CISCO CSS 11503: Adaptive Session Redundancy + Resets

Hi
we have release 7.10.206a configured with SourceGroup and ASR. I made a sniffer trace and experienced that the CSS sends a lot of RST. As well I saw that it use only 1984 source ports for the connections to the server. How can I increase the number of source Ports? .In the attachments you will find the sniffer trace with the incorrect behaviour and the configuration.
Any suggestion, idea ?

the problem of the RST seems to be the frequent reuse of the same source port.
The destination of this connection seems to be confused and ACK the new SYN with the ack number of the previous connection. This ack number is out of range from the syn sequence number so the result if a RST.
ie:
Flow1 - Syn -> packet 1
Flow1 - Last ACK -> packet 33
Flow 2 - syn -> packet 34
Flow 2 - ack (instead of syn/ack) with acknumber same is packet 33.
This triggers a RESET -> packet 36
Flow 3 - syn -> packet 55
Flow 3 - same as flow 2 issue, ack with old ack number. This triggers a RST (packet 57).
Now the 2nd issue, the CSS (I believe tpkg0x.post.ch is the CSS) sends packet for flow 2 but the end station believes flow 2 was killed with the RESET of flow 3 and the host sends a RST to the CSS (packet 59) because its connection does not exist anymore.
So the all issue is the fact that ports are being reused to quickly.
You will need to involve more people to find a workaround to the 1984 ports available [and be aware they are available but not all usable].
Work with Marco K., your sale support.
Regards,
Gilles.

Similar Messages

  • Cisco CSS 11503 Arrowpoint/Load Balance question

    I am troubleshooting an issue with my 11503.  I am running version 07.40.0.04. I have it configured as follows:
      content upcadtoa-rule
        add service cadtoa-wls1-e0
        add service cadtoa-wls1-e1
        add service cadtoa-wls2-e0
        add service cadtoa-wls2-e1
        add service cadtoa-wls3-e0
        add service cadtoa-wls3-e1
        add service cadtoa-wls4-e0
        add service cadtoa-wls4-e1
        add service cadtoa-wls5-e0
        add service cadtoa-wls5-e1
        add service cadtoa-wls6-e0
        add service cadtoa-wls6-e1
        arrowpoint-cookie expiration 00:00:15:00
        protocol tcp
        port 8001
        advanced-balance arrowpoint-cookie
        redundant-index 2
        vip address 172.30.194.195 range 2
        arrowpoint-cookie name TOA
        active
    However, the load-balancing across the servers does not seem to be doing much balancing.  One of those servers is getting hit with 5 times as much traffic as another and another server is lucky to get a connection at all.  With the cookie expiration set, one would think that this would all balance out over time.
    I just came across this information from Cisco and I am wondering if it is relevant:
    If you configure a balance or advanced-balance method on a content rule that requires the TCP protocol for Layer 5 (L5) spoofing, you should configure a default URL string, such as url "/*". The addition of the URL string forces the content rule to become an L5 rule and ensures L5 load balancing or stickiness. If you do not configure a default URL string, unexpected results can occur.
    In the following configuration example, if you configure a Layer 3 (L3) content rule with an L5 balance method, the CSS performs L5 load balancing, but will reject UDP packets.
    content testing
    vip address 192.168.128.131
    add service s1
    balance url
    active
    The balance url method is an L5 load-balancing method in which the CSS must spoof the connection and examine the HTTP GET content request to perform load balancing. The CSS rejects the UDP packet sent to this rule because a UDP connection cannot be L5. Though the CSS allows this rule configuration, its expected behavior would be more clear if you promote the rule to L5 by configuring the url "/*" command.
    In the next example, if you configure an L3 content rule with an L5 advanced-balance method, L5 stickiness will not work as expected.
    content testing
    vip address 192.168.128.131
    add service s1
    advanced-balance arrowpoint-cookie
    active
    The advanced-balance arrowpoint-cookie method causes the CSS to spoof the connection, however, the CSS still marks it as an L3 rule. Thus, the CSS does not insert the generated cookie and the rule defaults to L3 stickiness (sticky-srcip). You must configure a URL like url "/*" to promote this rule to L5, ensuring that L5 stickiness works as expected.
    Thanks in advance for any help you can give.  The thing is not down, it is just balancing strangely causing application performance issues.
    James

