Cisco CE500 with dot1x issue

Hi,
I have a Cisco Switch CE500 and I need to function reliably dot1X. I used the "Network Assistant" and It did not work, dropped all ports connected to PCs that have the certificate. I have a network of switches running Cisco 2950/2960 with dot1x working properly. I access to http "exec mode" of the CE500 and I do comparing the text configuration between the CE500 and 2960, I edited the settings so that CE500 are the same text of 2960 but did not work.
I have the profile for the switch in my RADIUS Server. In the CE500 I have the ip address of the RADIUS, key, AAA RADIUS, "aaa new-model"
If, I eliminate the switch profile for the RADIUS, It logs me the device don't have profile for AAA.
Attached example files
ce500.txt ---- don't work
2960.txt ------ it´s working well
Help me please!

in my case the tip from another tread helped me out. The tip was to set on the 2008 NPS in the Connection Policy the Rádius standart Attribut Framed MTU to less than 1400.
In my case that made the deal !
Reiner

Similar Messages

EA6500 gets scathing review on CNET with critical issues

http://reviews.cnet.com/routers/linksys-ea6500-smart-wi/4505-3319_7-35441764-2.html
I'm wondering if anyone at Cisco is going to acknowledge the critical connectivity and signal issues with this model.

Cisco would make a big step to decide to make GOOD home routers instead of nice looking routers.
Radio wise I strongly suggest them to fall back and stay with external antenna's like many other manufacturers and like they do them selves with their professional access points. This will make users aware again that the box contains a radio transmitter and receiver and maybe give them a clue that the thing need some kind of freedom around it to do its work: reach wireless clients.
Also give the router air to breath and keep the temperature at healthy level.
With respect to 5 GHz: come on Cisco, release firmware that support DFS / TPC to really fully utilize the available 5 GHz frequency band and avoid neighbor disturbance. Without DFS / TPC the use of 5 GHz makes hardly sense (Broadcom seems to have released DFS / TPC drivers for their hardware....ohhhh wait...Cisco moved to Marvell).
Brings me to next point: Cisco, go back to Broadcom!
I really believe the world is at the end more interested in a good working device then the sleek saucer design. I bet that a slightly more expensive but rock solid router sells better then a cheaper sleek design with many issues. A router is for the majority of users a thing you want to buy, configure one time, put in operation and don't want to look after for the next 5 years.
With respect to to EA6500: keep in mind that the 802.11ac is still a draft standard, changes are expected with subsequent firmware updates (but you never know how that works out for Cisco and if or when they will release new firmware). I suggest for the majority of home users: select a standard that is no longer "draft" (for now: 802.11n).
Firmware: every firmware has bugs, so...Cisco: fix these bugs and release new firmware lets say at least twice a year and for at least the routers you sold in the past 5 years.
Do I at the end need to mention CCC? Ok: Cisco, get rid of it!

ISE with dot1x and Posture deployment in pararrel with certain users

Hi,
We want to deploy ISE in sequencial order, meaning that I will initially have all users authenticate/authorized with dot1x/MAB etc, then only on certain locations or users to have posture condition validation/verification while others not.
Can someone please advise whether this approach is possible, as far I understand, once you have posture policies in place as authorization rule it will hit all the users. This may be possible where you can match the switch or the location as a seperate condition, but if all users are spread/mixed we just need to find a simple way how to do it or whether it is not possible..?

We have modified the attached policy on rule 04 and 05 (from top) and add a new condition Device locationEqual "Switch1".According to this rule any user connected to Switch1 only do the posture and same user PCconnect any other switch (other than switch1), it should do only the dot1x/MAB (rule 1-3). But in our case user PC connect any other switch than switch1, it hit the ISE default policy(not included in this attachement) and also it pop-ups the NAC agent and do the posturing. Questions-why the PC/user is not hitting rule 1-3 and goes to default rule-why the PC/user is doing posture where there's no posture rule hitting.
Hi,
First of all, I would assume you configured the PC for machine or user authentication.
So, when a user connects to the network using other switch but not switch1, it will get 2 hits:
1. Computer authentication - this PC is part of Domain Computers
2. Default rule - because you configured (domain) user authentication for dot1x requests that are received only from switch1!
You haven't specified a rule for domain users alone (with no location condition) and with no posture.
You have to add something like this:
1. dot1x + Domain PC
2. dot1x + Domain User + location + preposture
3. dot1x + Domain User + location + posture compliant
4. dot1x + Domain User (and no posture condition)
To answer your second question, event though you 've excepted a certain user from posture, if NAC Agent is installed, it will popup and it will say that you're compliant, so practically it isn't doing posture
(http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_pos_pol.html)
Generating a Posture Requirement The run-time services requests for the posture requirement for the endpoint by looking up at the role to which the user belongs to and the operating system on the client. If you do not have a policy associated with the role, then the run-time services communicate to the NAC Agent with an empty requirement. If you have a policy associated with the role, then the run-time services run through the posture policies through one or more requirements associated with the policies and for each requirement through one or more conditions.
If you want to rollout for posture, you could use exception rules (check the top section of authorization rules) or you could do only posture audit for your rules so that everyone can get network access event though they're not compliant.

