Interface Status in Router

Why does the Ethernet Interface is showing Up and down state when a cable is not connected. Is this a problem if not please let me know why it behaves when compared to Serial interface.

That should not be a problem. Ethernet and Serial are very different technologies, the chip sets in the interfaces are very different, their physical protocols are very different, and the behavior of their interfaces is therefore different.
HTH
Rick

Similar Messages

  • Router interface up connected to switch interface down - but router status = up.

    Hi all,
    My router R2 fa0/0 and fa0/1 are connected to 2 L3 switches on their fa0/2 ports respectively.
    I have shutdown all interfaces on the L3 switches. but on my router, i still see
    R2#show ip int bri
    Interface                  IP-Address      OK? Method Status                Protocol
    FastEthernet0/0            192.168.3.1     YES manual up                    down
    FastEthernet0/1            192.168.4.1     YES manual up                    down
    ======================================================================
    I would have thought if i have shutdown the switches interfaces, the respective interfaces on the Router would be down too.
    Is it not the case ?
    Regards,
    Noob

    Hi KOH SZE JIE, 
    This is normal behavior; If you have an interface UP; the line protocol may go up and down. But the Status (of the interface) will not change unless you make a configuration change. 
    Please see below a breakdown of your "show ip int brief" 
    Method
    is set to 'Manual' This means you manually configured the interface from the CLI.
    Status
    is 'UP' This means the interface is up. Basically this means you did a "no shutdown" on the port. 
    There are three modes here 
    Down - The interface is shutdown (Default on most routers) 
    Administratively down - You have gone under the interface and issued a "shutdown" 
    UP - You have issued a "No shutdown" on the interface. 
    Protocol 
    Down - This means a routing protocol is not active on the interface. This makes sense as you have shutdown the remote end(in your case your L3 switch.
    I hope this helps.
    Kind Regards,
    Liam
    *** EDIT *** 
    After a bit of digging, I found the following Cisco document; this explains the entire show command more concisely then I could :)  
    http://www.cisco.com/c/en/us/td/docs/optical/cpt/r9_3/command/reference/cpt93_cr/cpt93_cr_chapter_01110.html 

  • Mars with Netflow on Interface VRF (on Router)

    Mars is collecting Netflow information from Interface VRF on Router, my question is that whether Mars will see the traffic inside of the VRF or not, or it will see only netflow traffic on Global routing (core MPLS devices).
    This router is PE, and connected to CE (Customer's device).
    interface GigabitEthernet5/2
    ip vrf forwarding ktb
    ip address 10.0.1.210 255.255.255.252
    ip flow ingress
    ip flow-export version 5
    ip flow-export destination 10.1.50.103 2055

    Refer to the document Top Issues for the Cisco Security Monitoring, Analysis, and Response System for more information
    http://www.cisco.com/en/US/products/ps6241/prod_troubleshooting_guide09186a008062f36e.html

  • How to get the command line interface for WRT160NL router

    hi,
    How can I get the command line interface for WRT160NL router. please suggest.

    If you’re trying to access the web-based interface of your router, just use its default IP address (192.168.1.1). The Username is left blank and the Password is "admin". Here’s a quick link on how to do that.

  • Sh Interface status

    Hi! What's the command for sh interface status in CAT OS?
    Thks!

    Hi Friend,
    You will not get the exact output as you get is IOS but you can take the output from this commands
    sh port
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_8_5/cmd_ref/sh_p_sn.htm#wp1715472
    sh mac
    Have a look at this for details on "sh mac" command
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_8_5/cmd_ref/sh_ml_n.htm#wp1028548
    HTH, if yes please rate the post.
    Ankur

  • Problem in configuring IPv6 interface with default  Router lifetime.

    I'm facing Problem in configuring IPv6 interface with default
    Router lifetime through a router advertisement.
    I'm also see an unusual behavior that even after configuring accept_rtadv=0,
    the ipv6 address is configured.
    Please help in out .

