Cisco 6516 FWSM Module problem
Hi
We have a 6513 cisco FW with 2 FWSM Active /Standby Failover , When The primery module is in active state the users sessions is suddenly disconnected while the ping is OK (no request time packet ) now we have to work with only one module , what should we do.
Thankx
Dalia
Hello Dalia,
Could you explain the issue a litle further???
Are you saying that when having both FWSM in active/standby and with the primary in active state all of the sessions are dropped except ICMP?
Looking for some Networking Assistance?
Contact me directly at [email protected]
I will fix your problem ASAP.
Cheers,
Julio Carvajal Segura
http://laguiadelnetworking.com
Similar Messages
-
Hi ALL,
We have two switches and TWo FWSM module is inserted into the Two switches .Can I add the FWSM as a separate device instead of module because i can't telnet the fwsm from Switch.Customer is not ready to configure the telnet option.FWSM module is working as a active and active mode..so virtual single ip is configured....How can i add the FWSM module in this network.You can use as the separate device. For the further description the following URL for the configuration for the FWSM will help you
http://www.cisco.com/en/US/docs/security/fwsm/fwsm23/configuration/guide/context.html -
Replacing Faulty FWSM module in Cluster
Hi,
We have a faulty FWSM module in Cisco 6509 switch in Active/Standby cluster mode
We have purchased a refurbished FWSM module to replace it. It has the same FWSM OS 4.0 (4) and is in factory default configuration
What procedures should I follow to make this unit live and sync the config between the current active unit to this one.
Can one of you please explain me the steps and if an link to an article which explains this will be great
Thanks,
ChandruHi Bro
Firstly, insert the newly purchased refurnished Cisco FWSM module into the slot, where the fault Cisco FWSM module was originally located. Second, paste into the configuration from the working unit to this newly purchased refurnished Cisco FWSM module. Note: Please do ensure under the failover commands, one side is primary and the other side is secondary. Lastly, issue the command show failover, to ensure the failover status i.e. NORMAL, is in good working condition.
I’ve done this countless times, you should do just fine. This is easy.
http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/fail_f.html
Regards,
Ram -
Cisco ISE Vs Cisco Anyconnect Posture module with Advanced Endpoint Protection
We are planning to use cisco Anyconnect posture module with Adv Endpoint protection to examine the VPN users- This can check whether they a antivirus/anti spyware software installed on their work station and can force to update def file if its older than specified number of days, it can also check the firewall status on their workstation and enable if its not already.This can detect keylogger and emulation softwares also.
Do we get any additional advantages in using ISE compared to Anyconnect posture module ......
SiddharthaThese are good questions. We had them last year before we decided to purchase ISE, specifically for our VPN users.
I will be watching this thread to see what kind of responses you get.
As of right now, I can verify the ISE can indeed check if specific Anti-Virus is installed (i.e., your corporate AntiVirus), or if ANY (supported by Cisco within ISE) antivirus is installed, and it can force an update process for the AV if it detects that the DAT files are older than a admin specified amount of time.
Our issue at the moment (if you haven't searched the forums) is ISE detected the proper WSUS updates are indeed installed on the users systems and allowing the users system to talk to our internal WSUS server.
We are now wondering if the Advanced Endpoint licensing on the ASA would have been a better way to go.
Wishing you luck in finding your answers for us all.
Dirk -
Install and configure Cisco Network Analysis Module NAM-2
Hi,
Does anyone have a step-by-step document on how to install and configure Cisco NAM-2 module ?
Thanks in advance.
Regards,
LamineHi Lamine,
The official installation guides for NAM software can be found here:
http://www.cisco.com/en/US/products/sw/cscowork/ps5401/prod_installation_guides_list.html
Is this what you are looking for?
Cheers,
Shane -
Has anybody experience with "Cisco Anomaly Guard Module"
Hello,
had anybody experience with "Cisco Anomaly Guard Module" WS-SVC-AGM-1-K9 for Catalyst 6500?
We're looking for some IDS/IPS prevention system which could take 2-3 Gbits of traffic. From the documentation it looks not bad, and we can get them as used parts (6500 + Sup720 + AGM +ADM) quite cheap. The second solution is Arbor with cisco12000 as boader router (10Gbit uplink) is much more expencevie.
Arbor tries of cause sell us their solution as "Cisco Anomaly Guard Module" is ot of sale and doesn't have any new features, but from the Data sheets Cisco AGM is eactly what we need.
