If i need a firewall,can ASR 1006 replace ASA 5580?

i check ASR 1006 config with ESP-40, the firewall permonce can reach 40G, ASA 5580 is 20G, can ASR 1006 replace ASA 5580, is there any function feature problem?
thank you!

Fly,
There is no official documentation that states which L3 device can replace an ASA, since they are completely different devices with some capabilities in common.
I would strongly recommend that you reach your account manager at Cisco for this one. They will be able to provide you accurate info.
Mike.

Similar Messages

Command execution get very slow when AAA Authorization enable on ASR 1006

Without Authorization , I am able work smoothly with just click on ASR ...., But Once I enable Authorization it takes many secs to move to other command exampe ( If i hit config t or int gi1/0/1 , it take time to move to next command level) ...
These Authorization issue I am facing only on ASR and for Other Cisco Switches and Router its working fine wiith just a click.
Did any one face such issue , and how it is fix ...
See the Show version for ASR
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVIPSERVICESK9-M), Version 15.1(2)S, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 24-Mar-11 23:32 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
NOITDCRTRCORP01 uptime is 10 weeks, 6 days, 1 hour, 16 minutes
Uptime for this control processor is 10 weeks, 6 days, 1 hour, 19 minutes
System returned to ROM by reload
System restarted at 17:47:32 IST Thu Oct 4 2012
System image file is "bootflash:/asr1000rp1-advipservicesk9.03.03.00.S.151-2.S.bin"
Last reload reason: EHSA standby down
AAA Commands on ASR 1006
aaa new-model
aaa group server tacacs+ tacgroup
server 10.48.128.10
server 10.72.160.10
ip vrf forwarding Mgmt-intf
ip tacacs source-interface GigabitEthernet0
aaa authentication login default group tacgroup local
aaa authentication enable default group tacgroup enable
aaa accounting exec default start-stop group tacgroup
aaa accounting commands 1 default start-stop group tacgroup
aaa accounting commands 15 default start-stop group tacgroup
aaa accounting connection default start-stop group tacgroup
aaa accounting system default start-stop group tacgroup
aaa authorization commands 0 default group tacgroup none
aaa authorization commands 1 default group tacgroup none
aaa authorization commands 15 default group tacgroup none
aaa session-id common
tacacs-server host 10.48.128.10 key 7 13351601181B0B382F04796166
tacacs-server key 7 053B071C325B411B1D25464058

I think your issue maybe related to your tacacs server. If you re-order the two servers (typically a 5 second timer before failover occurs) and see if that improves your performance:
You can try to debug the issue by referring to the command reference guide....i.e. debug tacacs...you can also try to telnet to both ip address to port 49 to see if the connection opens, in order to rule out issues where a firewall or routing to one of the tacacs servers is failing. I also noticed you have the shared secret and tacacs server defined for one of the servers, is the sam present for the other server that is in the server group?
server 10.48.128.10
server 10.72.160.10
to
server 10.72.160.10
server 10.48.128.10
Thanks,
Tarik Admani
*Please rate helpful posts*

ASR 1006 Aux port

I can't use Aux port for ASR 1006, becouse i can't find it in configuration.
Version: asr1000rp2-advipservicesk9.03.07.05.S.152-4.S5.bin"
router#sho line ?
  <0-16>       First Line range
  async-queue  Show async-queue
  console      Primary terminal line
  summary      Quick line status summary
  vty          Virtual terminal
  |            Output modifiers
<cr>
router#sho line
   Tty Typ     Tx/Rx    A Modem  Roty AccO AccI   Uses   Noise  Overruns   Int
     0 CTY              -    -      -    -    -      0       0     0/0       -
*    1 VTY              -    -      -    -    1      4       0     0/0       -
*    2 VTY              -    -      -    -    1     16       0     0/0       -
*    3 VTY              -    -      -    -    1      2       0     0/0       -
     4 VTY              -    -      -    -    1      3       0     0/0       -
Can you help me whith my problem?

