Cat3750-Metro-Not Pass Last Fragment Packet

Hello,
I have a cat 3750 metro on a customer, although the customer is not using any metro feature I am having a problem with passing packets grater than 4,9K, the switch is not passing the last fragment of the packet when the packet is routed, if the packet is switched no problem .
I have made an upgrade to the last (12.2.25.SEE) version and did not resolve.
Thus any one has a clue.
I will try to change the SVI to the physical interfaces (no switchport) to see if something changes?
Thanks

@prabodh:
SQL> declare
2 TYPE tab_person_id is of table of number(15) index by pls_integer;
3 begin
4 null;
5 end;
6 /
TYPE tab_person_id is of table of number(15) index by pls_integer;
ERROR at line 2:
ORA-06550: line 2, column 23:
PLS-00103: Encountered the symbol "OF" when expecting one of the following:
( array limited new private range record VARRAY_ char_base
number_base decimal date_base clob_base blob_base bfile_base
table ref object fixed varying opaque sparse
The symbol "OF" was ignored.Check What you are posting.
@ qwestion: What is your Database Version? It is a implementation restriction.

Similar Messages

Cisco 300 - VLAN DHCP packets not passing

I am seeing a problem with our Cisco 300 switches. We use these switches as access switches, with a stacked 3750-G at the core, two 2960-S at the distribution layer, and about 10 300 Series switches at the access layer (10 port and 28 ports, all PoE).
We use Voice VLAN (VLAN 14) for our Mitel phones – there is a DHCP server on the Mitel system. Phones come up, get tagged VLAN 14 (LLDP), Traffic flows (including Broadcast for DHCP etc…). The system works, and has worked for months.
One day, suddenly, I find that all the Mitel phones on a particular access switch are not working. I look on the Mitel system and the lease on DHCP has expired, and the phone is stuck on renewing its DHCP IP address. I run port mirroring on the switch for VLAN 14 to see what is happening. The phones are stuck on DHCP discover, and I see the DHCP Discover broadcast packets on the switch but nothing else, no DHCP offer packets – hence the phone stuck at boot cycle.
I then do a port mirror from another access switch (that is currently working) – I can see the broadcast packets from the Mitel phones on the broken switch, but on this switch I can also see the DHCP offer packets from the Mitel system. I run two port mirrors simultaneous from the two switches (one working, one not) and I can see that the DHCP offer packets are not coming through to the broken switch. Panic ensues – I look at the distribution layer and there is no problem what so ever.
For some strange reason, the Cisco 300 28 port has stopped passing DHCP broadcast packets on a particular VLAN, even though they are being sent. I power cycle the switch – and hey presto, DHCP offer packets are coming through, and the phones get an IP address and boot properly.
I wipe the sweat off my brow, note the issue down and carry on my daily duties.
Forward a couple of weeks later, and to today. I have another phone that is showing the same symptoms, luckily it is the only phone on this particular Cisco 300 28 port. The same issue is occurring as described above. I gather as much diagnostic information I can then reboot the switch – but still no joy. I then remember that this switch is not directly attached to the distribution layer and instead gets trunked to another Cisco 300 28 port. I give that a reboot and 5 minutes later, DHCP broadcast offers are passing and the phone boots.
I am listing this problem as not just a ‘one off’ now, and is recurring. It has happened to two of my 300 28 port switches.
All Switches running 1.1.2.0.
No link to up time – first instance of the problem, switch was up for 14 days – second instance (another switch) uptime of 39 days
LLDP is working fine on the switches, as is Voice-VLAN (Port is tagged and broadcasts out DHCP Discover which is seen by other devices throughout network)
Nothing in the log file on the access switch
Nothing on the Dist/Core regarding STP – Spanning tree set up is fine throughout
Has anyone else experienced same? I’m hoping this is a bug that is getting fixed.
Many Thanks
Tim

Hello Tim
Brayton Hackworth had a similar post as yours, found here;
https://supportforums.cisco.com/message/3684179#3684179
Brayton is using the Mitel 5330 phones where the LLDP no longer fed VLAN information to the phone network. But, he reverted to use a DHCP server to provide the VLAN information.
Unfortunately, I (personally) cannot test any Mitel resources (since I don't have them) so my labs usually only consist of either 7900 series or SPA500/900 series phones.
The best thing I can really recommend to you is to make a package of data consisting of;
Topology which consists of;
Modem type
Router including IP
All devices including IP of switches
Servers / relevant workstations
# of attached devices and # of users on the LAN
Switch config file + show tech on a notepad
Syslog output from the switch
Working PCAP
PCAP showing failure
PCAP legend showing what IP address are who (unless topology contains all IP)
Where the PCAP is taken from and method
We then can create a service request for you and pass it for review.
-Tom

Cisco 881 ISR IPSec VPN Tunnel does not pass traffic from the vlan.

