0.10 255.255.255.255
interface Tunnel0
no ip address
no ip redirects
ipv6 address 2001:DB80:A0A:100::/128
ipv6 rip fred enable
tunnel source Loopback0
tunnel mode ipv6ip 6rd
tunnel 6rd ipv4 prefix-len 16
tunnel 6rd prefix 2001:DB80::/32
tunnel 6rd br 10.0.0.1
ipv6 route 2001:DB80::/32 Tunnel0
And at the BR I got the following relevant info:
interface Tunnel0
no ip address
no ip redirects
tunnel source Loopback0
tunnel mode ipv6ip 6rd
tunnel 6rd ipv4 prefix-len 16
tunnel 6rd prefix 2001:DB80::/32
This is my version:
P1R3#sh ver
Cisco IOS Software, 1841 Software (C1841-ADVIPSERVICESK9-M), Version 15.1(3)T2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Wed 10-Aug-11 03:46 by prod_rel_team
More info about tunnels and intf:
P1R3#sh tunn 6rd
Interface Tunnel0:
Tunnel Source: 10.0.0.10
6RD: Operational, V6 Prefix: 2001:DB80::/32
       V4 Prefix, Length: 16, Value: 10.0.0.0
       V4 Suffix, Length: 0, Value: 0.0.0.0
       Border Relay address: 10.0.0.1
General Prefix: 2001:DB80:A::/48
P1R3#sh ipv6int tu0
            ^
% Invalid input detected at '^' marker.
P1R3#sh ipv6i nt tu0
            ^
% Invalid input detected at '^' marker.
P1R3#sh ipv6i nt tu0
*Oct 30 22:06:13.266: Tunnel0 count tx, adding 20 encap bytes
P1R3#sh ipv6 int tu0
Tunnel0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A00:A
No Virtual link-local address(es):
Global unicast address(es):
    2001:DB80:A0A:100::, subnet is 2001:DB80:A0A:100::/128
Joined group address(es):
    FF02::1
    FF02::2
    FF02::9
    FF02::1:FF00:0
    FF02::1:FF00:A
MTU is 1480 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
Post_Encap features: Tunnel 6RD
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 30000)
Hosts use stateless autoconfig for addresses.
P1R3#
1R3#
*Oct 30 22:08:40.146: Tunnel0 count tx, adding 20 encap bytes
P1R3#show ipv6 route
IPv6 Routing Table - default - 5 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP
       I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
       D - EIGRP, EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
C   2001:DB8:BAD:F00D::/64 [0/0]
     via FastEthernet0/0, directly connected
L   2001:DB8:BAD:F00D::1/128 [0/0]
     via FastEthernet0/0, receive
S   2001:DB80::/32 [1/0]
     via Tunnel0, directly connected
LC 2001:DB80:A0A:100::/128 [0/0]
     via Tunnel0, receive
L   FF00::/8 [0/0]
     via Null0, receive
P1R3#
*Oct 30 22:09:07.226: Tunnel0 count tx, adding 20 encap bytes
P1R3#
P1R2#show ipv6 route
IPv6 Routing Table - default - 5 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP
       I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
       D - EIGRP, EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
LC 2001:DB8:CAFE:1::1:2/128 [0/0]
     via Loopback0, receive
C   2001:DB80:6400:FECA::/64 [0/0]
     via Loopback99, directly connected
L   2001:DB80:6400:FECA:CACA::1/128 [0/0]
     via Loopback99, receive
LC 2020:1:1:1::1/128 [0/0]
     via Loopback99, receive
L   FF00::/8 [0/0]
     via Null0, receive
P1R2#
Sending on one side:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2020:1:1:1::1, timeout is 2 seconds:
Packet sent with a source address of 2001:DB8:BAD:F00D::1
*Oct 30 22:12:28.318: Tunnel0 count tx, adding 20 encap bytes
*Oct 30 22:12:28.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:30.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:32.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:34.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:36.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
Success rate is 0 percent (0/5)
P1R3#
Does not show up on the other side:
Invalid input detected at '^' marker.
P1R2#deb ipv6 icmp
ICMP Packet debugging is on
P1R2#
Any idea of something missing or wrong ?
Setups can be accessed remotely...
TIA
Fred

thank you harold!
actually I did this lab after a few nights and days with almost no sleep to prepare a nice new training I have developped from an existing CISCO training
The first sessions are for you (cisco) ;-) and I wanted it to be perfect...
I was sure to have done some BIG mistakes that I would have discover after a good night sleep ;-)
The first session is currently running this week.
I am going to try again tonight so maybe I will show this to my students tomorrow
http://www.fastlaneus.com/course/fl-ipv6spse