Or may be is there another solution which could be comparable to those two?
Thank you.Hello padatta,
AGM/ADM are IDS/IPS systems, one can of couse discuss about the terms, but it won't be productive :).
IDSM2 has not enough performance and it should sit inline, ADM/AGM can change he next hop for the diverted traffic and be out of traffic path during the normal operation.
Konstantin -
Linksys Cisco WVC210 Network Camera - Problem
Hello Cisco Members,
I have problem with one Linksys Cisco WVC210 Network Camera.
When I Power ON, the PowerLED blinking, other 3 GreenLED light and on LCD Display have nothing.
I make 30 seconds push resset button, 30 seconds power OFF and havent result. When I connect it to
Router with DHCP, this camera can not take IP Address... I do not understand where is a problem with
this camera.
I write here to get a fix of this problem.
Regards,
VivendiTry power on and after 90 seconds go to the Browser and type in 192.168.1.99 (assuming you are on the 192.168.1.xx LAN network) and see if you are able to get to the firmware page, if yes try reload the firmware, if you are not then I would recommend returning the product by getting in touch with Cisco's Tech Support and get an RMA number and instructions on returning the product and get a replacement.
Alan. -
i am confused if this one
Cisco Catalyst 4507R Module WS X4424GB RJ 45, Multi-speed Gigabit Ethernet Switching Module (24-port)
would be compatible to its chasis if change by this one
WS-X4424-GBRJ45-RF
Catalyst 4000 24port 101001000 Module RJ45 REFURBISHEDYes it you get the refurbished with the good one then it would get detected and works fine.
BTW- This module is EOL /EOS and below is the replacement part for the same:
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/eol_c51_574038.html
WS-X4424-GB-RJ45
Catalyst 4500 24-port 10/100/1000 Module (RJ45)
Replacement-PartWS-X4548-GB-RJ45
Catalyst 4500 Enhanced 48-Port 10/100/1000 Base-T (RJ-45)
HTH
Regards
Inayath
***** Plz rate all usefull posts. -
Hi,
We are almost a week dealing with a very instable 6500.
What we see is that modules are undergoing a soft reset. When this reset fails the module has a faulty status. Resetting the module mostly solves the problem. But in some cases more then one module has this problem. Even the supervisor module is undergoing the same soft reset some time.
Here are the messages that appear in the logging.
1/07/2005,6:50:41,10.2.0.116,???,LOCAL,NOTICE,2005 Jul 01 06:47:58 %SYS-5-MOD_NOSCPPINGRESPONSE:Module 5 not responding... resetting module
1/07/2005,6:50:41,10.2.0.116,???,LOCAL7,NOTICE,2005 Jul 01 06:47:58 %SYS-5-MOD_RESET:Module 5 reset from Software
1/07/2005,6:50:43,10.2.0.116,???,LOCAL7,NOTICE,2005 Jul 01 06:48:00 %SYS-5-MOD_NOSCPPINGRESPONSE:Module 6 not responding... resetting module
1/07/2005,6:50:43,10.2.0.116,???,LOCAL7,NOTICE,2005 Jul 01 06:48:00 %SYS-5-MOD_RESET:Module 6 reset from Software
1/07/2005,6:53:36,10.2.0.116,???,LOCAL7,NOTICE,2005 Jul 01 06:50:52 %SYS-5-MOD_RMVDNLDSTOP:Download terminated for module 6. Module removed
1/07/2005,6:53:36,10.2.0.116,???,LOCAL7,NOTICE,2005 Jul 01 06:50:52 %SYS-5-MOD_DNLDFAIL:Download failed for module 6
1/07/2005,6:56:44,10.2.0.116,???,LOCAL7,EMERGENCY,2005 Jul 01 06:54:00 %SYS-0-MOD_NOSLCPRESPONSE:Module 1 SLCP not responding... resetting module
1/07/2005,6:56:44,10.2.0.116,???,LOCAL7,NOTICE,2005 Jul 01 06:54:00 %SYS-5-MOD_RESET:Module 1 reset from Software
What has been done:
Since module 5 always reboots first, this card had been replaced. Then we replaced the supervisor. Since still cards where rebooting we replaced the entire chassis. The power modules have also been replaced.
Anyone seen this problem before?