I have a cisco 881 ISR Router with a site-to-site IPsec vpn tunnel to a mikrotik device on the other end (I inherited this from my client). The tunnel is constructed properly and is up, however traffic does not pass or get routed to the FA4 interface. I see in my packet captures that it hits the vlan1 interface (vlans are required on the L2 ports) and does not pass to the tunnel.
This is my configuration:
141Kerioth#sh config
Using 3763 out of 262136 bytes
! Last configuration change at 01:02:41 UTC Mon May 26 2014 by admin
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname 141Kerioth
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
aaa new-model
141Kerioth#do wr mem
              ^
% Invalid input detected at '^' marker.
141Kerioth#wr mem
Building configuration...
[OK]
141Kerioth#sh run
Building configuration...
Current configuration : 5053 bytes
! Last configuration change at 01:38:06 UTC Mon May 26 2014 by admin
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname 141Kerioth
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
aaa new-model
aaa authentication login default local
aaa authentication ppp default local
aaa session-id common
memory-size iomem 10
crypto pki trustpoint TP-self-signed-580381394
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-580381394
revocation-check none
rsakeypair TP-self-signed-580381394
crypto pki certificate chain TP-self-signed-580381394
certificate self-signed 01
30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 35383033 38313339 34301E17 0D313430 35323231 38323333
365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3538 30333831
33393430 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
B001A012 2CA6970C 0648798B 2A786704 84F2D989 83974B19 9B4287F2 4503D2C9
173F23C4 FF34D160 202A7565 4A1CE08B 60B3ADAE 6E19EE6E 9CD39E72 71F9650E
930F22FE C4441F9C 2D7DD420 71F75DFC 3CCAC94E BA304685 E0E62658 A3E8D01C
D01D7D6A 5AF0B0E6 3CF6AF3A B7E51F83 9BF6D38E 65254E1F 71369718 ADADD691
02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
23041830 168014D6 24878F12 1FFADF2F 537A438E 6DD7FB6B D79E4130 1D060355
1D0E0416 0414D624 878F121F FADF2F53 7A438E6D D7FB6BD7 9E41300D 06092A86
4886F70D 01010505 00038181 00771667 FCA66002 8AB9E5FB F210012F C50B586F
9A9640BB 45B4CEFD 030A38C0 E610AAC8 B41EF3C4 E55810F9 B2C727CF C1DEFCF1
0846E7BC 1D95420E 5DADB5F8 EFE7EB37 B5433B80 4FF787D4 B1F2A527 06F065A4
00522E97 A9D2335C E83C4AE1 E68D7A41 9D0046A7 ADCC282B 7527F84D E71CC567
14EF37EA 15E57AD0 3C5D01F3 EF
        quit
ip dhcp excluded-address 10.0.16.1
ip dhcp pool ccp-pool
import all
network 10.0.16.0 255.255.255.0
default-router 10.0.16.1
dns-server 8.8.8.8
lease 0 2
ip domain name kerioth.com
ip host hostname.domain z.z.z.z
ip name-server 8.8.8.8
ip name-server 4.2.2.2
ip cef
no ipv6 cef
license udi pid CISCO881-K9 sn FTX180483DD
username admin privilege 15 secret 4 CmmfIy.RPySmo4Q2gEIZ2jlr3J.bTBAszoe5Bry0z4c
username meadowbrook privilege 0 password 0 $8UBr#Ux
username meadowbrook autocommand exit
policy-map type inspect outbound-policy
crypto isakmp policy 1
encr 3des
authentication pre-share
group 5
crypto isakmp key 141Township address z.z.z.z
crypto isakmp keepalive 10
crypto ipsec transform-set TS esp-3des esp-sha-hmac
mode tunnel
crypto map mymap 10 ipsec-isakmp
set peer z.z.z.z
set transform-set TS
match address 115
interface Loopback0
no ip address
interface Tunnel1
no ip address
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
description $FW_OUTSIDE_WAN$
ip address 50.y.y.y 255.255.255.240
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
crypto map mymap
interface Vlan1
description $ETH_LAN$
ip address 10.0.16.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 115 interface Vlan1 overload
ip nat inside source list 199 interface FastEthernet4 overload
ip nat inside source route-map nonat interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 50.x.x.x
access-list 110 deny   ip 10.0.16.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 110 permit ip 10.0.16.0 0.0.0.255 any
access-list 115 permit ip 10.0.16.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 144 permit icmp host c.c.c.c host 10.0.1.50
access-list 144 permit icmp host p.p.p.p host 10.0.16.105
access-list 199 permit ip a.a.a.a 0.0.0.255 any
no cdp run
route-map nonat permit 10
match ip address 100
line con 0
no modem enable
line aux 0
line vty 0 4
access-class 1 in
exec-timeout 30 0
privilege level 15
transport preferred ssh
transport input ssh
line vty 5 15
access-class 23 in
privilege level 15
transport input telnet ssh
cns trusted-server all-agents x.x.x.x
cns trusted-server all-agents hostname
cns trusted-server all-agents hostname.domain
cns id hardware-serial
cns id hardware-serial event
cns id hardware-serial image
cns event hostname.domain 11011
cns config initial hostname.domain 80
cns config partial hostname.domain 80
cns exec 80
end

Why do you have following command on the PIX?
crypto map outside_map 40 set transform-set 165.228.x.x
Also you have this transform set on the PIX:
crypto ipsec transform-set 10.112.60.0 esp-aes-256 esp-sha-hmac
This does not match the transfor set on the router:
crypto ipsec transform-set tritest esp-3des esp-md5-hmac
Where are you using the access-list/route-map
101 ?