    Hey James,
    You will need to suspend the content rule in order to add the url statement.  This will cause a quick downtime until the content rule is activated again.  I have shown below the commands to add the statement.  Perhaps you can create your commands in a Notepad file, then paste them all in so they execute quickly to minimize your downtime:
      content MY-SITE
        vip address 10.201.130.140
        port 80
        protocol tcp
        add service MY-SERVER
        active
    CSS11503# config t
    CSS11503(config)# owner TEST
    CSS11503(config-owner[TEST])# content MY-SITE
    CSS11503(config-owner-content[TEST-MY-SITE])# url "/*"
    %% Attribute may not be modified on active rule
    CSS11503(config-owner-content[TEST-MY-SITE])# suspend
    CSS11503(config-owner-content[TEST-MY-SITE])# url "/*"
    CSS11503(config-owner-content[TEST-MY-SITE])# active
    CSS11503(config-owner-content[TEST-MY-SITE])# exit
    CSS11503(config-owner[TEST])# exit
    CSS11503(config)# exit
    CSS11503# show run
      content MY-SITE
        vip address 10.201.130.140
        add service MY-SERVER
        port 80
        protocol tcp
       url "/*"       <--------
        active
    Hope this helps,
    Sean

  • CSS 11503 Stickyness session based

    Need assistance comming up with a soulution for session based Stickyness.
    1.can this be based on the J-Session ID?
    2.Can the CSS send a cookie and the clients stick to the same servers until the session expires and the cookie os removed?
    3. Also can we set a timeout value for the cookie?

    If servers are setting the cookies then you need something like this
    Service webserver1
    ip address 10.10.10.1
    string server1 <-- server cookie value
    active
    Service webserver2
    ip address 10.10.10.2
    string server2 <-- server cookie value
    active
    Service webserver3
    ip address 10.10.10.3
    string server3 <-- server cookie value
    active
    content mycontent
    vip address 12.12.12.12
    add service webserver1
    add service webserver2
    add service webserver3
    string prefix "JSESSIONID="
    protocol tcp
    port 80
    url "/*"
    advanced-balance cookies
    sticky-inact-timeout 60 <-- Inactivity timeout value for cookie
    active
    The string prefix (that goes on the Content Rule) would need to match be the name of the
    cookie string prefix "JSessionID="
    Then the string on the services would need to match the value that is inserted on each
    server:
    Example:
    Service webserver1
    ip address 10.10.10.1
    string server1
    active
    Then the cookies injected from server1 would need to look like this:
    JSessionID=service1
    That is how the CSS would then identify which server the cookie belongs to and how to send
    it to it. If the JDSessionID values are random, then the CSS would not be able to match the values to a service.

  • Cisco CSS 11503 ntp keepalive script

    Have setup a new Owner/Service/Group for loadbalancing NTP traffic to 2 NTP servers. It all appears to work fine apart from failure of one of the servers NTP service. I've currently set up a simple ping keepalive which works fine if one of the servers fail but this keepalive won't detect if the servers NTP service fails. I'm running 8.20 code. My question is has anybody created a working keepalive script for NTP traffic  for the CSS?

    Hi Daniel,
    I had looked at that script but it doesn't suit my needs. The script uses TCP port 37 for its keepalives whereas our  NTP servers use UDP port 123.
    Regards
    Noel

  • Cisco CSS 11501 - High-Availabilty

    We have a single CSS 11501 and were thinking about just buying a new one and putting it online as the standby with statefull (hopefully) failover, but weren't sure that this would work.
    Does anyone know what is needed to create a high-availability Cisco CSS 11501 environment?
    Do you only need 2 CSS 11501 and then configure them with one being active and the other being in a standby mode, like a PIX?
    Is there a HA Cable that would need to be connected between the 2 CSS's?
    Thanks in Advanced.
    Joe