    Mac OS 9 does not support IPv6. While you can have IPv6 on your network, a Macintosh running Mac OS 9.2.2 or earlier cannot make connections to services using this network protocol.
    To use IPv6 on a Macintosh, you need Mac OS X 10.1 or later (as far as I know).
    —tonza

  • Show interface status (IOS layer 2switch)

    Is it possible to modify the width of the column containing the description of the interfaces when I issue the "show interface status?" on IOS cisco switches?

    I don't believe so but you can type show interface description if you want to see the entire description that is associated to the port.
    HTH,
    Edison.

  • Mystery Tunnel Interfaces on 2921 Router

    Hi All,
    I need some help.
    For some reason it seems we have 3 Tunnel interfaces on the router, not sure how it got there but we are unable to delete them or configure them.
    They seem to take the loopback ip as source and if I delete the loopback interface it chooses another IP.
    Output from sh ip int brief, not sure where it gets those IP's from as well.
    Tunnel0                    172.16.0.1      YES unset  up                    up     
    Tunnel1                    172.16.0.1      YES unset  up                    up     
    Tunnel2                    172.16.0.1      YES unset  up                    up    
    See below when I try to enter interface config mode:
    Router1(config)#int tunnel 0
    % This interface cannot be modified
    Any suggestions or help will be appreciated.
    Regards
    Z

    Hi Zubair,
    this is due to WCCP. You have WCCP for service 61 and 62 so my guess is you have an optimizer appliance (like WAAS) talking WCCP with this router. The tunnel interfaces are the result of WCCP using GRE encapsulation to redirect the traffic to the WAN optimizers.
    you can find more info here:
    https://supportforums.cisco.com/docs/DOC-15782
    thanks,
    Fabrizio

  • QoS on OC-48 SRP interface on 10720 router

    We have a DPT ring with 10 10720 routers on it. The ring is connected to an OC-48 SRP interface on each router.
    Voice traffic enters and leaves the 10720 on a Fast Ethernet interface; incoming voice has DSCP46 marking on it, and a strict-priority queue is set up outbound on the Fast Ethernet interface.
    Is it possible to apply some form of priority queueing on the SRP1/1 interface on the 10720? I have been trying to find something definite about this but so far I have failed.

    Router# conf t
    Router(config)# interface srp 2/0
    Router(config-if)# srp priority-map transmit 5
    Router(config-if)# end
    Please check this configuration guide, this should help you do the priority or other tasks with the SRP interface.
    http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/srpapsgs.htm
    HTH-Cheers,
    Swaroop

  • Gigabit interface status faulty please help

    When I do a show interface status on 4500 switch I got a status faulty
    I did never see such thing
    Port- Name-Status-Vlan-Duplex-Speed Type
    Gi2/7-jsh3 faulty 188 full XXBaseSX
    Could you please help?
    Thanks a lot

    this usually indicates the port is faulty (bad; not working; will not work)
    this may have been set via the POST of the device. the internal tests failed and the port was marked FAULTY.
    this could also be the result of a good port simply went bad for some unknown reason.
    try to disable/reEnable the port. will probably still say faulty. (cannot initialize a faulty port)
    try to reset the blade the port is on, or the supervisor if it resides on that.
    do a "show test" (catOS) to see what the POST found when it did its powerOnSelfTests.
    i've seen plenty of FAULTY ports and 99% of the time, the port is simply bad and must be replaced. (usually an ASIC or the likes)

  • Which Interface on a router is the bound interface for the crypto pki authenticate and enroll

    I have a few routers in the field that are using a broadband connection for backup. We have set up our own private PKI using the IOS CA. I need to add another IOS CA to the configuration. The problem is I need to know what interface is bound to the crypto pki authenticate and enroll process for me to ensure the CA (public IP) is reachable (having to deal with NATs, various public IPs on the router, Ironport, etc). Can I specify the particular interface bound to authenticate and enroll?
    Thanks.