Firewall causing playstation 3 fragmented packets blocked!

Just wanted to post this as info to other RV220w users that have a playstation 3. By default a setting is on in the firewall that blocks fragmented packets.. With this setting on even if the ps3 is in the dmz some games wont work and if you test the ps3 connection it will tell you that either your router or service provider doesn't allow fragmented packets. Its under Firewall > Attack Prevention > check box "block fragmented packets".
the error from testing connection on ps3 is
The router in use may not support IP fragments, and the communication features of some games may be restricted.

[email protected] wrote:
> I am using Netware 6.5 sp1a and bm 3.8 sp1a.
>
> I recently deleted some unneeded packet filter exceptions using
> iManager. When my server was restarted over the weekend the firewall is
> not allowing packets in the exception list to pass through.
> I get a message on the logger screen that states:
> "nbm filewall failed to read configuration from ds"
> What is actuall happening is all traffic is blocked as the exceptions do
> not seem to be working.
>
> I have checked ds and all looks healthy.
>
> Any ideas. I have been forced to disable filters on the public interface
> until I can fix the problem.
>
> Thanks,
>
Sorry but this is the wrong forum. You need to go to
novell.support.bordermanager.packet-filtering. This forum is for the
Novell Client Firewall that comes with BM 3.8
Brad

Access Points Not Passing DHCP to Clients

I have a 50+ access point deployment, all in a single VLAN (DMZ), across a dozen buildings. We recently experienced wierdness of the following sort. Clients would request DHCP request, DHCP servers would forward requests, which would not get passed from the AP to the clients. We could verify that DHCP and all other parts of network were fine. I had to cold boot each AP to clear the condition. I could find nothing in this mix of 350s and 1200s or the spectrum that would indicate an obvious attack... Couldn't find where to start looking for any tables that were full, or any real place to look for some other reason for this. Yet after cold boot- all is well.
Any thoughts, in case it happens again?

Hi Guys,
I am having a similar problem to you, however i can get authentciated via LEAP, but dont seem to get an IP adderss from the radius server.
My setup is very simple as i am at the design stage. We have a Cisco AP 1200 (2.4 and 5.0 GHZ) and we are using FUNK steel belted RADIUS server. LEAP authentication works fine and i can see the association on the AP. The wirless client (HP W400 integrated Wireless cards) shows that it has been authenticated successfully too. However no IP is being received. We have a IP Pool configured on the SBR server and the SBR server shows that it has issued an IP address.
Next step was to place a sniffer and capture the packets. The capture shows the radius requests and challenges and in the very last ACCEPT packet we can see that the SBR has issued an IP address.
I am confused as i cant see anything on AP that would block the IP address. There are also a few attributes showing as "unknown" in the sniffer trace, so im not too sure wgats going on.
Can anyone help. The IOS is 12.2 (13) JA

How to resolve a Lenovo PC that will not pass the Lenovo Splash screen with no access to Windows