Solman_Setup basic config - No free number range available

Dear Solution manager Gurus -
We have recently upgraded our Solution manager to 7.1 SP 11 (latest).
While doing
Solman Basic configuration in Solman_setup.
in Step 7- Maintain Systems in iBase, Step "Maintain number range for material", we get the error as "No free number range available.".
We have reviewed SAP note 1741109 - ITSM 7.1 - Generation of IBase Components is not working and followed all the steps.
However the error we are getting is "No Free number range available" is not mentioned anywhere in the above note.
I have also created OSS message for SAP to look at, no reply from SAP yet.
Please advise.
Thanks
-Lee

Hi Swarali
Please call the T_CODE- /nCOMC_MATERIALID_ALL
Select LMDB--> Display Intervals--> Delete the intervals marked with check box--> "External"
Do the same for CMDB.
Then change the intervals in order for LMDB- ....7100000000.--> .........7199...
CMDB---> ..........72000......--> .......7299......
And then follow note: 1741109-- Here the activity "Maintain Number Range for Material" will be explained detailed:
For Database (LMDB), number range 00000000007300000000 to 00000000007399999999
For Host (LMDB), number range 00000000007400000000 to 00000000007499999999
Hope this helps!!
Best Regards
Saurabh

NWA Basic Config Error

Hi!
I'm getting this error while trying to execute the template 3: NWA System: Basic configuration, from Netweaver administrator (2004s SP16):
Creating a connection to the SLD Import not successful Element 'SAPConfigLib.J2E.Unclassified.createSLDconnection':ClassLoader not found sap.com/tclmctcutilbasic_ear
The same occurs if I try to execute 1: SLD system: Configure and activate SLD.
The SLD is up and running in http://localhost:50200/sld .
Any help?
Regards,
Flavio Rasseli

When this happens out of warranty, HP will not "step up." But we don't them. Read this for next time...
Code Purple is a problem exclusive to HP's, the easiest solution is to avoid them. However, it's already too late for you as it was for me. Basically it's an attempt to force you to pay them to service or upgrade your PC, or if you didn't learn the first time, buy another. Here is the most concise answer I found, tried to translate into plain english.
***PLAIN ENGLISH QUICK AND EASY FIX FOR ALL SYSTEMS****
***Windows 7 code purple or Windows Vista code purple***
With the code purple error on the screen, press shift+f10 (the shift key and the F10 key (at the top of the keyboard) at the same time) to open a little screen called a command prompt. (So, you get a little black screen with white text that says something about your Windows verison first and a little ways down you'll see "C:\>". It's all ready for you to start typing.)
Type the following line, just as you see it here...
notepad C:\hp\bin\checkdmi\checkdmi.cmd
so it will look like this
C:\>notepad C:\hp\bin\checkdmi\checkdmi.cmd
Press Enter.
You will see the text for the file listed in a window using a simple text editor.
Go to the beginning of the text. Press enter to make a space. Type this...
goto cleanup
So, whatever comes after, the first line looks like this...
goto cleanup
Save the file and exit notepad and restart your PC. You are good to go.
Please repost like crazy.