Hi,
I see you are using initiator unclassified ip-address. How exactly are you trying to trigger the session here? What type of traffic are you sending from your CPE? Please make sure you send a packet which 'crosses' the ISG box. A packet with destination the ISG will not trigger a session. Only a packet that needs to be forwarded by the ISG will. If you are not seeing anything with those debugs, it seems like no FSOL is seen to spawn the session.
Also, if your subscriber is connected with L2 network, why do you configure "ip subscriber routed"? This is conceptually wrong since you are telling to ISG that the subscriber is connecting via a L3 routed network which is not correct according to what you say.
Regards

ASR 1006 vs ASR 9001

Hi All:
I would appreciate if someone can share their lifetime experience and suggest me to finalize the right product between ASR 1006 or ASR 9001.
Requirements:
- We need full internet feed with IPv4 and IPv6.
-10 G & STM-16 interfaces for connectivity.
- 10 Gbps traffic need to be handled by the box.
- MPLS L3/L2 VPN's
I personally after going through IOS-XR feature, prefer this.
Need some expert thoughts in the light of real world experience.
Regards,

Hi Sayed,
ASR 9001 does not support STM-16 interfaces. It is purely 1 GE/10 GE platform.
If you are looking for an XR platform that supports STM-16 interfaces, you need to go with the 9006 (or 9904) , RSP-440, SIP-700 and POS SPA (for STM) and Typhoon 10GE linecard. (with Trident you might face an issue for the number of learned prefixes depending on the scale profile you choose: http://www.cisco.com/c/en/us/support/docs/routers/asr-9000-series-aggregation-services-routers/116999-problem-line-card-00.html)
If you decide to go with the ASR 1006, make sure you choose dual RP2 ( with 16GB mem), ESP-100 (or ESP-200) and SIP40. This should eliminate the TCAM exhaustion issue, if you decide to do NAT and ACL.; and guarantee and route-scale that might occur. (for the ASR 1000, I would recommend upgrading all of the memories)
HTH,
Michel.

HT1430 I need help I can not receive mail it says my mail box is full but I have cleared all my boxes. I have done as apple say shut down and restarted nothing. Also it say I need ios5 for some things don't know how to up grade. This all new to me so sim

I need help I can't receive mail as it says my mail box is full but all my boxes are empty. Simple terms please as I am new to this. Don't know how to find my os it keeps telling me I need iOS5 how do I do that.

If you have an iPad 1, the max iOS is 5.1.1. For newer iPads, the current iOS is 6.0.1. The Settings>General>Software Update only appears if you have iOS 5.0 or higher currently installed.
iOS 5: Updating your device to iOS 5 or Later
http://support.apple.com/kb/HT4972
How to install iOS 6
http://www.macworld.com/article/2010061/hands-on-with-ios-6-installation.html
iOS: How to update your iPhone, iPad, or iPod touch
http://support.apple.com/kb/HT4623
If you are currently running an iOS lower than 5.0, connect the iPad to the computer, open iTunes. Then select the iPad under the Devices heading on the left, click on the Summary tab and then click on Check for Update.
Tip - If connected to your computer, you may need to disable your firewall and anitvirus software temporarily. Then download and install the iOS update. Be sure and backup your iPad before the iOS update. After you update to iOS 6.x, the next update can be installed via wifi (i.e., not connected to your computer).
iOS: Unable to send or receive email
http://support.apple.com/kb/TS3899
Can’t Send Emails on iPad – Troubleshooting Steps
http://ipadhelp.com/ipad-help/ipad-cant-send-emails-troubleshooting-steps/
iPad Mail
http://www.apple.com/support/ipad/mail/
Try this: Delete the account in Mail and then set it up again.
 Cheers, Tom

Cisco ASR 1006 and WAAS

Hi,
Is there any built-in WAAS and NME features or services in Cisco ASR 1006? Or is there any WAAS or NME module that can be installed in Cisco ASR 1006? I found that for Cisco ISR 1900, 2900, and 3900, WAAS and NME services can be enabled by installing SRE and NME module. But can't find any information for Cisco ASR 1006.
Really appreciate your help.
Thanks

Hi Marvin
There is no option for this.
on the 4510 the only options under the interface are
speed nonegotiate or no speed nonegotiate (for auto)
Similarly on the ASR no negotiation auto or negotiation auto. setting each device to auto/manual or manual/auto has no effect on the ASR port - its still down
Cheers

ASR 1006 - SIP proxy function available?