Here is my problem and here is the solution!!!
My B540 Ideacentre would not pass the Lenovo splash screen. The only operational keys I had was F1 (BIOS) and F12 (BIOS options). F2 went to a light blue screen so no chance of even a one key recovery. Warrenty had expired four and a half months ago. I contacted Lenovo and after the guy told me to try F2 twice he said it was a HDD or other hardware failure and would cost around £200 maybe and also would take about two weeks.
AT THIS POINT YOU SHOULD NOT BE ANGRY FRUSTRATED OR PANIC. REMAIN CALM AND STOP AND THINK WHAT ACTUALLY WAS HAPPENING WHEN YOU LAST USED YOUR PC.
For me I remembered Windows had auto downloaded 8.1 and was asking me to install. Also my keyboard had lost shift W T Y keys. This told me that it was not a hardware issue but a software issue and perhaps from this update. My HDD was not clicking or beeping and this PC has a 2TB Seagate Barracuda which has a good reputation. Luckly for me I also have a Seagate external expansion 2TB and a 500MB expansion which was the HDD from my old HP Touchsmart which I converted into an external hard drive by buying a HDD enclosure with cooling fan and all leads from eBay for £25 and this is where the solution is.
If you can create an expansion drive so easily and access the HDD then why cant I do it with the HDD from my Ideacentre and of course you can. So first unplug your PC or laptop. Next remove the cover and unclip the HDD (which is easy with the B540. See user instructions). Next I removed my HP HDD from the enclosure and fitted my Ideacentre HDD in its place. Next you need a laptop or another PC. Switch it on and then connect your HDD to the laptop or PC via highspeed USB cable. My laptop is running Windows 7 Ultimate and of course has all the repair tools required. When the software has loaded you may get a box that will have two options. The first will ask you if you want to repair your files and the second to scan for bad sectors and to attempt repair recovery of sectors. Tick both boxes and click start. This is a long slow process but worth the wait. Nine hours later my HDD was ready. I connected my Seagate expansion to my laptop and moved all new files that I had not backed up. So at this point you should create a folder and move all your photos music videos documents etc to it. This can take upto three hours if you have never backed up before and are moving everything. Once completed I shut everything down and replaced the HDD into my Ideacentre. Make sure do not have any external devices connected such as expansions external drives headphones etc. Connect the power and switch on. The Ideacentre booted up and there was a pause at the splash screen then it went to a black screen and then by the miracle of logical thinking I was at my lock screen. I was never so glad to see the map of my home land "Ukraine". After jumping up and down with joy I then went in and all was as normal but to be sure I went into safemode and started a complete restore. This is the option where you completely format your HDD and restore as new. It takes a long time but it is the best option because you do not want this to happen again. When this has completed and you are in Windows do not wait a moment longer by playing with your photos or creating your desktop picture. Go to create a recovery drive (use a 32GB stick) and after that also make a copy to disc. Next go to command prompt (cmd) Admin and change a setting by typing bcdedit /set {default} bootmenupolicy legacy. This will now enable your F8 key to boot straight into safemode just incase you need to in the future. It will slow boot time a little but better to be able to get in to Windows than not at all for the sake of a few seconds.
Well I hope this helps someone out there and I know you may think its a lot to do but it is not. Ask a friend to borrow a laptop or PC and perhaps a HDD encloser. The rest is just time but when you see your lock screen you will not care trust me.
Cлава Україні!!! Героям слава!!!

I thought this was the method I used before but I followed through it and it was a horrific fail. "Operating system not found". Can anyone help?
http://superuser.com/questions/421402/how-to-create-a-bootable-usb-windows-os-us ing-mac-os-x
Steps To Achieve Victory
Download the ISO you want to use
Open Terminal (in /Applications/Utilities)
Convert .iso to .img using hdiutil:
hdiutil convert -format UDRW -o /path/to/target.img /path/to/source.iso
Rename if OS X gave it a .dmg ending:
mv /path/to/target.img.dmg path/to/target.img
Type diskutil to get a list of currently connected devices
Insert USB drive you want to use
Run diskutil again to see what your USB stick gets assigned eg - /dev/disk3
Run diskutil unmountDisk /dev/diskN (where N is the number assigned to your USB stick, in previous example it would be 3)
Run sudo dd if=/path/to/target.img of=/dev/diskN bs=1m (if you get an error, replace bs=1m with bs=1M
Run diskutil eject /dev/diskN and remove your USB stick
The USB stick will now be ready to use
Also similarly described here: http://www.tomshardware.co.uk/answers/id-1733410/creating-microsoft-bootable-usb -mountain-lion.html#.

FX 5200 TDR128 driver not pass the windows XP logo testing

Hi there,
I've just bought an FX 5200 TDR128 VGA Cards, the problem is I cant install the driver because the driver is not pass the windows XP logo test (the error massage box says yhat the device driver is not designed with windows XP logo. So what can I do now? My VGA wont work properly if I do not install the driver which designed for microsoft windows XP logo.
Best regards

A MS signed (WHQL - Windows Hardware Quality Labs) driver is not a requirement - MS may make a big deal about it, but do you really think that MS has the time to test each and every driver (and their many revisions) that are made by all the hardware manufacturers in existence??!
Fact is, by the time MS finally 'certifies' a driver, odds are the manufacturer has built a newer and better one (especially in the case of graphic card drivers). Odds are, MS only really tests certain driver revisions as submitted to them by the author. (and, if you happen to install older hardware, the last driver available for that hardware may very well not be signed - what would you do then?!)
That said, you can ignore the warning message that Windows gives you about a driver not being signed. In fact, you can disable the driver check altogether in - Control Panel -> System -> Hardware tab in Device Manager section click the 'Driver Signing' button and set to 'ignore.'
Finally, after all that, the current nVidia driver (v.56.64) is WHQL signed - browse to it here or go directly (Win XP/2K) here.