    Hi Ramanan,
    NCM and DeviceExpert as basically the same. DeviceExpert is the stand alone version and NCM is the Plug-In for ManageEngine OpManager which allows a tight integration between the products.
    As far as I know, the product can alert on device level changes but interface specific changes are not available in real time. This can be tracked through complaince reports which have to be generated manually. As for link up and down status, OpManager can do this.
    I guess a combination of OpManager and NCM will let you achieve your needs to a certain exend except for maybe the change in ifindex values and alert for interface specific changes. Then again, for ifindex values, giving the ifindex persist command should avoid any changes. Not sure if that is a workaround or unusable idea.
    Regards,
    Don

  • AP 1252 dot11radio interface status shows RESET

    Hi,
    This is regarding an issue with one of my access point. The access point 1252 is autonomous one running the IOS version
    C1250 Software (C1250-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
    The status of the dot11Radio 0 interface is showing as RESET. I have pasted the interface brief details below.
    ap03#
    ap03#
    ap03#sh ip int brief
    Interface                  IP-Address      OK? Method Status                Protocol
    BVI1                       <ipaddress>       YES DHCP   up                    up 
    Dot11Radio0                unassigned      YES TFTP   reset                 down
    Dot11Radio0.102            unassigned      YES unset  reset                 down
    Dot11Radio0.104            unassigned      YES unset  reset                 down
    Dot11Radio0.105            unassigned      YES unset  reset                 down
    Dot11Radio0.108            unassigned      YES unset  reset                 down
    Dot11Radio1                unassigned      YES TFTP   administratively down down
    GigabitEthernet0           unassigned      YES TFTP   up                    up 
    GigabitEthernet0.102       unassigned      YES unset  up                    up 
    GigabitEthernet0.104       unassigned      YES unset  up                    up 
    GigabitEthernet0.105       unassigned      YES unset  up                    up 
    GigabitEthernet0.106       unassigned      YES unset  up                    up 
    GigabitEthernet0.108       unassigned      YES unset  up                    up 
    ap03#
    Due to this the clientsa re not getting associated.
    I tried rebooting the AP; shut the dot11radio0 interface and unshut it; verified the switch end duplex speed settings. Looks good.
    Can anyone suggest me how to proceed?
    Thankyou.