Many thanks!SBRU_01> (enable) sh ver
WS-C6509 Software, Version NmpSW: 7.3(2)
Copyright (c) 1995-2002 by Cisco Systems
NMP S/W compiled on Aug 1 2002, 17:18:44
System Bootstrap Version: 5.2(1)
Hardware Version: 2.0 Model: WS-C6509 Serial #: SCA041201PZ
PS1 Module: WS-CAC-1300W Serial #: SON04301066
PS2 Module: WS-CAC-1300W Serial #: SON04290510
Mod Port Model Serial # Versions
1 2 WS-X6K-SUP1-2GE SAD03384603 Hw : 5.0
Fw : 5.2(1)
Fw1: 5.1(1)CSX
Sw : 7.3(2)
Sw1: 7.3(2)
WS-F6020A SAD03405664 Hw : 2.0
2 48 WS-X6248-TEL SAD04130FP9 Hw : 1.0
Fw : 4.2(0.24)VAI78
Sw : 7.3(2)
3 48 WS-X6248-TEL SAD0412056T Hw : 1.0
Fw : 4.2(0.24)VAI78
Sw : 7.3(2)
4 48 WS-X6248-TEL SAD04130FJH Hw : 1.0
Fw : 4.2(0.24)VAI78
Sw : 7.3(2)
5 48 WS-X6248A-TEL SAL05062YWP Hw : 3.0
Fw : 5.4(2)
Sw : 7.3(2)
6 48 WS-X6248A-TEL SAL05106KV4 Hw : 2.0
Fw : 5.4(2)
Sw : 7.3(2)
DRAM FLASH NVRAM
Module Total Used Free Total Used Free Total Used Free
1 65408K 43089K 22319K 16384K 9993K 6391K 512K 377K 135K
Uptime is 0 day, 0 hour, 22 minutes
SBRU_01> (enable) sh mod
Mod Slot Ports Module-Type Model Sub Status
1 1 2 1000BaseX Supervisor WS-X6K-SUP1-2GE yes ok
2 2 48 10/100BaseTX Ethernet WS-X6248-TEL no ok
3 3 48 10/100BaseTX Ethernet WS-X6248-TEL no ok
4 4 48 10/100BaseTX Ethernet WS-X6248-TEL no ok
5 5 48 10/100BaseTX Ethernet WS-X6248A-TEL no other
6 6 48 10/100BaseTX Ethernet WS-X6248A-TEL no other
Mod Module-Name Serial-Num
1 SAD03384603
2 SAD04130FP9
3 SAD0412056T
4 SAD04130FJH
5 SAL05062YWP
6 SAL05106KV4
Mod MAC-Address(es) Hw Fw Sw
1 00-30-80-f7-7a-c2 to 00-30-80-f7-7a-c3 5.0 5.2(1) 7.3(2)
00-30-80-f7-7a-c0 to 00-30-80-f7-7a-c1
00-13-60-48-63-00 to 00-13-60-48-66-ff
2 00-01-97-09-77-f0 to 00-01-97-09-78-1f 1.0 4.2(0.24)V 7.3(2)
3 00-01-97-10-c3-30 to 00-01-97-10-c3-5f 1.0 4.2(0.24)V 7.3(2)
4 00-01-97-09-78-e0 to 00-01-97-09-79-0f 1.0 4.2(0.24)V 7.3(2)
5 00-30-96-37-98-14 to 00-30-96-37-98-43 3.0 5.4(2) 7.3(2)
6 00-02-7e-c1-dc-8c to 00-02-7e-c1-dc-bb 2.0 5.4(2) 7.3(2)
Mod Sub-Type Sub-Model Sub-Serial Sub-Hw
1 L2 Switching Engine II WS-F6020A SAD03405664 2.0 -
Eq 8080 commands not being entered on FWSM module
Hi There,
I'm having an issue with some Firewalls in my network. I have several firewall modules (WS-SVC-FWM-1) in 6509s,
FWSM Firewall Version 2.3(3) <system>
FWSM Device Manager Version 4.1(3)
I'm trying to enter the following rules
access-list ACL-IN extended permit ip host X.X.X.0 X.X.X.0 255.255.255.0 eq 8080
access-list ACL-IN extended permit ip host X.X.X.1 X.X.X.0 255.255.255.0 eq 8080
access-list ACL-IN extended permit ip host X.X.X.2 X.X.X.0 255.255.255.0 eq 8080
access-list ACL-OUT extended permit ip X.X.X.0 255.255.255.0 host X.X.X.0 eq 8080
access-list ACL-OUT extended permit ip X.X.X.0 255.255.255.0 host X.X.X.1 eq 8080
access-list ACL-OUT extended permit ip X.X.X.0 255.255.255.0 host X.X.X.2 eq 8080
What happens is, these commands don't go into the configuration, and I don't get an error, but any rule after it also does not get copied into the config when I copy and paste a list of commands. All the commands before it go in no problem.