AP 1231G Not Passing DHCP to clients

Hello My company AP 1231G is not passing the DHCP address to the client from the DHCP server can you please advise on my config listed below
basicly the AP is on its own VLAN 10.1.123.1 and the DHCP server is 10.1.10.2 -- trying to use iphelper to pass DHCP to clients and the AP is on static IP 10.1.123.2--
! Last configuration change at 13:15:56 +0800 Fri May 25 2012 by root
! NVRAM config last updated at 13:15:56 +0800 Fri May 25 2012 by root
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname XXXXXXXXXX
clock timezone +0800 8
ip subnet-zero
no ip domain lookup
ip domain name XXXXXXXXXXXXX
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
dot11 syslog
dot11 ssid XXXXXXXXXX
   authentication open
   authentication key-management wpa
   guest-mode
   infrastructure-ssid optional
   wpa-psk ascii XXXXXXXXXXXXXXXXXXXXXXX
dot11 arp-cache optional
username root privilege 15 password XXXXXXXXXXXXXXXXXXXXX
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers aes-ccm tkip
ssid XXXXXXXXXXX
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
no preamble-short
channel 2432
station-role root access-point
no dot11 extension aironet
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address 10.1.123.2 255.255.255.0
ip helper-address 10.1.10.2
ip default-gateway 10.1.123.1
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
access-list 111 permit tcp any any neq telnet
snmp-server view dot11view ieee802dot11 included
snmp-server view ieee802dot11 ieee802dot11 included
snmp-server community public RO
snmp-server community private view undefined RW
bridge 1 route ip
line con 0
terminal-type teletype
line vty 0 4
terminal-type teletype
sntp server 114.80.81.13
sntp broadcast client
end

Roan:
Where is your DHCP server configured (swtich, firewall, 3rd party server..etc)?
Does it work correctly if the AP IP on same subnet and ip-helper is not being utilized?

Did not pass integrity check??? Help

I am using internet explorer 8, on a brand new Toshiba Laptop, on wireless broadband but yet when I try downloading Adobe Flash Player 10, it is taking approximatly 2 hours on the download window with the green bar to get to 100% and when it does get to 100% it is saying that it did not pass the integrity check and if I click resume it starts the download all over again.
I have tried using different browsers ie Mozilla Firefox and Opera and it is still the same...
I have a support case open with Adobe for this but so far anything they have told me I have been unsucessful with.
Please Help!!.........
kind regards

Hello, What OS are you using? Are you trying to install the latest Flash Player vs 10.0.42.34? Have you run the uninstaller
from here? http://kb2.adobe.com/cps/141/tn_14157.html You may want to read each section to be sure to comply with the various requirements before running it. Especially the last part if you are using IE. This is downloaded to your desktop. Close all browsers and check the system tray; nothing that uses Flash should be running.
After running the Uninstaller, it is a good idea to go to Tools>Internet Options and check both sections of the add ons to
check if the old Shockwave Flash Object version ActiveX Control has been removed. If it has not, run the Uninstaller again. Then be sure to Reboot again.
Before running the offline Installer, I would suggest you read the troubleshooting link. It may help to be familiar with the various issues that an install might fail before trying it again.
http://go.adobe.com/kb/ts_tn_19166_en-us This is the troubleshooting link
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash_player_ax.exe Installer link for IE-Download to the desktop.
After installing, go here to the Adobe test site: http://www.adobe.com/products/flash/about
If you have any questions before or after, please post.
Thank you