    Daniel,
    There is a new stateful failover mechanism for the Cisco CSS 11500.
    This description is a bit "salesy" I know, but it covers the question asked :-)
    The Cisco CSS 11500 delivers ASR—the industry's first stateful Layer 5 session redundancy feature that enables failover of important flows while maximizing performance. Some flows—such as a long-lived File Transfer Protocol (FTP) or a database session — may be mission critical, but many are not. Most solutions on the market today require all traffic—important or not—to be backed up from one box to another. If the majority of flows are not critical, then most of system performance is wasted on unnecessary back
    ups. With ASR, the Cisco CSS 11500 may be configured so critical flows are marked as replication worthy, whereas others do not need to be so marked. ASR focuses traffic management resources precisely where needed.
    Better yet, have a look at the following link focusing on the section on Stateless Redundancy.
    http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_510/advcfggd/redndncy.htm
    Regards
    Pete..

  • CSS 11503 in Active Active mode

    Can we configure CSS 11503 in Active/Active mode, means can multiple context would be configured?
    Thanks & Regards,
    Shahzad.

    Here you go
    Assumptions:
    VIP 10.10.10.100 is Master on the CSS 2 and backup on the CSS1
    VIP 10.10.10.101 is Master on the CSS1 and backup on the CSS1
    Vlan 10 is the Server Vlan (Redundant Interfaces here)
    Vlan 20 is the Client vlan (Redundant Vips here)
    Services for VIP 10.10.10.100 (real server) have default gateway pointing to redundant interface 172.20.40.253
    Services for VIP 10.10.10.101 (real server) have default gateway pointing to redundant interface 172.20.40.254
    CSS #1
    circuit VLAN10
    ip address 172.20.40.1 255.255.255.0
    ip virtual-router 1 priority 101 preempt
    ip virtual-router 2
    ip-redundant-interface 1 172.20.40.253
    ip-redundant-interface 2 172.20.40.254
    Circuit VLAN20
    ip address 10.10.10.1 255.255.255.0
    ip virtual-router 3 priority 101 preempt
    ip virtual-router 4
    ip redundant-vip 3 10.10.10.101
    ip redundant-vip 4 10.10.10.100
    CSS #2
    circuit VLAN10
    ip address 172.20.40.2 255.255.255.0
    ip virtual-router 1
    ip virtual-router 2 priority 101 preempt
    ip-redundant-interface 1 172.20.40.253
    ip-redundant-interface 2 172.20.40.254
    Circuit VLAN20
    ip address 10.10.10.2 255.255.255.0
    ip virtual-router 3
    ip virtual-router 4 priority 101 preempt
    ip redundant-vip 3 10.10.10.101
    ip redundant-vip 4 10.10.10.100
    More details at
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20_v8.10/configuration/redundancy/guide/VIPRedun.html#wp1112245
    Syed Iftekhar Ahmed

  • Global Cerificate on CSS 11503

    Hi
    I am planning to enable https for few web servers behind a CSS 11503. I have tested the functionality with the trial cert every thing works as desired.
    Now I need to buy a certificate from Verisign to make it work in production.
    At verisign they offer two different certs (Secure Site --40 bits encryption) and (Secure Site Pro -- 128 bit encryption).
    1. Is this 128 bit cert a "global cert"? and I need to concatenate the "intermediate cert" and "server cert" to make it work?
    2. If all my users are in USA then does it make sense to buy this 128 bit certificate?
    3. Verisign website also asks for "server Platform" and cisco is not mentioned as an option (I can see other LB as F5 in the list). What should I select for the server Platform when I am requesting it for CSS 11503 (I have generated the CSR on CSS 11503).
    Thanks in advance
    Glenn