Does it not like eq 8080? Can I not do 'permit ip' with an eq command? Do I have to use 'permit tcp' to enter the command?
Thanks.If you are going to specify a port you need to use the TCP or UDP protocol. You are specifying IP so you will get an error because of this.
-
6500 has IDSM-2 and FWSM modules
i got a task to configure Catalyst 6509 supervisor engin sup720-10g-3c and has FWSM and IDSM-2 service modules .
what consideration should i take and is there is any configuration example for both
thank you for your helpThey are many posts on this forum on this subject, did you try using the search function?
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_example09186a00809c37cb.shtml
Regards
Farrukh -
Dear,
I have some questions regarding the expansion modules on phones, specifically the 7916 ones.
If i have one with 12 physical buttons and 2 page buttons i can assume it's a 24 line button i have to set on the configuration page of the phone correct? Or am i seeing this wrong. Is there a handy way of knowing this directly?
I have a specific phone Cisco 7975 that has issues getting the 7916 addon module working, i have set a 7916 24 button on the config page of the phone. The addon module still shows the logo of Cisco and doesn't change.
The load is present on the call manager, i have seen it via "Device Defaults", shall i proceed in upgrading the 7916 firmware then on the Call Manager, maybe this can solve the problem?
CM version: 8.6.2Most of the times firmware phone/expansion
Just upgrade phone and expansion.
And you select 7975 with 7916 24 buttons or 12 buttons
JH -
MSI 785GM-E51 and memory modules problems
Could anyone help me with one problem. I have motherboard MSI 785GM-E51 and 4 memory modules GOODRAM GR 1333D364L9/2G. But when I'm inserting ALL modules my system not starting (even POST procedure). So working variants - when I'm inserting:
- one module in first (boot) slot
or
- they inserted in first and third memory slots
Any ideas?It is not motherboard problem, but processor itself - I have AMD Phenom II X4 965 Black Edition 3,4 Ghz Core Revision C2 and this revision (according to the article: http://www.fcenter.ru/online.shtml?articles/hardware/processors/27650#02) has problems with support memory modules DDR3-1333 Mhz more than 2 modules. Conclusion - either adjust BIOS settings concerning memory timings and memory controller voltage or replace this kind of processor with the same type but with core revision C3
-
Remote Function Module problem
Hi Experts,
I have written a Se38 progarm to execute a remote function module, so as to send some data out of the system. The receiving system is an XI system. Pls see below the code and the load at the XI end, I donno why and what mistake am I doing in the se38 program part, as a result of which, only part of the data is getting send to XI.
REPORT ZRFC_ADAPTER.
Data: it_final1 type standard table of zrfc_str with header line .
it_final1-NAME = 'ARNAB'.
it_final1-ADDRESS = 'ADDRESS'.
it_final1-EMAIL = 'EMAIL'.
it_final1-ID = 'ID'.
CALL FUNCTION 'ZRFC_XI'
IN BACKGROUND TASK DESTINATION
'R32XIRFC'
EXPORTING
username = sy-uname
tables
it_final = it_final1 .
break-point.
COMMIT WORK.
Clear it_final1.
I have seen in debugging mode, after removing the "
IN BACKGROUND TASK DESTINATION
'R32XIRFC'", that the internal table " it_final1 " is working fine......
The structure used in remote Function Module is
IT_FINAL LIKE ZRFC_STR -- in tables parameter. and the structure of ZRFC_STR is as follows!
NAME ZNAME CHAR 14
ADDRESS ZADDRESS CHAR 40
TELEPHONE ZTEL CHAR 20
EMAIL ZEMAIL CHAR 40
ID ZID CHAR 10
Note that , apart from a COMMIT WORK statement, there is no other coding done in the SOURCE CODE part of the remote Function Module.
The load in XI is showing as
<?xml version="1.0" encoding="UTF-8" ?>
<rfc:ZRFC_XI xmlns:rfc="urn:sap-com:document:sap:rfc:functions">
<USERNAME>RETAILDEV</USERNAME>
<IT_FINAL>
<item>
<NAME>ARNAB</NAME>
<ADDRESS>EMAIL</ADDRESS>
<EMAIL />
<ID />
</item>
</IT_FINAL>
</rfc:ZRFC_XI>
Note that EMAIL is actually a content of field EMAIL and not ADDRESS. But I donno why, it is behaving like this,,
Pls note, this RFC has been imported completely in integration repository of XI, so we dont have to worry about any settings change or activities, left pending in XI.