DHCP Server is not passing out DHCP Leases

I can't seem to figure out why DHCP server is not passing out DHCP lease a client?
Also I can't seem to figure out why NVI0 interface is UP? I have setup another box similarly and NVI0 is down on that and the DHCP server is working fine on that too. Strange!
I am working on CISCO 881 VPN Router...Please have a look at it and let me know. Thanks
Here is the configuration in the box...
sh run
Building configuration...
Current configuration : 6543 bytes
! Last configuration change at 17:09:54 CST Fri Sep 14 2012 by XXXXX
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname XXXXX
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
aaa new-model
aaa authentication login default local
aaa authentication login vpn_xauth_ml_1 local
aaa authentication login sslvpn local
aaa authorization network vpn_group_ml_1 local
aaa session-id common
memory-size iomem 10
clock timezone CSTime -6
clock summer-time CST recurring
crypto pki trustpoint TP-self-signed-3079619067
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3079619067
revocation-check none
rsakeypair TP-self-signed-3079619067
crypto pki certificate chain TP-self-signed-3079619067
certificate self-signed 01
30820252 308201BB A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33303739 36313930 3637301E 170D3132 30393134 31393231
32375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30373936
31393036 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100993C D622004B F3AEA1E5 81106C28 36EC52D0 5435ABC3 8912095F 3641168A
B67D97AF AEB43CF3 00A00EB5 702FA355 9F58EBEF F42294DC 0E32CF40 E17D372A
3BC36401 55EDBA5C 910B7A51 89D709A8 7EAB3FF0 E4C99D34 CBE3F316 069C0E16
BC284055 35E3D762 463DABF6 852C4E7A D2EF45A4 21F08689 4DF17870 9E2A6C27
1BFB0203 010001A3 7A307830 0F060355 1D130101 FF040530 030101FF 30250603
551D1104 1E301C82 1A506F70 6C617276 696C6C65 2E796F75 72646F6D 61696E2E
636F6D30 1F060355 1D230418 30168014 64EA4CAE 2029E4C2 702584C6 B5732464
5C9DA38A 301D0603 551D0E04 16041464 EA4CAE20 29E4C270 2584C6B5 7324645C
9DA38A30 0D06092A 864886F7 0D010104 05000381 81006C27 96E06B83 04DBDA81
EEB0AF35 84ED370E A8C9694E F9B9326D 69CB1043 9C396D7B 760D252F 4881926D
878E434F 9AFC3E6D A5BF43F2 E619D6EC F45C039A 5FFB478F A99F7EE5 274E37D5
11976FDE 823FD1A9 700203E5 67A329B3 F4CF45F0 245757C8 E2349276 B13414D1
017616FA 38A40BA8 42545AC5 C7676D21 29E4F491 CADB
        quit
ip source-route
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.1.1 192.168.100.101
ip dhcp excluded-address 192.168.1.254
ip dhcp pool ccp-pool
   import all
   network 10.10.10.0 255.255.255.248
   default-router 10.10.10.1
   lease 0 2
ip dhcp pool Internal_Network
   network 192.168.1.0 255.255.255.0
   dns-server 192.168.100.254
   default-router 192.168.1.254
ip cef
ip domain name yourdomain.com
ip name-server 192.168.100.254
no ipv6 cef
license udi pid CISCO881-K9 sn FTX1604828T
username XXXXX privilege 15 secret 5 $1$QEcR$96cmvs/h/.05G6BnorcWG/
username XXXXX secret 5 $1$PQQ1$3.Vin0i/2uZ/KD0xEJ8GC.
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp policy 2
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp client configuration group YYYYYYY
key XXXXX_XXXXX_XXXXX
pool VPN-Pool
acl VPN-Access-List
crypto isakmp profile vpn-isakmp-profile-1
   match identity group YYYYYYY
   client authentication list vpn_xauth_ml_1
   isakmp authorization list vpn_group_ml_1
   client configuration address respond
   virtual-template 2
crypto ipsec transform-set encrypt-method-1 esp-3des esp-sha-hmac
crypto ipsec profile VPN-Profile-1
set transform-set encrypt-method-1
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
interface FastEthernet4
description WAN_INTERFACE
ip address 192.168.100.3 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
interface Virtual-Template2 type tunnel
ip unnumbered FastEthernet0
tunnel mode ipsec ipv4
tunnel protection ipsec profile VPN-Profile-1
interface Vlan1
description VLAN1_INTERFACE
ip address 192.168.1.254 255.255.255.0
no ip redirects
no ip unreachables
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
ip local pool VPN-Pool 192.168.1.151 192.168.1.200
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 100 interface FastEthernet4 overload
ip nat inside source static tcp 192.168.1.100 21 192.168.100.3 21 extendable
ip nat inside source static tcp 192.168.1.100 80 192.168.100.3 80 extendable
ip route 0.0.0.0 0.0.0.0 192.168.100.254
ip access-list extended VPN-Access-List
permit ip 192.168.1.0 0.0.0.255 any
permit tcp host A.B.C.D host 192.168.1.100 eq ftp
permit tcp host A1.B1.C1.D1 host 192.168.1.100 eq ftp
permit tcp host A2.B2.C2.D2 host 192.168.1.100 eq ftp
permit tcp 192.168.1.0 0.0.0.255 host 192.168.1.100 eq ftp
permit tcp host A3.B3.C3.D3 host 192.168.1.100 eq ftp
permit tcp any host 192.168.1.100 eq XXX
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 23 permit 192.168.1.0 0.0.0.255
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
no cdp run
control-plane
banner exec ^C
% Password expiration warning.
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you
want to use.
^C
banner motd ^C XXXXX-XXXXX VPN Router ^C
line con 0
exec-timeout 30 0
logging synchronous
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
password 7 124A50424A5E5550
transport input telnet ssh
scheduler max-task-time 5000
end

Hi Jennifer,
I have gotten it resolved. Per your suggestion, I have turned on debug ip dhcp events and found that POOL EMPTY message. After little research, I found out that I have made a mistake in my excluded-address range.
I have had it as
ip dhcp excluded-address 192.168.1.1 192.168.100.101
It should have been
ip dhcp excluded-address 192.168.1.1 192.168.1.101.
It was a typo.
Thank you for the suggestion.
Srini

Value not passing urgent

data:l_lotno like /JJVC/ERR851-master_lot_num,
        l_batno like mchb-charg.
loop at i_inv_data into wa_inv_data.
    l_batno = wa_inv_data-charg+0(1).
    if l_batno ca SY-ABCDE.
      translate l_batno to upper case.
      l_lotno = wa_inv_data-charg.
      perform f_idoc_851.
      perform f_idoc_52 .
      perform f_idoc850.
    else.
      if wa_inv_data-charg na SY-ABCDE
        and wa_inv_data-werks eq c_us11.
        l_lotno = wa_inv_data-charg+0(6).
        perform f_idoc_851.
        perform f_idoc_52 .
        perform f_idoc850.
      endif.
    endif.
endloop.
data:l_lotno like /JJVC/ERR851-master_lot_num,
       l_batno like mchb-charg.
IF p_werks EQ c_us11.
    SELECT   a~docnum    "doc number
             b~credat    "creation date
             b~status    "status of idoc
             b~statxt    "last error message
             FROM /jjvc/err851 AS a INNER JOIN edids AS b
             ON adocnum = bdocnum
             INTO TABLE i_idoc_error
             WHERE a~master_lot_num eq l_lotno
             AND werks EQ p_werks.
    IF sy-subrc <> 0.
    ENDIF.
the data in l_lotno and l_batno is not passing from the above if condition to the select statement can any one help me in this.