    1.The guy who picked the phone at verisign had no clue.Verisign website says the following
    Secure Site Certificate (40bit minimum)- SSL Certificates without SGC
    To install your SSL Certificate, go to the instructions below for your server software. If your server is not listed or you need additional information, refer to your server documentation or contact your server vendor
    Secure Site Pro Certificate(128bit minimum) - SSL Certificates with SGC
    If you are installing an SSL Certificate with SGC, you need to copy an Intermediate CA Certificate before proceeding to the installation instructions for your server software.
    2.My understanding was that 40 bit is minimum encryption level and only old browsers (exported ones) will us 40/56 bit ciphers. Other wise even with 40 bit certificate the new browsers will establish a 128 bit session.
    Verisign says about their 40 bit certificate
    "40-Bit to 256-Bit SSL Encryption Non-SGC SSL Certificates provide a minimum of 40-bit and up to 256-bit SSL encryption. Site visitors using certain older browsers and many Windows 2000 users will only receive 40- or 56-bit encryption unless they’re connecting to an SGC-enabled SSL Certificate"
    I found a document on net in favor of buying 40 bit certs.
    http://www.whichssl.com/myths_about_sgc.html
    Gilles I am a bit confused here.Need HELP :)

  • Load Balance TMG with Cisco CSS

    I am working with a Customer that is using Cisco CSS to load balance Microsoft TMG 2010.
    From the Microsoft TMG, I can see the https probes hitting the TMG Servers. The TMG 2010 recongnizes that the Cisco is trying to establish a 3-way handshake and is dropping every 3rd connection with the following error: "non-SYN packet was dropped because it was sent by a source that does not hane an established connection with the Forefron TMG computer." Since the Microsoft Forefront TMG 2010 Server is Stateful packet inspection firewall, what is the best load balance method for this service? TCP or even worst ICMP.
    Below is a snipet of the configuration:
    Thank You
    Avery
    CSS-A# show service Server1-ssl
    Name: Server1-ssl  Index: 70   
      Type: Local            State: Alive
      Rule ( x.x.x.x  TCP  443 )
      Session Redundancy: Enabled
      Redundancy Global Index: 206
      Redirect Domain: 
      Redirect String:
      Keepalive: (SSL-443   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 03/05/2012 16:33:14
      Mtu:                       1500        State Transitions:            4
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0           Weight Reporting:             None
      Weight:                    1           Load:                         2
    CSS-A#
    CSS-A# show service Server2-ssl 
    Name: Server2-ssl  Index: 71   
      Type: Local            State: Alive
      Rule ( x.x.x.x  TCP  443 )
      Session Redundancy: Enabled
      Redundancy Global Index: 207
      Redirect Domain: 
      Redirect String:
      Keepalive: (SSL-443   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 03/05/2012 16:53:49
      Mtu:                       1500        State Transitions:            6
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0           Weight Reporting:             None
      Weight:                    1           Load:                         2

    Hi,
    It would good to have a capture from the server itself, the TCP keepalive is really simple, as you explained, it is just a 3-way-handshake on port 443.
    The CSS is going to use it's vlan IP to generate this keepalive.
    So if the server is dropping the connection, it would be good to se the actual behavior of the keepalive.
    ICMP is just a ping, and lets say port 443 is not longer open on the server, at the point that the CSS gets the ICMP reply back from the server, the service is going to remain as alive, but the traffic is not going to work, so ICMP is not a good option.
    Thanks!

  • Remove Health Care (keepalives) CSS 11503

    Hi,
    We normally distribute the load between two servers by checking if the server its active (using TCP 80), yesterday, we want to remove the Health Care (keepalives) due to a maintenance test, to sent the traffic direct to the server, but the service stop working.
    We think we didn’t remove the health care properly, could anybody please help me to know hoe to remove it?
    We are using CSS 11503, I’m adding the config.
    Thanks