    Hi,
    Yes the Access Point was working fine all these days and for the last one week, I am facing this problem. Please find the  running configuration of the Access point as below..
    Building configuration...
    Current configuration : 8275 bytes
    version 12.4
    no service pad
    service timestamps debug datetime msec localtime show-timezone
    service timestamps log datetime msec localtime show-timezone
    service password-encryption
    hostname ap03
    logging buffered 65536 notifications
    enable secret 5 $1$.WG7$dvJpY1XHuixBk3wA4sfR3/
    aaa new-model
    aaa group server radius rad_eap
    server auth-port 1812 acct-port 1813
    aaa authentication login default group tacacs+ local enable
    aaa authentication login eap_methods group rad_eap
    aaa authorization exec default group tacacs+ local
    aaa accounting exec default start-stop group tacacs+
    aaa session-id common
    clock timezone MST -7
    clock summer-time MDT recurring
    ip rcmd rsh-enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host ncc ncc
    ip rcmd remote-host ncc ncc
    ip rcmd remote-host ncc ncc
    ip rcmd remote-host ncc ncc
    ip rcmd remote-host ncc ncc
    ip rcmd remote-host ncc ncc
    ip rcmd remote-host ncc ncc
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host datacom datacom enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host netsvcs netsvcs enable
    ip rcmd remote-host datacom datacom enable
    ip domain list u04129.albertsons.com
    ip domain list albertsons.com
    ip domain name u04129.albertsons.com
    ip name-server
    ip ssh time-out 90
    dot11 activity-timeout unknown default 28800
    dot11 ssid Courage-34idkeysNCswuZue3765#%@&
       vlan 102
       authentication open eap eap_methods
       authentication key-management wpa
    dot11 ssid Freedom-jKb%&552en@546AsdfG65eD
       vlan 105
       authentication open eap eap_methods
       authentication network-eap eap_methods
       authentication key-management wpa
    dot11 ssid Galaxy-73j4CA58fd66y3lKICK#%@&*
       vlan 104
       authentication open
    dot11 ssid Quake-35f8d4q9e5@365%lFh&ju#ef2
       vlan 108
       authentication open eap eap_methods
       authentication key-management wpa
    dot11 holdoff-time 60
    dot11 arp-cache optional
    power inline negotiation prestandard source
    dot1x timeout reauth-period server
    username Cisco password 7 02250D480809
    username ggg privilege 15 secret 5 $1$E4Ms$78SOM7s3gZ8QxU.mlnEpj.
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption vlan 104 key 1 size 128bit 7 80B78765DD670039FE1557E4BFB4 transmit-key
    encryption vlan 104 mode wep mandatory
    encryption vlan 108 mode ciphers tkip
    encryption vlan 102 mode ciphers tkip
    encryption vlan 105 mode ciphers tkip
    ssid Courage-34idkeysNCswuZue3765#%@&
    ssid Freedom-jKb%&552en@546AsdfG65eD
    ssid Galaxy-73j4CA58fd66y3lKICK#%@&*
    ssid Quake-35f8d4q9e5@365%lFh&ju#ef2
    power local 17
    packet retries 64 drop-packet
    no preamble-short
    channel 2412
    station-role root
    beacon dtim-period 4
    no dot11 extension aironet
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    interface Dot11Radio0.102
    encapsulation dot1Q 102
    no ip route-cache
    no cdp enable
    bridge-group 102
    bridge-group 102 subscriber-loop-control
    bridge-group 102 input-type-list 201
    bridge-group 102 output-type-list 201
    bridge-group 102 port-protected
    bridge-group 102 block-unknown-source
    no bridge-group 102 source-learning
    no bridge-group 102 unicast-flooding
    bridge-group 102 spanning-disabled
    interface Dot11Radio0.104
    encapsulation dot1Q 104
    no ip route-cache
    no cdp enable
    bridge-group 104
    bridge-group 104 subscriber-loop-control
    bridge-group 104 input-type-list 201
    bridge-group 104 output-type-list 201
    bridge-group 104 port-protected
    bridge-group 104 block-unknown-source
    no bridge-group 104 source-learning
    no bridge-group 104 unicast-flooding
    bridge-group 104 spanning-disabled
    interface Dot11Radio0.105
    encapsulation dot1Q 105
    no ip route-cache
    no cdp enable
    bridge-group 105
    bridge-group 105 subscriber-loop-control
    bridge-group 105 input-type-list 201
    bridge-group 105 output-type-list 201
    bridge-group 105 port-protected
    bridge-group 105 block-unknown-source
    no bridge-group 105 source-learning
    no bridge-group 105 unicast-flooding
    bridge-group 105 spanning-disabled
    interface Dot11Radio0.108
    encapsulation dot1Q 108
    no ip route-cache
    no cdp enable
    bridge-group 108
    bridge-group 108 subscriber-loop-control
    bridge-group 108 input-type-list 201
    bridge-group 108 output-type-list 201
    bridge-group 108 port-protected
    bridge-group 108 block-unknown-source
    no bridge-group 108 source-learning
    no bridge-group 108 unicast-flooding
    bridge-group 108 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    shutdown
    dfs band 3 block
    channel dfs
    station-role root
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface GigabitEthernet0
    no ip address
    no ip route-cache
    duplex auto
    speed auto
    interface GigabitEthernet0.102
    encapsulation dot1Q 102
    no ip route-cache
    bridge-group 102
    no bridge-group 102 source-learning
    bridge-group 102 spanning-disabled
    interface GigabitEthernet0.104
    encapsulation dot1Q 104
    no ip route-cache
    bridge-group 104
    no bridge-group 104 source-learning
    bridge-group 104 spanning-disabled
    interface GigabitEthernet0.105
    encapsulation dot1Q 105
    no ip route-cache
    no cdp enable
    bridge-group 105
    no bridge-group 105 source-learning
    bridge-group 105 spanning-disabled
    interface GigabitEthernet0.106
    encapsulation dot1Q 106 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface GigabitEthernet0.108
    encapsulation dot1Q 108
    no ip route-cache
    no cdp enable
    bridge-group 108
    no bridge-group 108 source-learning
    bridge-group 108 spanning-disabled
    interface BVI1
    ip address dhcp client-id GigabitEthernet0
    no ip route-cache
    ip http server
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    ip radius source-interface BVI1
    no logging trap
    access-list 1421 permit
    access-list 1421 permit
    access-list 1421 permit 0.0.0.255
    access-list 1421 permit 0.0.0.255
    access-list 1421 permit 0.0.255.255
    access-list 1421 permit 0.0.255.255
    access-list 1421 permit 0.0.255.255
    access-list 1421 permit 0.0.255.255
    access-list 1421 deny   any
    access-list 201 permit 0x0800 0x0000
    access-list 201 permit 0x0806 0x0000
    access-list 201 deny   0x0000 0xFFFF
    snmp-server view NCC mib-2 included
    snmp-server community TROUbleIStrouBLE view NCC RO
    snmp-server community CHECKtheMAIL RO
    snmp-server community HAVocREEk RW
    snmp-server community 1aPe3nLnmDt4yVYmbgWoUVjJYz1 view NCC RO 1421
    snmp-server community 1aUQ5DAIH2bTBlvJg6RFS5qfsr RO 1421
    snmp-server community 1OGgsN21DI4q01QeeIhJGF961 RW 1421
    snmp-server enable traps tty
    tacacs-server host
    tacacs-server host
    tacacs-server directed-request
    tacacs-server key 7 110A1D5347415C5B53737F7D2E26
    radius-server attribute 32 include-in-access-req format %h
    radius-server host auth-port 1812 acct-port 1813 key 7 10190C4A533C07185D50721569013D3C3638022F4E0E42400102773D0D481A5E0E
    radius-server vsa send accounting
    bridge 1 route ip
    line con 0
    line vty 5 15
    sntp server
    end