[NEWBIE] basic config.xml

Hi Experts,
I'm just really new to the ISA framework and I have a simple question.
I have the following below in config.xml:
          <action path="/b2b/init" type="com.sap.isa.core.InitAction" validate="false">
               <forward name="success" path="/b2b/coreinit.do"/>
               <forward name="sessionLogging" path="/admin/sessionLogging.do"/>
               <forward name="heartbeat" path="/admin/heartbeat.jsp"/>
          </action>
          <action path="/b2b/coreinit" type="com.sap.isa.isacore.action.IsaCoreInitAction">
               <forward name="success" path="/user/performLogin.do"/>
               <forward name="darklogin" path="/user/performLogin.do"/>
          </action>
Can you please tell me what happens here?
If I go to the URL: https://localhost:50001/myapp/b2b/init.do
1. How will InitAction know if it goes to success or suessionLogging or heartbeat?
2. How will IsaCoreInitAction know if it goes to success or darklogin?
3. Where can I find the action of /user/performLogin.do ?
Thank you sirs/madams.
Edited by: jemaru on Mar 1, 2010 9:16 PM

Hi Jemaru,
If you are using NWDS then try to open code by pressing 3 keys together CTRLSHIFTT it will open Open Type box and here you can type InitAction or IsaCoreInitAction and open source file.
You can put break point and run Application in debug mode. to see how control is passing in each class.
Answer for your questions...
1. How will InitAction know if it goes to success or suessionLogging or heartbeat?
Open InitAction in NWDS put break point inside first line of perform method and then run debug and run application on your local. It will give you an idea how process happens line by line. There are so if and else so it depends on your XCM settings.
2. How will IsaCoreInitAction know if it goes to success or darklogin?
Do same as described for 1. Here put break point in doPerform method in IsaCoreInitAction
3. Where can I find the action of /user/performLogin.do ?
You can open project crmtcwebuser~sap.com in NWDS. Open WEB_INF folder. You will find config_user.xml file.
You will able to find below lines.

          <action path="/performLogin" forward="/relogin/setcookie.do?forward=success"/>
          <action path="/performLogoff" forward="/logoff.do"/>
ISA application use many other configuration XML file other then config.xml
You can find all those other XML files name in web.xml file.
Below are lines from web.xml file
<init-param>
            <param-name>config</param-name>
            <param-value>/WEB-INF/config.xml,/WEB-INF/xcmadmin-config.xml,/WEB-INF/ccmsims-config.xml,/WEB-INF/ipc-config.xml,/ipc/customer/config.xml,/WEB-INF/config_lwc_b2b.xml,/WEB-INF/scheduler-config.xml,/WEB-INF/ipcpricing-config.xml</param-value>
        </init-param>
        <init-param>
            <param-name>config/user</param-name>
            <param-value>/WEB-INF/config_user.xml</param-value>
        </init-param>
        <init-param>
            <param-name>config/dealerlocator</param-name>
            <param-value>/WEB-INF/config_dealerlocator.xml</param-value>
        </init-param>
        <init-param>
            <param-name>initconfig</param-name>
            <param-value>/WEB-INF/xcm/sap/system/init-config.xml</param-value>
        </init-param>
I hope this will help you.
eCommerce Developer

ASA5545x basic config template Best Practice

Hello
I am in the process of making some major WAN/Data Center network changes. As part of that, i am installing
dual ASA5545x's in each DC (2) for redundancy. Please advise on what is best practice for basic configuration on these devices.

If you want a good overview guide, there's a Cisco Validated Design (CVD) that covers an ASA setup. See this link.
At the same time, firewall configuration and what you setup depends a lot on your policy and what you're using the firewall for - Internet edge, DMZ, milti-tenant, inter-department, remote access VPN (client-based and clientless), site to site VPN, etc.
Each has numerous options and no prescriptive guide covers them all.

Aironet 1231G basic config question

Hi, we have an Aironet 1231G with IOS 12.3(8) and we have enabled DHCP service with two VLANs, one for management (VLAN1) and another one (VLAN 2) for user IP addressing. We do everything by the config guide book (subinterfaces on both dot11 and FastEthernet etc.) however we want DHCP enabled server on AP to allocate IP addresses to clients on VLAN 2 once requested.
We have noticed that all is fine if we want AP to allocate IPs on management VLAN 1, it does not work when we try to do it for VLAN 2; however we want different VLAN for management and different VLAN for users.
We have also tried on sub-int F0.2 to configure an IP address with no success though since DHCP does NOT allocate IP addresses on VLAN 2, is there some sort of config trick that we are missing or is it something that can not be done on AP? Please note that we have it working with DHCP server enabled on a router and connected via sub-int to AP, in this case air interface dot11 allocates succesfully IP addressing for user VLAN 2.
Any ideas, any help will be really appreciated,
Thanks a lot
Tony

change the dhcp scope and the interface vlan2 ip addressing it will allocate an address in a new range.