    CSS11503-2(config)# service Linux2
    CSS11503-2(config-service[Linux2])# ip add 192.168.20.41
    CSS11503-2(config-service[Linux2])# active
    CSS11503-2(config-service[Linux2])# show service Linux2
    Name: Linux2            Index: 33
      Type: Local            State: Alive
      Rule ( 192.168.20.41  ANY  ANY )
      Session Redundancy: Disabled
      Redirect Domain:
      Redirect String:
      Keepalive: (ICMP   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 08/12/2009 05:29:24
      Mtu:                       1500        State Transitions:            0
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0
      Weight:                    1           Load:                         2
      Weight Reporting:          None
    CSS11503-2(config-service[Linux2])# keepalive type none
    CSS11503-2(config-service[Linux2])# show service Linux2
    Name: Linux2            Index: 33
      Type: Local            State: Alive
      Rule ( 192.168.20.41  ANY  ANY )
      Session Redundancy: Disabled
      Redirect Domain:
      Redirect String:
      Keepalive: (NONE   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 08/12/2009 05:29:24
      Mtu:                       1500        State Transitions:            1
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0
      Weight:                    1           Load:                         2
      Weight Reporting:          None
    CSS11503-2(config-service[Linux2])#
    Same if the service is down before disabling the keepalive.
    CSS11503-2(config-service[Linux2])# keepalive type icmp
    CSS11503-2(config-service[Linux2])# show service Linux2
    Name: Linux2            Index: 33
      Type: Local            State: Down
      Rule ( 192.168.20.41  ANY  ANY )
      Session Redundancy: Disabled
      Redirect Domain:
      Redirect String:
      Keepalive: (ICMP   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 08/12/2009 05:31:42
      Mtu:                       1500        State Transitions:            4
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0
      Weight:                    1           Load:                         255
      Weight Reporting:          None
    CSS11503-2(config-service[Linux2])# keepalive type none
    CSS11503-2(config-service[Linux2])# show service Linux2
    Name: Linux2            Index: 33
      Type: Local            State: Alive
      Rule ( 192.168.20.41  ANY  ANY )
      Session Redundancy: Disabled
      Redirect Domain:
      Redirect String:
      Keepalive: (NONE   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 08/12/2009 05:36:08
      Mtu:                       1500        State Transitions:            5
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0
      Weight:                    1           Load:                         2
      Weight Reporting:          None
    Gilles.

  • Routing issue with CSS 11503

    The senerio contains a PIX 515 E firewall,4507R Chassis switch and a CSS 11503. The servers in inside zone of the PIX is load balanced using a vip with default route specified in the CSS is the inside zone interface IP of the PIX
    Now I would like to load balance the servers in the DMZ zone of the PIX with a separate vip(from DMZ zone) in the same CSS. Since the default route in CSS is towards the inside zone of the PIX, I am unable to see the load blanced pages from dmz. Is there any solution to load balance the servers of the 2 zones with 2 different vip's using a single css ?

    The default behavior is to use the calling device's CSS for the redirected calls. In your case it sounds like you want to use the redirecting device's CSS. I haven't tried this myself but I believe you will need to change the following registry entry on your PGs. You will want to use option 2 (ROUTEADDRESS_SEARCH_SPACE).
    HKEY_LOCAL_MACHINE\SOFTWARE\Cisco
    Systems,Inc.\ICM\IPCCL\PG1B\PG\CurrentVersion\JGWS\jgw1\JGWData\Dynamic
    "UseRouteAddressSearchSpace"=dword:00000000
    - Used to control behavior on CTI Route Points for Route Selects.
    UseRouteAddressSearchSpace can be to set 0, 1, or 2 where :
    DEFAULT_SEARCH_SPACE = 0
    CALLINGADDRESS_SEARCH_SPACE = 1
    ROUTEADDRESS_SEARCH_SPACE = 2

  • CSS 11503 - question on version

    We're about to do an annual OS update to our CSS 11503, and I noticed that there are two current versions of WebNS, both released in the same month: 8.10.4.01 and 8.20.2.01. Could anyone outline for me the differences between the two (or point me to the right release notes)? I usually upgrade to the latest release, but having two at the same time is awfully confusing.
    Thank you!

    They are essentially the same.
    We always port all fix to both of them.
    Release notes are here :
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.10/release/note/RN810_X.html
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/release/note/RN820_X.html
    Gilles.