Cisco 6509 with Reliability 255/255, txload 238/255, rxload 8/255 interface

Hi there,
I'm having an issue with my Cisco 6509. One of Internet configured as trunk Interface direct with a HP7500 is showing reliability 255/255, txload 238/255, rxload 8/255.
The Issue is that my Cacti Server show me that only 10% of the link is in use but if you look at txload you can see that almost 100% of the bandwidth is in use..
What can I do in order to figure out what's going on with this Interface. I'm thing about to put wireshark and configure a port monitor in order to capture the packets.
Is anyone has any tip to do a troubleshoot with this issue??
SWITCH01#show int port-channel 10
Port-channel10 is up, line protocol is up (connected)
Hardware is EtherChannel, address is c47d.4fbf.a8c2 (bia c47d.4fbf.a8c2)
Description: CORECISCO_X_COREHP
MTU 1500 bytes, BW 2000000 Kbit, DLY 10 usec,
reliability 255/255, txload 238/255, rxload 8/255
Encapsulation ARPA, loopback not set
Full-duplex, 1000Mb/s
input flow-control is off, output flow-control is unsupported
Members in this channel: Gi8/19 Gi8/20
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters 1w0d
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 66043000 bits/sec, 23041 packets/sec
5 minute output rate 1871148000 bits/sec, 186439 packets/sec
15127300343 packets input, 6121405739799 bytes, 0 no buffer
Received 232321316 broadcasts (161670914 multicast)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
118621325538 packets output, 141124879219641 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
SWITCH01#
Regards
Adriano

This pretty much tells you your port channel is pretty full. How many ports in the channel?
5 minute input rate 66043000 bits/sec, 23041 packets/sec
5 minute output rate 1871148000 bits/sec, 186439 packets/sec

Cisco IronPort with On Premise Exchange 2013

Hello All
The company I work for is in the process of starting an on premise Exchange 2007 to Exchange 2013 migration.
Most of the issues I don't think I'll have an issue with; however, where I am not finding much info is in regards to other companies using Cisco IronPort with Exchange 2013.
SO, I have two questions within this topic...
One, is anyone using Cisco IronPort with Exchange 2013 (on premise) out here?
Two, my manager is very controlling. I am the Exchange Admin; however, anything having to do with this IronPort thing with regards to Exchange HE has to do it. So, if anyone is familiar with this IronPort thing... How much work on the IronPort is going
to have to be done during this migration to keep things going?

It shouldn't be any different with Exchange 2013 than it is with Exchange 2007.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Cisco 1700 with MP-BGP and VRF support

I have a Cisco 1721 with MP-BGP Support, you can create VRFs with it and every other MPLSVPN feature, but the commands for MPLS switching are not supported like Router(config-if)mpls ip , I read in some forums that you can create MPLS VPN without enabling MPLS at all, just with MPBGP, but I couldn't do it myself, Can someone tell me how to make it work or what can I do with a Cisco 1721 that supports MP-BGP?
thanks in advance

Here is an example. Take care about overhead for packets like VoIP. The overhead is 88 bytes.
The packet semms something like that.
IpHeader-pub@ - NAT-Tudp4500 - ESP - IpHeader-priv@(vrf discriminator) - GRE - Original IP Header - Data - Esp Trailer.
In this case you neet tunnel-mode because you use
private @ in order to determine vrf (vrf discriminator).
This is a LAB config, all other security parameters you need on a router are not configured. If you add access-list on the external interface of REMOTE you have to understand every encapsulation step in order to well tune it.
Good reading.
The PPT draw shows physically and logically views.
PS, take care about fragmentation issues, the problematic is still not well managed by the routers, I could not made Tunnel-path-mtu discovery work with vrf's. The workaround is to fragment packets. It's not good for performance but actually there is no other solution concerning that.
Kind Regards
Miguel

Trouble connecting Cisco router with cable modem for Internet purposes

So I am requesting help from the Cisco community on this issue as the cable company states there equipment is working fine. At all my facilities I have a guest Internet service setup through a local Internet provide to provide Internet services to the residents and guests. I have the cable modem usually a Motorola SBG6580 or a SMC 8014 (both provided by cable company) connected to my router on a FE or GE interface. I am using static IPs and using the cable modem just as a modem (bridge mode). Over the past several months these connections have just stopped working. I have not made any drastic changes to my router configs; however, the cable company has updated the firmware on these modems. I am wondering if that could affected how the modem and router talk. I was told by the cable company that the modem sees the Cisco router but that the port is inactive. My router shows the port is active and traffic passing. Does anyone have any ideas that could point where the problem lies? I will post a basic config to one that currently does not work. I am using a VRF to route a certain group out, using NAT. Please let me know if I need to post additional info. Any help would be greatly appreciated.
Cisco CISCO2911/K9
Version 15.2(3)T1
service timestamps debug datetime localtime
service timestamps log datetime localtime show-timezone
service password-encryption
hostname 1204RTR01
boot-start-marker
boot system flash0:c2900-universalk9-mz.SPA.152-3.T1.bin
boot system flash0:c2900-universalk9-mz.SPA.151-3.T.bin
boot-end-marker
card type t1 0 0
logging buffered 64000
aaa new-model
aaa session-id common
clock timezone cst -6 0
clock summer-time CDT recurring
no ipv6 cef
no ip source-route
ip vrf 5
rd 5:1
ip multicast-routing
1
ip dhcp pool Guest
vrf 5
network 10.51.XXX.0 255.255.255.0
default-router 10.51.XXX.XXX
dns-server 209.18.47.61 209.18.47.62
ip flow-cache timeout active 1
no ip bootp server
no ip domain lookup
ip cef
multilink bundle-name authenticated
application
global
service alternate default
license udi pid CISCO2911/K9 sn FTX1508AHTM
hw-module pvdm 0/0
redundancy
ip tcp synwait-time 10
interface GigabitEthernet0/0.5
description Guest VLAN
encapsulation dot1Q 5
ip vrf forwarding 5
ip address 10.51.xx.xxx 255.255.255.0
no ip redirects
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
interface GigabitEthernet0/2
description Guest Intenet access
ip vrf forwarding 5
ip address 24.242.182.182 255.255.255.252   <--Cable company IP, Modem IP is 24.242.182.181
ip nat outside
ip virtual-reassembly in
load-interval 30
duplex auto
speed auto
ip forward-protocol nd
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 9 interface GigabitEthernet0/2 vrf 5 overload
ip route vrf 5 0.0.0.0 0.0.0.0 24.242.182.181
access-list 9 permit 10.51.204.0 0.0.0.255