Hi there,
I can't find a clear answer to this question.
Can a ASR 1006 act as a SIP proxy? I've many SIP clients at near end, a big SIP server at far end and an ASR 1006 in the middle. Currently we have a SIP adjacency for each SIP client, passing it to SIP server. But this is poorly manageable as the number of clients increases. Can I set somehow the ASR just to work as SIP proxy?
Thanks in advance,
Fabio

This is not a new issue - can be seen here
388 -> 688 -> 6150 -> 6310 -> 6310i+1100+ E70-1(3.0633.09.04/crippled VoIP)

ASR 1006 ESP20 Stuck "init"

I have an ASR 1006 that has been acting up ever since an ISSU from IOS-XE 3.7 to 3.11
Logs:
Apr 14 23:14:49.792: %CMRP-3-CHASSIS_MONITOR_READY_TIME_EXCEEDED: R1/0: cmand:
Reloading F1 because it has failed to become ready for packet processing
Apr 14 23:14:50.222: %IOSXE_OIR-6-OFFLINECARD: Card (fp) offline in slot F1
Apr 14 23:15:43.125: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in slot F1
Apr 14 23:16:11.423: %CPPHA-7-START: F1: cpp_ha:
CPP 0 preparing image /tmp/sw/fp/1/0/fp/mount/usr/cpp/bin/qfp-ucode-esp10
Apr 14 23:16:12.579: %CPPHA-7-START: F1: cpp_ha:
CPP 0 startup init image /tmp/sw/fp/1/0/fp/mount/usr/cpp/bin/qfp-ucode-esp10
Apr 14 23:16:21.457: %CPPHA-7-START: F1: cpp_ha:
CPP 0 running init image /tmp/sw/fp/1/0/fp/mount/usr/cpp/bin/qfp-ucode-esp10
Apr 14 23:16:22.064: %CPPHA-7-READY: F1: cpp_ha:
CPP 0 loading and initialization complete
Apr 14 23:16:23.194: %IOSXE-6-PLATFORM: F1:
cpp_cp: Process CPP_PFILTER_EA_EVENT__API_CALL__REGISTER
Show Platform:
R0        ASR1000-RP1         ok, standby           1w1d
R1        ASR1000-RP1         ok, active            1w1d
F0        ASR1000-ESP20       ok, active            1w1d
F1        ASR1000-ESP20       init, standby         1w1d
P0        ASR1006-PWR-DC      ok                    1w1d
P1        ASR1006-PWR-DC      ok                    1w1d
Slot      CPLD Version        Firmware Version
0         09111601            12.2(33r)XNC
1         07091401            12.2(33r)XNC
R0        07062111            12.2(33r)XNC
R1        07062111            12.2(33r)XNC
F0        08041102            12.2(33r)XNC
F1        08041102            12.2(33r)XNC
This matches a bug but from a different platform and software revision.
CSCuf79397
Symptom: F1 is stuck in init state after the standby RSP reloads.
Conditions: This issue occurs on a reload or OIR of the standby RSP.
Workaround: Reload the standby RSP again.
We have done as this recommends, but it has made no difference.
Furthermore, EVCs are failing to process on this platform in its current state as well.
Thoughts?

Hi Evan,
oh sorry, this is the forum for XR and those platforms. ASR1000 is better addressed in the respective forum for best answers.
But I checked a few things. the DDTS you highlight is still applicable, because it is in what we call platform independent code. This means that this change would benefit any platform running this SW. So there is a cahnce that you have the right match there.
I also verified the release you have vs the integration date of the ddts which is june/2013. The build time of your release is well before that I believe.
Any case for best continued follow up I would recommend you create a TAC case so that respective team can give you the final authorative answer.
regards
xander

I am trying to use powerpoint but when I open a document I want to work on it does not open on my desktop. It appears as open on mission control but it disappears offscreen. How can I get it to open where i need it and can work on it?

I am trying to use powerpoint but when I open a document I want to work on it does not open on my desktop. It appears as open on mission control but it disappears offscreen. How can I get it to open where i need it and can work on it?

It's almost certainly too late.
The time to create a backup is before a catastrophe. After a catastrophe, it's too late.

My cellular network is not working on my iphone 5 after updating to ios 8.1.2 !! It was working fine on ios 8.1.1and it was not jillbreak or hacked to unlock. I need help, what can I do?

My cellular network is not working on my iphone 5 after updating to ios 8.1.2 !! It was working fine on ios 8.1.1
my phone was not jillbreak or hacked to unlock. i need help, what can I do?

Did you do the Reset Network Settings as I described above?
There is no way to go back. You can try reseating your nanoSIM or replacing it. Or call your cell provider and have them check the provisioning on your phone.
Or Restore your iPhone from your backup in iTunes.

My cellular network is not working on my iphone 5 after updating to ios 8.1.2 !! It was working fine on ios 8.1.1 i need help, what can I do?

My cellular network is not working on my iphone 5 after updating to ios 8.1.2 !!
It was working fine on ios 8.1.1 i need help, what can I do?