  • Cisco CSS ICS via DWDM

    We are currently splitting up a campus installation (2 datacenters with < 300m cable distance).
    One datacenter remains on the campus, the other one is moved to another part of the town, approx. 30km away.
    The two datacenters are interconnected using DWDM (don't have the exact specs at the moment, but I think we have got the equivalent of 16 duplexed 4Gb/s conenctions between the two data centers)
    So far we have been able to move most of the equipment (including several members of Oracle RAC clusters on Linux and OpenVMS, VPN server farms, ESX cluster members and similar services), but we do not seem to bei able to get the Cisco CSS ICS link up on the DWDM.
    Is there anything we can ask the DWDM provider to check, or is there no chance to get the ICS link up over DWDM?

    Hi Martin,
    I guess you are referring to ISC port, right?
    As per CSS documentation: You must connect the ISC ports directly to the two CSSs. You cannot use Layer 2 devices on the ISC links between the two CSSs. Also, the ISC links must be dedicated to passing only ISC traffic.
    For that reason I believe you need to reconsider your plan.
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20_v8.10/configuration/redundancy/guide/ASR.html#wp1038263
    Best regards,
    Ahmad

  • Cisco CSS as non-HTTPS SSL-traffic terminator

    Hi!
    Does anybody know is it real to use Cisco CSS as SSL-traffic terminator. I need to terminate non-HTTPS SSL-traffic on this device (i.e. SSL-encrypted sessions of any particular TCP-based application-layer protocol, not https)? If not, is there any CISCO device capable of doing such a job?
    Regards, Amir

    Hi!
    Thank you very much for your reply.
    I know about the S model - as per my post - but unfortunately I have realized after making the purchase.
    Can you please help me with the following issue: my unit is not able to boot from FTP, even if I follow up the CISCO official documentation for that version (I issue all the commands as in the manual). More than that, if I setup the Primary Boot Configuration and then I want to check it up there is nothing in that field. The Secondary Boot Configuration keeps its settings and after the Primary failure it will try the Network Booting but with Failed status - returning me to the OffDM.
    I mention that I am using the OffDM because the unit I bought has no Flash Card.
    Also I am not sure how can I have a "network mounted filesystem" and in the meantime to use the FTP protocol;  setting up a NFS server wont provide me with Windows style absolute path like k:/.... as per CISCO official guide. Is that a plain-ftp generically called as Network File System??? "First, create these subdirectories on the FTP server, then copy the files from the boot image to the subdirectories"
    Is this linked with the fact that I am using a Linux box for my FTP Server? Can you please help me to understand what the following line from CISCO official guide means "A network boot is not supported on UNIX workstations"
    Thank you!

  • Cisco CSS 11500 and RDP

    Dear NetPros:
    Does anyone know that does Cisco CSS 11500 Series Content Services Switch support 'Session Caching of RDP Clients? session for roaming of disconnected sessions' features?
    Thanks
    Bernard

    The Cisco CSS 11500 is a compact modular platform, specifically designed to provide robust Layer 4-7 traffic management services for e-business applications in Internet and intranet data centers.
    This URl should help you:
    http://www.cisco.com/en/US/netsol/ns340/ns394/ns50/ns254/networking_solutions_package.html

  • Cisco SPA 112 adapter Issue

    Hi All,
    We are using Cisco SPA 112 adapter and it is having 2 lines,I configured both of the lines.
    There is no issue in line 1 but line 2 is automatically went to disable mode.After that i have to manually enabled that option.
    Please help me to fix this issue

    Dan, i will see how it goes over the next week or so with the updated F/W & shall report back, and thanks for the link as i wasnt sure how to save a syslog.
    Should i set the verb as high as 6, or is that an over kill.
    Gabriel, I have an FTP running on my sat receiver which i will attempt to use to catch the log, but as for the the "sipgate registration", when i loose conection my ata reports its still registered & the sipgate URL, isnt in real time as far as i can tell.
    My ata would have normally shown its fault since my first post 6 days ago, but unfortunately a recent power cut has reset my testing period back to 1 day.

Maybe you are looking for