You have to declare the l_lotno and l_batno as global variables.
here they are local variables and their scope is withing the block in which they are defined.
Declare them outside the blocks(Performs etc)
Regards,
Ravi

K8N Neo Platinum not passing POST

Hello,
I have just bought an MSI K8N Neo Platinum OEM and it will not pass POST. I have gone through all the items in the Sticky section, but still it won't pass. I don't know what to do.
Here's the hardware I have hooked up:
MSI K8N Neo Platinum motherboard (has "MS-7030 VER:1" written on it)
Athlon 64 3000+ CPU, 512 K L2 Cache (ADA3000AEP4AP)
Kingston RAM (KVR400X64C3A/512)
Radeon 7200 graphics card (about 4 years old)
Seasonic S12 380 PSU
Thermalright XP-90 heatsink w/ 90mm Nexus fan
I have hooked up the 24-pin power cable to the 20-pin motherboard slot using the 24-to-20 pin adaptor supplied with the PSU.
The 12v 4-pin CPU power cable is also plugged in.
The graphics card is plugged into the AGP slot. There is no other power connection needed.
I have installed the CPU with a Thermalright XP90 heatsink and a Nexus 90 mm quiet fan.
I have hooked up the fan to the motherboard C_FAN1 slot.
I have installed the RAM (Kingston KVR400X64C3A/512) into DIMM slot 1.
I attached the case fans to the power supply and hooked up the case speaker.
I have also hooked up the front panel power and reset switches.
I bought the motherboard OEM, so it did not include a D-bracket. I have built a pseudo-D-bracket using two-colour LEDs and plugged it into the D-bracket slot.
With this work done, I plugged in the power supply. The power supply has an on/off switch on the back. As soon as I turn on the switch, the computer tries to boot up. All the fans start spinning (power supply, CPU cooler, case fans, video card fan). Nothing appears on the screen. The case speaker emits a long beep, waits about 5 seconds, then beeps again, and continues this pattern forever. The documentation says that this indicates a memory issue.
My homemade D-bracket shows the following: initially, all the LEDs are red. Then, the LED across JLED1 pins 7 & 8 turns green (with all other LEDs red). I assume that this corresponds to LED 1 being lit, although it really looks like it should be LED 4. Next, the LED across JLED1 pins 5 & 6 turns green (with all other LEDs red). Once again, I assume this corresponds to LED 2 being lit, although it looks like it should be LED 3. I looked this up and the documentation indicates a memory error. To solve the problem, I have tried the following things:
1. Hitting reset. Same boot sequence.
2. Clearing the CMOS using the JBAT1 jumper. I left the jumper at "clear data" for about 10 minutes, then switched it back. Same boot sequence as before.
3. Clearing the CMOS by removing the battery. I left the battery out for 3 minutes, then 30 minutes, then 8 hours. Same boot sequence.
4. Removing the motherboard from the case. I placed the motherboard on the anti-static bag it came in. Repeated steps 1, 2 and 3. Nothing.
5. Move the RAM to DIMM slot 2 or 3. Tried steps 1, 2 and 3 again. The boot-up sequence was the same.
6. Different RAM. I have also tried using OCZ 400 MHz 512MB unbuffered DDR memory (OCZ400512V3). Performed steps 1-5 with identical results.
7. No RAM. Same boot problem.
8. No video card. Ditto.
9. No RAM or video card. Exactly the same as before.
As far as I can tell, all components are supported. The only item I am very unsure of is the graphics card. I do not have the exact specifications on it. When it is in my other computer, the driver details identify it only as a "Radeon 7200". However, it does have the "golden finger" shown at www.msicomputer.com/support/sup_tshoot.asp#1_3. Even if the video card is not compatible, it seems like the beep codes and D-bracket codes both indicate memory issues.
The only thing that I have noticed that is weird (other than the fact that the computer won't pass POST) is that when I turn on the power supply, the computer immediately boots up. I don't know whether or not this is normal.
Lastly, I do not know the current BIOS version. Is it possible that the BIOS is an early version that does not support my memory/CPU/video card? I bought the mobo OEM, so I do not know what BIOS it has loaded. Is there some way I can figure this out without passing POST? This is driving me absolutely insane.
Thank you for your help,
Kyle Renwick

Make sure the fan you are using for the xp90 is supporting RPM readouts .
Then try another AGP gfx card , sometimes you can have a no post due to that the graphics adapter wont start .
Take the system bare bone ( mobo + cpu + ram + gfx )
Have any award beep codes ? , note them down and decode them against
http://bioscentral.com/beepcodes/awardbeep.htm
Still stuck !
Remove AGP + ram too .
The mobo shall beep (endless beeping )
Insert the ram , the mobo shall beep - missing gfx .
Got this far and you know cpu + memory initialize but have problems with gfx or other devices
later in the post/init process .
Do not have any usb devices connected to internal or external connectors ,
note that the USBOC pin un JUSB1/JUSB2 is NOT to be connected .
Also try altering between ps2 and usb keyboard as this also has caused non post situation for people .