Ok, mysteriously this location just started working yesterday, but I still am dealing with seven others and I really would like to know what is going on. I will give you everything you may need and let me know.
Config:
version 15.2
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime show-timezone
service password-encryption
hostname 1112RTR01
boot-start-marker
boot system flash0:c2900-universalk9-mz.SPA.152-3.T1.bin
boot system flash0:c2900-universalk9-mz.SPA.151-1.T.bin
boot-end-marker
aaa new-model
aaa session-id common
clock timezone CDT -6 0
clock summer-time CDT recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
no ipv6 cef
no ip source-route
ip vrf GuestVRF
rd 5:1
ip multicast-routing
ip dhcp pool Guest
vrf GuestVRF
network 10.51.112.0 255.255.255.0
default-router 10.51.112.1
dns-server 209.18.47.61 209.18.47.62
ip flow-cache timeout active 1
no ip bootp server
no ip domain lookup
ip cef
application
global
service alternate default
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0.5
description Guest VLAN
encapsulation dot1Q 5
ip vrf forwarding GuestVRF
ip address 10.51.112.1 255.255.255.0
no ip redirects
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
interface GigabitEthernet0/1
description Guest Internet (Time Warner Connection)
ip vrf forwarding GuestVRF
ip address 97.77.116.234 255.255.255.252
ip nat outside
ip virtual-reassembly in
load-interval 30
duplex auto
speed auto
ip forward-protocol nd
ip nat inside source list 5 interface GigabitEthernet0/1 vrf GuestVRF overload
ip route vrf GuestVRF 0.0.0.0 0.0.0.0 97.77.116.233
access-list 5 permit 10.51.112.0 0.0.0.255
control-plane
end
router#sh ip arp vrf GuestVRF
router#Internet 97.77.116.233           2   f80b.bee7.e09f ARPA   GigabitEthernet0/1
Protocol Address          Age (min) Hardware Addr   Type   Interface
Internet 97.77.116.234           -   8843.e13c.8d99 ARPA   GigabitEthernet0/1
router#ping vrf GuestVRF 97.77.116.233
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 97.77.116.233, timeout is 2 seconds:
Success rate is 0 percent (0/5)
router#sh int g0/1
GigabitEthernet0/1 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is 8843.e13c.8d99 (bia 8843.e13c.8d99)
Description: Guest Internet (Time Warner Connection)
Internet address is 97.77.116.234/30
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:00:10
Input queue: 76/75/15/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
30 second input rate 3000 bits/sec, 7 packets/sec
30 second output rate 0 bits/sec, 0 packets/sec
     81 packets input, 4860 bytes, 0 no buffer
     Received 81 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 12 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     16 packets output, 1193 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
router#sh int g0/1
GigabitEthernet0/1 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is 8843.e13c.8d99 (bia 8843.e13c.8d99)
Description: Guest Internet (Time Warner Connection)
Internet address is 97.77.116.234/30
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:00:42
Input queue: 76/75/67/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
30 second input rate 3000 bits/sec, 7 packets/sec
30 second output rate 1000 bits/sec, 2 packets/sec
     408 packets input, 24480 bytes, 0 no buffer
     Received 408 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 61 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     72 packets output, 5669 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
I am receiving packets in and out of the interface but I cannot ping the modem through the VRF.
router#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
udp 97.77.116.234:3169 10.51.112.39:3169 209.18.47.62:53    209.18.47.62:53
udp 97.77.116.234:8534 10.51.112.39:8534 209.18.47.61:53    209.18.47.61:53
udp 97.77.116.234:12244 10.51.112.39:12244 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:14002 10.51.112.39:14002 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:23623 10.51.112.39:23623 209.18.47.62:53   209.18.47.62:53
udp 97.77.116.234:24489 10.51.112.39:24489 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:24550 10.51.112.39:24550 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:27458 10.51.112.39:27458 209.18.47.62:53   209.18.47.62:53
udp 97.77.116.234:28603 10.51.112.39:28603 209.18.47.62:53   209.18.47.62:53
udp 97.77.116.234:37404 10.51.112.39:37404 209.18.47.62:53   209.18.47.62:53
udp 97.77.116.234:53942 10.51.112.39:53942 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:58125 10.51.112.39:58125 209.18.47.62:53   209.18.47.62:53
udp 97.77.116.234:64797 10.51.112.39:64797 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:56925 10.51.112.52:56925 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:56925 10.51.112.52:56925 209.18.47.62:53   209.18.47.62:53
udp 97.77.116.234:62342 10.51.112.52:62342 209.18.47.62:53   209.18.47.62:53
tcp 97.77.116.234:36559 10.51.112.69:36559 199.167.177.46:1227 199.167.177.46:1227
tcp 97.77.116.234:48895 10.51.112.69:48895 54.195.253.126:5223 54.195.253.126:5223
tcp 97.77.116.234:58385 10.51.112.69:58385 54.195.243.137:5223 54.195.243.137:5223
Pro Inside global      Inside local       Outside local      Outside global
tcp 97.77.116.234:58658 10.51.112.71:58658 31.13.66.165:443 31.13.66.165:443
udp 97.77.116.234:3066 10.51.112.72:3066 209.18.47.62:53    209.18.47.62:53
udp 97.77.116.234:3884 10.51.112.72:3884 209.18.47.61:53    209.18.47.61:53
udp 97.77.116.234:6656 10.51.112.72:6656 209.18.47.61:53    209.18.47.61:53
udp 97.77.116.234:11194 10.51.112.72:11194 209.18.47.61:53   209.18.47.61:53
udp 97.77.116.234:11774 10.51.112.72:11774 209.18.47.62:53   209.18.47.62:53
Let me know if you need anything else. I need to figure this out and I just don't get it because the other site wasn't working a few days ago and all of a sudden it is working again but others are still not.