Problems with basic config ASA 5505

new ASA 5505, tying to configure it, inside LAN is 192.168.2.x/23 (255.255.254.0). I connect to ASA5505 using ASDM ok when it is on the default 192.168.1.1. I change the ip on 'inside' vlan, and of course lose connection to it. It apparently doesn't totally save the info, though, because I can't connect to it using the new info. So, I made a vlan3, using port 0/2, using ip of 192.168.2.x/23 while connected to 192.168.1.1. Then I changed ip of my computer from 192.168.1.x to 192.168.2.x/23 but cannot even ping that port/ip on the ASA while connected to port 0/2. I switched computer back, and connected again to 192.168.1.1 and it does appear that my new settings for 0/2 are still there, so I'm not sure how to proceed? Thanks.

Sorry, had family emergency and was off for 2 weeks, then when came back had other work to catch up on.
Thanks for the reply. It would appear that the command you provided sets it back to default settings. I was able to set it back to default settings, but am now unsure as how to proceed to get the "inside" set to 192.168.2.0/23 and still be able to access it.
If I go back in, I can change "inside" to 192.168.2.1/23, but lose connection, so it "sort of" gets saved, in the respect that sometimes I can ping it, sometimes not. But can never connect to it.
Thanks, and sorry again about the delay.

Whats better: basic config. mbp + 23" display, or 17" mbp

I am planning on getting a MacBook Pro soon, although I don't know whats better: to get a 15 inch with a 23 inch display or a 17 inch macbook pro without the display.

Depends on your needs. If you need a big screen on the road and you travel frequently you need the 17". I travel a lot, but the screen real estate is mostly of value at home, where I keep both the MBP and 23" ACD open. Most of my travel is overnight--I am rarely gone for more than 2 days. If I needed to be gone for weeks at a time, the extra real estate would really come in handy.
I mostly use Office-style apps. If you do other things, like video, and you are on the road for weeks at a time, I suspect the 17" hi-res is the way to go. Otherwise, the 23" ACD is awesome at home!

2504 basic config help.

Hi,
I'm new to Cisco wireless controllers. Have great expirence with both Ruckus and HP WLC's but I like the Cisco hardware much better so I'm about to swap to this.
We have a 2504 controller and a number of 2602 AP's.
I have a unmanaged edge network meaning no vlans segmenting is possible at the port of the AP.
I need 2 SSID's:
WLAN1
WLAN2
WLAN1 should be bridged onto/out of the AP port.
WLAN2 should be tunneled/transported to the controller and out on either a specific port or vlan (The DMZ vlan)
I can't seem to figure out how to do this. I have looked at the Guest anchor feature but that doesn't quite do what I need since I only have this one controller.
Hope someone can explain (not nessesarily in detail) how to do this.
Thanks in advance.

First of all. Thanks for the quick reply's. Flexconnect seems like just the thing I need.
Just to clerify: My DMZ vlan 10 has subnet 10.10.1.0/24. Theres a DHCP server in this DMZ serving wired clients.
So when I tunnel WLAN2 to the controller and out vlan 10 will the WLAN2 clients be bridged onto 10.10.1.0/24 subnet or will I need to have a different subnet for the wireless clients (and thereby have the 2504 route between)? I prefer a bridge if possible to keep it simple.
Additional: Will DHCP traverse this bridge or will I need to setup some kind of DHCP relay on the controller?
Thanks in advance.

Basic Desktop and X-Over configs

Hello,
I was wondering if anyone could suggest some good links/docs for examples on configs for Desktops and Cross Overs between switches.
We're currently running 2950's in a school/lab environment.
I've seen some of the smartport macro's built in the IOS, but our network is currently a flat network and I'm trying to learn better configurations for new switch deployments.
Our basic config as it stands with only vlan 1
service password-encryption
no spanning-tree vlan 1
no cdp run
no ip http server
switchport mode access on Cross-overs only.
(from what I've read it seems if you have a dedicated workstation in a port that it should get switchport mode access as well, is that correct?)
Any info/hints/tips would be much appreciated.
Thanks.