I have this problem too - and it is on a BRAND new iPhone 6 - I have definitively tracked the issue to the moment I upgraded to iOS 8.1.2 - and am beyond frustrated. No fix to tell you about, sorry…but you can read my post here if you are into the whole "misery loves company" thing: iOS 8.1.2 Cellular data problem (Definitive - maybe)

I'm a long time PC user and just bought a 64 bit iMac and want to use BootCamp to play old PC games. Can I install Win XP or if it needs Win 7 can it be a 32 bit version, and how do I do it?

I'm a long time PC user and just bought a 64 bit iMac and want to use BootCamp to play old PC games. Can I install Win XP or if it needs Win 7 can it be a 32 bit version, and how do I do it?

Once you get windoze up an running on your new iMac, see these:
Switching from Windows to Mac OS X,
Basic Tutorials on using a Mac,
Mac OS X keyboard shortcuts,
Anatomy of a Mac,
MacTips,
Switching to Mac Superguide, and
Switching to the Mac: The Missing Manual, Mountain Lion Edition.
Additionally, *Texas Mac Man* recommends:
Quick Assist,
Welcome to the Switch To A Mac Guides,
Take Control E-books, and
A guide for switching to a Mac.

I need help, i can't download free applications in App store. they answer me "your request cannot be processed Error code:1009". and after they said "we could not complete your request. There was an error in the App Store. Please try again later (nul

i need help, i can't download free applications in App store. they answer me "your request cannot be processed Error code:1009".
and after they said "we could not complete your request. There was an error in the App Store. Please try again later (null)".
COMPUTER DETAILS: MacBook Pro 13-inch, Mid 2012 OS X Version 10.9.5; Processor 2,5GHz Intel Core i5; Memory 4 Go 1600 MHz DDR3.
Thanks beforehand!!!

Error
what is error code 1009?

What RAM do I need and where can I get it from?

Hi all,
I know this is probably a simple question, but I just want to make sure I don't mess up my computer! I have an old school DV iMac, and bought the Mac OS X upgrade not too long after it came out (which is rather a while ago now!), but couldn't install it became I don't have enough RAM. And I obviously have just put it off and off. Now I'm at uni, and want the computer to work as well as it can for my mum, because she's even worse than me when it comes to computers. So, anyway, I need RAM. What type do I need and where can I get it from fairly cheaply? And how much would you recommend I get? My friend says he knows how to put it in, so all okay there hopefully/
My computer's details:
Processor info: PowerPC G3
Machine speed: 400MHz
OS: 9.2.2
Built-in memory: 64MB
I remember being able to get more details than this from somewhere on the computer, but I can't remember where...I haven't used it for 6 months or something, and am obviously getting forgetful.
Hope someone can help. If you need to know anything else, tell me where to get the info from and I will tell you!
Cheers,
Fran
DV iMac Mac OS 9.2.x It's lime green...ooh...

Hi,
I just bought some RAM from Crucial.
If you go to www.crucial.com/uk and follow the Crucial Memory Advisor Tool, you should be able to find the RAM for your Mac.
1 GB sticks are pretty good value at the moment (they've even gone down a few pounds since I bought mine a week ago) and if you enter this code (found it on aonther thread here) you might get a couple of pounds knocked off the total: CUSTOMPC
There's also places like Kingston & Cancom to try, as well as Misco.co.uk. But Crucial select the recommended RAM for your Mac.
Also, when you think you've found the right RAM and want to buy it, try the Apple agent chat, and double-check with them.
Hope this is useful.

Ever since I updated my Mac to Maverick it has become exceedingly slow everywhere. Also annoying, when I go into Applications to open something, it now automatically opens 3 things I don't need. What can I do to fix this?

Ever since I updated my Mac to Maverick it has become exceedingly slow everywhere. Also annoying, when I go into Applications to open something, it now automatically opens 3 things I don't need. What can I do to fix this?

Reinstall Lion, Mountain Lion, or Mavericks without erasing drive
Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
Repair
When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported then click on the Repair Permissions button. When the process is completed, then quit DU and return to the main menu.
Reinstall Lion, Mountain Lion, or Mavericks
OS X Mavericks- Reinstall OS X
OS X Mountain Lion- Reinstall OS X
OS X Lion- Reinstall Mac OS X
Note: You will need an active Internet connection. I suggest using Ethernet
if possible because it is three times faster than wireless.

If i need a firewall,can ASR 1006 replace ASA 5580?

Similar Messages

Maybe you are looking for