Cisco 1841 with PPP Internet link down

Hi brothers, please help.
We have Cisco 1841 with ATM card connect to Internet . Some days one Dialer interface of ISP is down and only restart router to get Dialer interface up again. I check debug PPP negotiation & see that no inbound packets from ISP.
I really need to fix this issue permanently, not need to restart router to recover Internet.
Thanks!
All line protocol from ATM0/0/0 & Dialer interfaces are up, but Dialer interface cannot get allocated IP addresses.
interface ATM0/0/0
description ISP Internet
no ip address
no atm ilmi-keepalive
dsl operating-mode itu-dmt
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 2
interface Dialer2
description ISP Internet 1
mtu 1492
bandwidth 8000
ip address negotiated
ip nat outside
no ip virtual-reassembly in
encapsulation ppp
dialer pool 2
dialer-group 2
ppp authentication chap callin
ppp chap hostname xxx
ppp chap password 7 xxx
no cdp enable
wr1#show ip int br
Interface                  IP-Address      OK? Method Status                Protocol
ATM0/0/0                   unassigned      YES NVRAM up                    up
ATM0/1/0                   unassigned      YES NVRAM up                    up
Dialer2                    unassigned      YES IPCP   up                    up
wr1#show int atm0/0/0
ATM0/0/0 is up, line protocol is up
Hardware is HWIC-DSLSAR (with Alcatel ADSL Module), address is 001f.9e87.xxx(bia 001f.9e87.xxx)
Description: ISP Internet
MTU 4470 bytes, sub MTU 4470, BW 832 Kbit/sec, DLY 610 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ATM, loopback not set
Keepalive not supported
Encapsulation(s): AAL5
23 maximum active VCs, 256 VCs per VP, 1 current VCCs
VC Auto Creation Disabled.
VC idle disconnect time: 300 seconds
Last input never, output 23:48:07, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 1084
Queueing strategy: Per VC Queueing
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
     58124 packets input, 30790858 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 348 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     51848 packets output, 16773091 bytes, 0 underruns
     6 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
wr1#show int dia2
Dialer2 is up, line protocol is up (spoofing)
Hardware is Unknown
Description: ISP Internet
Internet address will be negotiated using IPCP
MTU 1492 bytes, BW 8000 Kbit/sec, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP Closed, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 1 seconds on reset
Interface is bound to Vi2
Last input never, output never, output hang never
Last clearing of "show interface" counters 1d00h
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: Class-based queueing
Output queue: 0/1000/0 (size/max total/drops)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
     52937 packets input, 30470954 bytes
     52931 packets output, 17287959 bytes
Bound to:
Virtual-Access2 is up, line protocol is down
Hardware is Virtual Access interface
MTU 1492 bytes, BW 8000 Kbit/sec, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP REQsent
PPPoATM vaccess, cloned from Dialer2
Vaccess status 0x44
Bound to ATM0/0/0 VCD: 1, VPI: 0, VCI: 38, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 5 seconds on reset
Interface is bound to Di2 (Encapsulation PPP)
Last input 00:00:09, output never, output hang never
Last clearing of "show interface" counters 1d00h
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 40403
Queueing strategy: Class-based queueing
Output queue: 65/1000/0 (size/max total/drops)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
     58124 packets input, 30591958 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     93405 packets output, 17935575 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions
syslog for debug ppp negotiation:
2014-09-10 08:49:31   Local7.Notice   local IP address   801: wr1.lon: .Sep 10 01:51:33.803: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0/0/0, changed state to down
2014-09-10 08:49:32   Local7.Notice   local IP address   804: wr1.lon: .Sep 10 01:51:35.247: %TRACKING-5-STATE: 3 ip sla 3 state Up->Down
2014-09-10 09:13:40   Local7.Error   local IP address   808: wr1.lon: Sep 10 02:15:42.646: %LINK-3-UPDOWN: Interface ATM0/0/0, changed state to up
2014-09-10 09:13:40   Local7.Notice   local IP address   809: wr1.lon: Sep 10 02:15:43.646: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0/0/0, changed state to up
2014-09-10 09:13:45   Local7.Error   local IP address   810: wr1.lon: Sep 10 02:15:48.957: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
2014-09-10 09:13:45   Local7.Debug   local IP address   811: wr1.lon: Sep 10 02:15:48.961: Interface Virtual-Access2 max_reserved_bandwidth config will not
2014-09-10 09:13:45   Local7.Debug   local IP address   812: wr1.lon: take effect on the queueing features configured via service-policy
2014-09-10 09:13:45   Local7.Info   local IP address   813: wr1.lon: Sep 10 02:15:48.965: %DIALER-6-BIND: Interface Vi2 bound to profile Di2
2014-09-10 09:13:45   Local7.Debug   local IP address   814: wr1.lon: Sep 10 02:15:48.965: Vi2 PPP: Sending cstate UP notification
2014-09-10 09:13:45   Local7.Debug   local IP address   815: wr1.lon: Sep 10 02:15:48.969: Vi2 PPP: Processing CstateUp message
2014-09-10 09:13:45   Local7.Debug   local IP address   816: wr1.lon: Sep 10 02:15:48.973: PPP: Alloc Context [662C56A4]
2014-09-10 09:13:45   Local7.Debug   local IP address   817: wr1.lon: Sep 10 02:15:48.973: ppp3 PPP: Phase is ESTABLISHING
2014-09-10 09:13:45   Local7.Debug   local IP address   818: wr1.lon: Sep 10 02:15:48.973: Vi2 PPP: Using dialer call direction
2014-09-10 09:13:45   Local7.Debug   local IP address   819: wr1.lon: Sep 10 02:15:48.973: Vi2 PPP: Treating connection as a callout
2014-09-10 09:13:45   Local7.Debug   local IP address   820: wr1.lon: Sep 10 02:15:48.973: Vi2 PPP: Session handle[14000004] Session id[3]
2014-09-10 09:13:45   Local7.Debug   local IP address   821: wr1.lon: Sep 10 02:15:48.973: Vi2 LCP: Event[OPEN] State[Initial to Starting]