Hello,
basically, as a rule of thumb, the ports of your switch to which you have servers connected should be set to fixed speed and duplex settings, and the same should be the case for the respective server NICs. User ports, that is, switchports to which your desktop or laptop users connect to, should be left at the default (autonegotiate) speed and duplex settings.
Since you have disabled spanning tree (for your only VLAN, VLAN 1), make sure that there are no loops in your network.
Have a look at the following document:
Configuring Interface Characteristics
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12122ea5/2950scg/swint.htm
As for the 'switchport mode access' command, you actually might want to configure that on all your ports, not only the ports connecting your switches to each other. Since you are not using any trunks, any DTP (Dynamic Trunking Protocol) packets exchanged have no use anyway.
This document also contains a lot of information on how to best configure switchports and switches in a LAN switching environment, check if that helps you:
Troubleshooting LAN Switching Environments
http://www.cisco.com/en/US/tech/tk389/tk213/technologies_tech_note09186a0080176720.shtml
HTH,
GP

What is the most effective way to get ospf to function and what is the basic command structure

I am doing a project of ospf and need to know if I am on the right tract somehow these commands are not working and wondering if I am doing something wrong.

Hello,
I would say the basic configuration for OSPF should be:
1. router ospf 1
         2.   Router-id 2.2.2.2 ( if you want to hardcode the router-id else you can go with the default which would be the highest interface on your router)
         3. Network 192.168.0.0 0.0.0.255 area 0 (telling the router * I care about the 192.168.0 part of my ip and the last part can be anything thus the 255)
    4.      Net   192.168.2.2 0.0.0.255 area 0 (telling the router * I care about the 192.168.2 part of my ip and the last part can be anything thus the 255)
OR for the 192.168.0.0 and 192.168.2.0 you could just have 192.168.0.0 0.0.255.255 meaning I only care about 192.168 and 0.0 can be anything.
The four lines above would be my basic config for ospf. Also have a look at these links, they provide some insight into ospf and how it should be configured. http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/12-4/iro-cfg.html#GUID-588D1301-F63C-4DAC-BF1C-C3735EB13673
http://www.cisco.com/en/US/tech/tk365/tk480/tsd_technology_support_sub-protocol_home.html
I have also experienced that I cannot configure all OSPF commands on PT but prob GNS3 allow all configs.
HTH.
DJ.

Solution Manager 7.1 Basic Configuration error

Hi guys
I'm having problems with accessing the basic config wizard via spro, i'm also having the same issue trying to run "solman_setup" and "workcenter". For both issues i get "Internet Explore cannot open the webpage". The ITS is activated along with the ther services. If there's any settings that I"ve missed your help will be very much appreciated and please let me know if you need more information from me.
Thank you.

Hi ,
I suppose you are not having problems with the FQHN in other web screens, so DNS should be fine.
if this is a Microsoft Windows system I would try this workaround.
note 677118
(*) One quick solution is to update the hosts file on each
     work station. (Only an option for small installations.)
     File:          \WINNT\system32\drivers\etc\hosts
     Add new line: 10.17.73.210   hostname.domain.ext
     This must be done per workstation.
regards, Javier

Problem with X -config (freeze + black screen)