I am very sure, something is missing in the se38 code, pls suggest!!
Regards,
Arnab .Hi Arnab,
I am having really doubt that there is problem in field mapping.
COuld you please check the following.
In the FM structure contains 5 fields as follows,
NAME ZNAME CHAR 14
ADDRESS ZADDRESS CHAR 40
TELEPHONE ZTEL CHAR 20
EMAIL ZEMAIL CHAR 40
ID ZID CHAR 10
In the Internal Table it has got 4 fields. Check the Mapping properly
and data on each field.
t_final1-NAME = 'ARNAB'.
it_final1-ADDRESS = 'ADDRESS'.
it_final1-EMAIL = 'EMAIL'.
it_final1-ID = 'ID'.
Thanks & Regards,
Nagaraj Kalbavi -
Windows 2008 R2 on Cisco UCS B200M networking problems
This is driving me completely nuts. Let me start by saying I am new to blade servers and Cisco UCS. I did take an introduction class, and it seemed straight-forward enough. I have a chassis with two B200M blades, on which I am trying to configure two Windows 2008 R2 servers, which I will eventually make Hyper-V servers. This is all in a test environment, so I can do anything I want to on them.
Right now I have installed W2008 directly on hard disks on the B200M hardware.
The problem is this: even though I think I've configured the network hardware correctly, using the Cisco VIC driver software, I cannot get networking to work in any reliable way. I cannot even get ping to work consistantly. I can ping my local server address, but I cannot ping my gateway (HSRP address). When I try, I get a "Reply from 10.100.1.x: Destination host unreachable (x being each particular server's last octet). I CAN, however, ping the individual IP addresses of the core switches. I can also ping some, but not all, the other devices that share the servers' subnet. There are no errors being generated, the arp tables (for those devices I can ping) look good, netstat looks OK. But I cannot get outside the local subnet...
Except when I can.
There are times when I can get all the way out to the Internet, and I can download patches from Microsoft. When it works, it works as expected. But if I reboot the server, oftentimes networking stops working. Yet another reboot can get things going again. This happens even though I've made no changes to either the UCS configs or the OS.
I cannot figure out any reason when it works at some times and not at others. I've made sure I have a native VLAN set, I've tried pinning to specific ports on the Fabric Interconnects. There is just no rhyme or reason to it.
Anyone know of where I can look? I'm very familiar with Windows on stand-alone boxes (although it's no longer my area of expertise), and I manage a global WAN (BGP, OSPF, Nexus 7k, etc.) so I'm no dummy when it comes to networking, but I am utterly stumped on this one.The problem was this: while the NICs on the blade server are called vNIC0 and vNIC1, Windows was calling vNIC1 "Local Area Connection" and vNIC0 "Local Area Connection 2". So what I configured on UCS did not match what I was configuring in Windows. Completely, utterly ridiculous.
Anyway, networking is working now without any issues. Thanks for you suggestion; it did get me looking in the right direction.
Maybe you are looking for
-
Hi Folks, I created SharePoint reusable deigner work flow which has just 2 state approval process. I generated the wsp file with save template option and I successfully imported it into visual studio 2010 I just removed List from the tag and put my
-
Solaris 10 LDAP Clients Intermittently Fail
I'm working on a rather puzzling issue with some of our Solaris 10 systems authenticating against DSEE 6.3. These clients previously worked without issue but starting last week SSH connections would hang for a few minutes and then start working again
-
Well, I think I've finally realized that the CC messages I have setup on my controller for various functions are interfering with Logic's on messaging. I'm hitting the octave button and the song's freezing, moving a knob and parameters are changing,
-
Finance Position at Genentech. Company contact email listed below.
Genentech is the founder of the biotechnology industry and is instrumental in all areas of drug development from research to manufacturing and commercialization. The company has over $3 billion in revenues and over 6,000 employees, most of which are
-
Why is there 2 firefox in a window and how do I remove 1 without closing firefox
when I open firefox it used to have 1 line on it now it has a 2nd line below the first but if i try to close the bottom line it closes the whole window . I feel I do not need 2 bars @ the top cause it just takes up extra space @ the top which in turn