2014-09-10 09:13:45   Local7.Debug   local IP address   822: wr1.lon: Sep 10 02:15:48.973: Vi2 PPP: No remote authentication for call-out
2014-09-10 09:13:45   Local7.Debug   local IP address   823: wr1.lon: Sep 10 02:15:48.973: Vi2 LCP: O CONFREQ [Starting] id 1 len 14
2014-09-10 09:13:45   Local7.Debug   local IP address   824: wr1.lon: Sep 10 02:15:48.973: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:13:46   Local7.Debug   local IP address   825: wr1.lon: Sep 10 02:15:48.973: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:13:46   Local7.Debug   local IP address   826: wr1.lon: Sep 10 02:15:48.973: Vi2 LCP: Event[UP] State[Starting to REQsent]
2014-09-10 09:13:48   Local7.Debug   local IP address   827: wr1.lon: Sep 10 02:15:50.965: Vi2 LCP: O CONFREQ [REQsent] id 2 len 14
2014-09-10 09:13:48   Local7.Debug   local IP address   828: wr1.lon: Sep 10 02:15:50.965: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:13:48   Local7.Debug   local IP address   829: wr1.lon: Sep 10 02:15:50.965: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:13:48   Local7.Debug   local IP address   830: wr1.lon: Sep 10 02:15:50.965: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:13:50   Local7.Debug   local IP address   831: wr1.lon: Sep 10 02:15:52.981: Vi2 LCP: O CONFREQ [REQsent] id 3 len 14
2014-09-10 09:13:50   Local7.Debug   local IP address   832: wr1.lon: Sep 10 02:15:52.981: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:13:50   Local7.Debug   local IP address   833: wr1.lon: Sep 10 02:15:52.981: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:13:50   Local7.Debug   local IP address   834: wr1.lon: Sep 10 02:15:52.981: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:13:52   Local7.Debug   local IP address   835: wr1.lon: Sep 10 02:15:54.996: Vi2 LCP: O CONFREQ [REQsent] id 4 len 14
2014-09-10 09:13:52   Local7.Debug   local IP address   836: wr1.lon: Sep 10 02:15:54.996: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:13:52   Local7.Debug   local IP address   837: wr1.lon: Sep 10 02:15:54.996: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:13:52   Local7.Debug   local IP address   838: wr1.lon: Sep 10 02:15:55.000: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:13:54   Local7.Debug   local IP address   839: wr1.lon: Sep 10 02:15:57.012: Vi2 LCP: O CONFREQ [REQsent] id 5 len 14
2014-09-10 09:13:54   Local7.Debug   local IP address   840: wr1.lon: Sep 10 02:15:57.012: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:13:54   Local7.Debug   local IP address   841: wr1.lon: Sep 10 02:15:57.012: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:13:54   Local7.Debug   local IP address   842: wr1.lon: Sep 10 02:15:57.012: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:13:56   Local7.Debug   local IP address   843: wr1.lon: Sep 10 02:15:59.028: Vi2 LCP: O CONFREQ [REQsent] id 6 len 14
2014-09-10 09:13:56   Local7.Debug   local IP address   844: wr1.lon: Sep 10 02:15:59.028: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:13:56   Local7.Debug   local IP address   845: wr1.lon: Sep 10 02:15:59.028: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:13:56   Local7.Debug   local IP address   846: wr1.lon: Sep 10 02:15:59.028: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:13:58   Local7.Debug   local IP address   847: wr1.lon: Sep 10 02:16:01.044: Vi2 LCP: O CONFREQ [REQsent] id 7 len 14
2014-09-10 09:13:58   Local7.Debug   local IP address   848: wr1.lon: Sep 10 02:16:01.044: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:13:58   Local7.Debug   local IP address   849: wr1.lon: Sep 10 02:16:01.044: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:13:58   Local7.Debug   local IP address   850: wr1.lon: Sep 10 02:16:01.044: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:14:00   Local7.Debug   local IP address   851: wr1.lon: Sep 10 02:16:03.060: Vi2 LCP: O CONFREQ [REQsent] id 8 len 14
2014-09-10 09:14:00   Local7.Debug   local IP address   852: wr1.lon: Sep 10 02:16:03.060: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:14:00   Local7.Debug   local IP address   853: wr1.lon: Sep 10 02:16:03.060: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:14:00   Local7.Debug   local IP address   854: wr1.lon: Sep 10 02:16:03.060: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:14:02   Local7.Debug   local IP address   855: wr1.lon: Sep 10 02:16:05.075: Vi2 LCP: O CONFREQ [REQsent] id 9 len 14
2014-09-10 09:14:02   Local7.Debug   local IP address   856: wr1.lon: Sep 10 02:16:05.075: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:14:02   Local7.Debug   local IP address   857: wr1.lon: Sep 10 02:16:05.075: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:14:02   Local7.Debug   local IP address   858: wr1.lon: Sep 10 02:16:05.075: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:14:04   Local7.Debug   local IP address   859: wr1.lon: Sep 10 02:16:07.091: Vi2 LCP: O CONFREQ [REQsent] id 10 len 14
2014-09-10 09:14:04   Local7.Debug   local IP address   860: wr1.lon: Sep 10 02:16:07.091: Vi2 LCP:    MRU 1492 (0x010405D4)
2014-09-10 09:14:04   Local7.Debug   local IP address   861: wr1.lon: Sep 10 02:16:07.091: Vi2 LCP:    MagicNumber 0x24FF1F46 (0x050624FF1F46)
2014-09-10 09:14:04   Local7.Debug   local IP address   862: wr1.lon: Sep 10 02:16:07.091: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]
2014-09-10 09:14:06   Local7.Debug   local IP address   863: wr1.lon: Sep 10 02:16:09.107: Vi2 PPP DISC: LCP failed to negotiate
2014-09-10 09:14:06   Local7.Debug   local IP address   864: wr1.lon: Sep 10 02:16:09.107: PPP: NET STOP send to AAA.
2014-09-10 09:14:06   Local7.Debug   local IP address   865: wr1.lon: Sep 10 02:16:09.107: Vi2 PPP: No remote authentication for call-out
2014-09-10 09:14:06   Local7.Debug   local IP address   866: wr1.lon: Sep 10 02:16:09.107: Vi2 LCP: Event[Timeout-] State[REQsent to Stopped]
2014-09-10 09:14:06   Local7.Debug   local IP address   867: wr1.lon: Sep 10 02:16:09.107: Vi2 LCP: Event[DOWN] State[Stopped to Starting]
2014-09-10 09:14:06   Local7.Debug   local IP address   868: wr1.lon: Sep 10 02:16:09.107: Vi2 PPP: Phase is DOWN