Hi, everyone. I'm a newbie in linux, so dont punch me .
I was following the beginners guide & after X -config /root/xorg.conf.new got freeze + blackscreen (alt + ctrl + bckspc or alt + Fn dont works).
I have created /X11/xorg.conf & can start X server, but X -config /root/xorg.conf.new or /etc/X11/xorg.conf gives black screen (with signal).
My VGA is HD3850.
Any ideas how i can fix it?
Here is my xorg.conf
Section "ServerFlags"
Option "AllowEmptyInput" "off"
EndSection
Section "ServerLayout"
Identifier "X.org Configured"
Screen 0 "Screen0" 0 0
InputDevice "Razer" "CorePointer"
InputDevice "Keyboard0" "CoreKeyboard"
EndSection
Section "Files"
ModulePath "/usr/lib/xorg/modules"
FontPath "/usr/share/fonts/misc"
FontPath "/usr/share/fonts/100dpi:unscaled"
FontPath "/usr/share/fonts/75dpi:unscaled"
FontPath "/usr/share/fonts/TTF"
FontPath "/usr/share/fonts/Type1"
EndSection
Section "InputDevice"
Identifier "Razer"
Driver "mouse"
Option "Name" "Razer Lachesis Optical Mouse"
Option "CorePointer"
Option "Device" "/dev/input/mice"
Option "Protocol" "ExplorerPS/2"
Option "Buttons" "9"
Option "Resolution" "1250"
Option "ZAxisMapping" "4 5"
Option "ButtonMapping" "1 2 3 6 7 8 9"
Option "Emulate3Buttons" "true"
Option "SampleRate" "1000"
EndSection
Section "InputDevice"
Identifier "Keyboard0"
Driver "keyboard"
Option "CoreKeyboard"
Option "XkbRules" "xorg"
Option "XkbModel" "microsoftmult"
Option "Xkblayout" "us,ru"
EndSection
Section "Module"
Load "glx"
Load "dri"
Load "drm"
EndSection
Section "Monitor"
Identifier "Monitor0"
HorizSync 31.0 - 81.0
VertRefresh 56.0 - 75.0
Option "DPMS"
EndSection
Section "Device"
Identifier "Card0"
Driver "radeonhd"
VendorName "ATI Technologies Inc"
BoardName "RV670PRO [Radeon HD 3850]"
Option "AccelMethod" "exa"
Option "DRI" "on"
EndSection
Section "Screen"
Identifier "Screen0"
Device "Card0"
Monitor "Monitor0"
SubSection "Display"
Viewport 0 0
Depth 24
Modes "1280x1024" "1024x768" "800x600"
EndSubSection
EndSection
Section "Extensions"
Option "RENDER" "enable"
Option "DAMAGE" "enable"
Option "Composite" "enable"
EndSection
/var/log/Xorg.0.log contain no errors or warnings (except ACPI & font paths)
Thx 4 help.
P.S Can add log if it helps
P.P.S Its one of my xorg.conf files, also i've used variant 4 xf86-video-ati
Last edited by InsaneDevice (2010-02-27 06:32:32)

My english is fine (i read well at least) .
At first message i said
I have created /X11/xorg.conf & can start X server...
I =can= start x server --- its mean that startx works fine & i can see 3 windows with clock . And if you mean that i dont want use x -config, then for what all this manipulations with reinstalling was?
Besides "Xorg -configure" & "x -config /etc/xorg.conf" are different things for me, because one create the basic config, while second test this config. So i thought you mean that i have to create it from scratch without using any commands
... Damn.. i just have read english & russian beginner guides. Russian says: "after installing xorg u have to create conf file, using Xorg -configure, then test it with command X -config /root/xorg.conf.new & IF IT WORK - copy to /etc/X11/xorg.conf. I didnt find that in english version .
Well, thank you for your patient & help . I think, that problem is solved (i think - say me if i wrong)
But i still want to know, why x -config /etc/xorg.conf give me that black screen + freeze, so if anybody knows - plz, message me.
Last edited by InsaneDevice (2010-03-01 07:36:42)

ACE 4710: Config Allows all traffic except large HTTP downloads

Hi Folks,
Got an ACE 4710 with a basic config that seems to work for all traffic except large downloads.
I've attached the current config
As I mentioned I can do normal HTTP to a standard destination like google or SSH through the ACE or ICMP
If i try to get a large file from the server side of ACE, then a trace shows that the first and subsequent 1460Byte packets dont go through ACE
I've thought of parse lengths, but i cannot see any that seem to affect the generic L4 maps that I am trying to use
Cheers
Alan

I've seen a similar fault. I suppose a lower MSS was sent in the TCP SYN handshake packets (1300 or 1380?) and the packets exceeding that value were dropped by the ACE. This is the default behavior which can be switched to a less strict mode by either
exceed-mss allow
or
no normalization
commands.
In our case, a linux web server was whose replies wouldn't keep to the MSS limit.

ASA5520 9.0(1) basic config

Similar Messages

Maybe you are looking for