Selecting an lov parameter value sometimes not passed correctly

When selecting a value from an LOV parameter, sometimes the parameter value doesn't seem to get passed correctly to the data template query.
For example, let's say I have the following LOV parameter called "risk":
Some Risk
New Risk
Other Risk
Last Risk
When I select "Some Risk", I would get correct results and when viewing the "Data" xml, I can see the parameter with the right value:
<RISK>Some Risk</RISK>
But when I select "New Risk" the results are incorrect and the xml shows:
<RISK />
as if the value was not passed as the bind parameter value for the dataset query.
Any idea what I'm doing wrong? Is this a BIP bug or is there a workaround?

Hi, thanks for the reply.
The LOV is of "SQL Query" type (not fixed data) and the values were retrieved from the database.
Supposing this was the sql query for my "risk" parameter LOV:
select dimvaltl.GENERIC_VAL_NAME
from GENERIC_VAL_TL dimvaltl,
GENERIC_TL dimtl
where dimtl.GENERIC_NAME = 'Risk'
and dimvaltl.GENERIC_ID = dimtl.GENERIC_ID
order by dimvaltl.GENERIC_VAL_NAME
And supposing this was the sql query in the data template dataset:
select pdimv.ID
from GENERIC_V pdimv
where pdimv.NAME = 'Risk'
and pdimv.VALUE in (:risk)))
If risk is empty, obviously the query would not work. I noticed the xml generated sometimes show the selected parameter value and sometimes don't, as if BIP is not passing it to the dataset query as bind parameter value.
Incidentally I have other lov parameters that works fine, the only difference I can think of is that for this LOV query I am doing a join instead of a simple select statement from one table.

GRE traffic can not pass through LRT224 IPSec Tunnel

Hi,
We have a trouble when using Cisco Router GRE tunnel plus LRT224 IPSec Gateway-Gateway Tunnel.
We found after reboot, GRE packets can not pass trough LRT224 IPSec tunnel. need to restart serval time then gre will back to normal.
Besides that, GRE keepalive packets can not pass trough LRT224 IPSec Tunnel.
please help. I had tried to upgrade to latest firmware version.
Firmware Version : v1.0.3.09 (Dec 26 2014 14:28:46)
A-END:
interface Tunnel1
ip address 10.216.80.105 255.255.255.252
ip mtu 1400
ip nat outside
ip virtual-reassembly in
ip tcp adjust-mss 1360
ip ospf network point-to-point
ip ospf hello-interval 3
ip ospf cost 10000
tunnel source 10.216.81.2
tunnel destination 10.216.80.90
end
B-END:
interface Tunnel11
ip address 10.216.80.110 255.255.255.252
ip mtu 1400
ip tcp adjust-mss 1360
ip ospf network point-to-point
ip ospf cost 10000
ip ospf hello-interval 3
tunnel source 10.216.80.91
tunnel destination 10.216.81.3
end
CISCO2911 <> LRT224 <> INTERNET <> LRT224 <> CISCO 2621
San

Can you post the results from the below command for the Cisco Routers?
IOS Command: "sh version"
Why not static route without NAT through the LRT224 IPSec VPN?
Just curious why did you use LRT224's for the Site to Site VPN instead of the Cisco Routers?
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

Fragmenting packets over Ethernet to improve voice quality

Setup:
1750--Ethernet---Satellite Receiver---128K Sat Link---Sat. Recvr--Ether---1750
Question:
Since the Satellite Link is only 128K there will be a problem of Serialization Delay. Is there a way to fragment packets and Interleave over ethernet ? The same way it is done over Frame Relay or MLPPP.
In this setup how does one lower down "Serialization Delay" ?

rocampo,
With a Satellite link, most the latency will be travel time and not serialization delay. I would expect VoIP quality to be an issue, since the users will have to tolerate long delays and have to wait to make sure the person on the other end has actually finished speaking before starting to speak. VoIP packets are generally small enough that they are already at or near Ethernet minimum packet size of 64 KBytes, so they are not fragmented on Ethernet. However, you may want to look into the QOS / COS capabilities of your LAN switches. But the real issue for you will be the large amount of latency across the satellite link. Be sure to use QOS on the satellite link, to send along VoIP packets on a preferred basis over other less time sensitive traffic. And you may want to see if you can use RTP header compression on the Satellite link to shrink the size of VoIP frames.
Regards,
Rob Bristow
AT&T Solutions
CCIE #3335

Cat3750-Metro-Not Pass Last Fragment Packet

Similar Messages

Maybe you are looking for