Hello ,
As line comes up after reloading the device this does not looks like configuration issue but hardware .
Either connection between ATM card and modem is getting idle or some issue with ATM card .
Did you try replacing ATM card with a spare one to see if issue persists .
HTH
Sunil Bhadauria
! Kindly rate all helpful posts and accordingly mark correct answers to help forum !

I have an older iMAC that once burned CD's with no issues. Now I get an error message saying "The attempt to burn a disc failed. The device is not accessible, probably because it was removed". I have never had it touched so the device was not removed.Help

I have an olde iMac that once I have an older iMAC that once burned CD's with no issues. Now I get an error message saying "The attempt to burn a disc failed. The device is not accessible, probably because it was removed". I have never had it touched so the device was not removed. Please advise as to what could be the problem. How to fix. Thanks

Try resetting the SMC and PRAM first, if that doesn't help try a cleaning disc.....and then buy an inexpensive external burner. Slimline super drive failures are all too common.
To reset the SMC
Shut down the computer.
Unplug the computer's power cord.
Wait fifteen seconds.
Attach the computer's power cord.
Wait five seconds, then press the power button to turn on the computer.
Resetting NVRAM / PRAM
Shut down your Mac.
Locate the following keys on the keyboard: Command (⌘), Option, P, and R. You will need to hold these keys down simultaneously in step 4.
Turn on the computer.
Press and hold the Command-Option-P-R keys before the gray screen appears.
Hold the keys down until the computer restarts and you hear the startup sound for the second time.
Release the keys.

Question for those with memory issues on k8n neo plat

I have been having issues with my memory on the k8n neo platinum board since i built the system last month and i just recently discovered a fact I had overlooked.
I Have discovered that if i test the system while it is cool (having sat turned off overnight for example), then memtest will pass the ram just fine and the system will be stable for a short period of time, generally longer if no intensive applications are used, ie. doom3 vs. websurfing).
This system, once it heats up ( seems mostly to be the nvidia 3 nb that needs to be "hot"- that is, a probe placed in contact with the module reaches about 58+ degrees c) then the system becomes unstable and memtest, if used, fails.
Prime95, if used on it when its cool, will usually take about an hour or so to fail, but if its used on the system when its been running a bit ( temps from nb at 58c+ and memory module hot to the touch) then it fails after about 20-30 seconds.
I have placed an active hs on the nb in an attempt to correct this, but temps still remain high with failures occuring.
I have spent the better part of three days testing the sytem this way and the above facts have held true in all these tests.
I have tested at stock ratings ( not using "auto" in bios, but using "approved ratings" of 10 x 200 for fsb and timings of 2-3-3-7 for my ram at 1:1 (which is recommended as well) since i am testing for base stability at this point;Voltages have been left at auto settings, however.
I was wondering if anyone else with memory issues could try this out and post if this seems to be the case for you as well.
Perhaps the memory issues on these boards are directly related to a problem with the nvidia 3 chipset running too hot?
Does anyone have a memory issue with these boards who is using water cooling on the NB ?
Lack of issues from people using 'problem" memory, but having no failures with water cooled nb's would support my assumption.

Yes i did mean chipset.
I am using a stock hs/fan from amd, which seems to run a tad hot but, considering that I wont overclock until I can get board stable, its not an issue. (runs 35-40 idle and up to 72 intensive). I need the warranty more then the extra mhz at present.
I removed the stock heatsink from the nvidia chipset and bought a generic chipset cooler (green, very little in the way of fins and seems to be aluminum) with a small fan.
I used a generic silver paste from Compusa to adhere both the cpu hs and the chipset.
I didnt lap either hs, just installed each as per instructions on artic silvers website (figured it had to go on the same way even generic).
I also bought a kingwin thermal center which i ran probes from to the cpu, case, and nb chipset.
I am not using it to adjust fans so those arent connected - its just a reference temp I can see at a glance, esp considering the funky bios reading this boards been known to give.
I assume from these responces that even a nvidia 3 250 chipset shouldnt get as hot as mine?
I asked about that from the retailer i bought this from but he seemed to think it was "ok" at 50ish celcius, but then again he didnt look too confident when he said it, lol.
Idle right now reads on Corecenter at 28 celcius for cpu and 33 celcius for the chipset, although, I have readings of 37 c and 43 c from the kingwin thermal center, which i believe to be more accurate.
My voltage reads at 11.67 for the 12v line at idle right now.
The psu i got is stick from the xblade case i bought in store. (http://www.xoxide.com/xblade2.html)
I have a dvd burner, cd drive, and two maxtor ide hd's attached to the system;The only card is the agp.
Is there a way to check and see if the cpu ispower starved? software monitor or even an external probe perhaps?
I havent put a probe on it, but the ram came in its own heatspreader, which gets very hot to the touch as well.
What temps should I be looking for on these items?

Is there an issue with the hitachi hard drives in the MacBook Pro's ? Got a 15 inch and a 13 inch at the same time and both drives have failed in under two years. I have heard from a few other people with same issue.

Is there an issue with the hitachi hard drives in the MacBook Pro's ? Got a 15 inch and a 13 inch at the same time and both drives have failed in under two years. I have heard from a few other people with same issue. Other drive I have had have lasted at least 5 or more years.

there is a dylib you can put in the springboard if jailbroken but if not you have to find an apple store

Sales orders with credit issues taking availability stock

Hi,
I am doing confirmation using Global ATP in APO. The confirmation is well done, but the confirmed quantity for sales orders with clients that have credit issues is taken the available sotck for other sales orders with ok clients that I want to confirm the quantity they ordered.
For example:
Stock: 10 PC
Client A order 15 PC and 10 are confirmed, but the ordered is retained becuse of credit issues with client A.
Then client B order 3 PC, but nothing is confirmed because the ordered for client A is reserving the stock (note: this would be ok if client A had not credit issues).
So, I want that the 3 PC for client B are confirmed and the 10 PC not reserved for the cient A while client A has credit issues.
How could I configured, so that the orders with credit issues do not reserve stock for the incoming orders?
Thanks a lot.

Hi DB49,
thanks for the quick answer.
I checked the configuration in the R3 and seems to be fine. To prove it, I disconnect APO and did the availability check in the R3 system and it is working fine; the orders quantities that are blocked because of credit issues, do not reserve stock for incoming orders.........son new incoming orders are well confirmed.
But after connecting APO the problem continues. I checked the next points.
In R3 transaction CO09: takes to the APO screen and you see the ATP available quantity OK (do not consider the quantities of the credit issues orders). But at the moment that you make the order (VA01) it does not confirm any stock and if you select the line and go to the ATP screen (the same you get from the CO09) the quantities of credit issues orders are taken into account..the ATP availability quantity changes from the first going directly from the CO09.
What could it be?
Note: it was working fine with APO, I started to have the issue after implementing note 1262475 in APO. This note was becuase the BAPI_APOATP_CHECK was not brigning any value for the ATPQTY_***.
Thanks a lot!!!

Report with grouping issue

I have a report which have year(2008), Category(0-1,2-3, ALL), product(0,1,2,3,4..), % sales. I group by all the category elements and called it as All, I am not getting the right percentage sales for the Category ALL other wise for 0-1,2-3 i am getting it right. Please advise where i am doing it wrong. please find the blog for a screen shot of my issue.
http://ravibiblog.blogspot.com/2012/04/report-with-grouping-issue.html
Thanks,
RC

Pl post details of OS, database and EBS versions. Pl see if these MOS Docs can help
FARXPBSH Failing With "Program was terminated by signal 11" or "Program was terminated by signal 10"          (Doc ID 742729.1)
Publishing RXAPPYAC: The FARXPBSH Ends With 'Signal 11' Error          (Doc ID 432797.1)
RXi RX Reports Failing With Program Was Terminated By Signal 10 or 11 Errors After FA Rollup Patch 6          (Doc ID 737963.1)
Program was Terminated by Signal 11 when Running Rxi Reports          (Doc ID 559425.1)
HTH
Srini

I am using Windows 7 Home Premium 64-bit OS. I've never had this problem before... today I opened iTunes and it prompted me to download the newest version. I use iTunes all the time and have updated it multiple times with no issues. During the installa

I am using Windows 7 Home Premium 64-bit OS.I've never had this problem before... today I opened iTunes and it prompted me to download the newest version. I use iTunes all the time and have updated it multiple times with no issues. During the installation process it gave me an error message that said:
Runtime error!
Program C:\Program Files\iTunes.exe
R0634
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
I quit the installation, uninstalled iTunes and rebooted my computer. I now receive a similar message with a slight difference:
Runtime error!
Program C:\Program Files (x86)...
R0634
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
I did not leave anything out from the error message. It doesn't point to a specific file, it just ends with "(x86)..." Every time I boot up my computer, this error message pops up on my desktop.
How do I repair this issue? I have found multiple suggested solutions but am unsure which one is the best, and I don't want to try a bunch of different things for fear I may make the problem worse. I would like to try and fix this myself if possible but I need to know if that is really possible or if I need to take my computer to someone for repairs. Any suggestions will be greatly appreciated!!

Hi lustyln,
I'm having a little trouble understanding all of what you are trying to explain. From what I can tell, it sounds like your PC has a lot of software problems and you want to know what is supposed to be there and what isn't.
For reference, here are your product specifications:
http://h10025.www1.hp.com/ewfrf/wc/document?cc=us&dlc=en&docname=c01893242&lc=en&product=4043282
To get your PC software back to how it was when it was first purchased, run a system recovery:
http://h10025.www1.hp.com/ewfrf/wc/document?cc=us&dlc=en&docname=c01867418&lc=en&product=4043282
I hope this helps.
...an HP employee just trying to help where I can, but not speaking on behalf of HP.

After upgrading to mountain lion i keep getting an error message saying my startup disc is full. it shouldnt be full because there is barely anything on there and i was running windows with bootcamp prior to this with no issues

after upgrading to mountain lion i keep getting an error message saying my startup disc is full. it shouldnt be full because there is barely anything on there and i was running windows with bootcamp prior to this with no issues. my computer now freezes and programs close randomly. The usual command for opening windows with bootcamp doesnt work. once in restarted my computer after it froze and it rebooted in windows automatically. i really just want to know if there is a way to take the upgrade off my laptop because it is very annoying.

Hi Memalyn
Essentially, the bare issue is that you have a 500GB hard drive with only 10GB free. That is not sufficient to run the system properly. The two options you have are to move/remove files to another location, or to install a larger hard drive (eg 2TB). Drive space has nothing to do with SMC firmware, and usually large media files are to blame.
My first recommendation is this: download and run the free OmniDiskSweeper. This will identify the exact size of all your folders - you can drill down into the subfolders and figure out where your largest culprits are. For example, you might find that your Pictures folder contains both an iPhoto Library and copies that you've brought in from a camera but are outside the iPhoto Library structure. Or perhaps you have a lot of purchased video content in iTunes.
If you find files that you KNOW you do not need, you can delete them. Don't delete them just because you have a backup, since if the backup fails, you will lose all your copies.
Don't worry about "cleaners" for now - they don't save much space and can actually cause problems. Deal with the large file situation first and see how you get on.
Let us know what you find out, and if you manage to get your space back.
Matt

Cisco CE500 with dot1x issue

Similar Messages

Maybe you are looking for