  • Nexus5548 - "faulty" interface status

    One of our enclosures lost one of it's backup links to a Nexus5548.   Looking at the interfaces the status reads "faulty".  The interface in  question is Eth1/5, but what I also noticed there were a couple  interfaces not in use w/ the same status. I tried switching out the gbic  and disabling/enabling the interface, but nothing helped.  Any  thoughts?  Is a reboot my only option?
    <code>
    switch# show int status
    Port          Name               Status    Vlan      Duplex  Speed   Type
    Eth1/1        --                 connected 226       full    10G     10Gbase-SR
    Eth1/2        --                 connected 226       full    10G     10Gbase-SR
    Eth1/3        --                 connected trunk     full    10G     10Gbase-SR
    Eth1/4        --                 faulty    1         full    10G     --
    Eth1/5        --                 faulty    trunk     full    10G     10Gbase-SR
    Eth1/6        --                 connected trunk     full    10G     10Gbase-SR
    Eth1/7        --                 notconnec trunk     full    10G     10Gbase-SR
    Eth1/8        --                 connected trunk     full    10G     10Gbase-SR
    Eth1/9        --                 notconnec 1         full    10G     10Gbase-SR
    Eth1/10       --                 notconnec 1         full    10G     10Gbase-SR
    Eth1/11       --                 faulty    1         full    10G     --
    Eth1/12       --                 connected trunk     full    10G     10Gbase-SR
    Eth1/13       --                 faulty    1         full    10G     --
    Eth1/14       --                 connected trunk     full    10G     10Gbase-SR
    Eth1/15       --                 sfpAbsent 1         full    10G     --
    Eth1/16       --                 connected trunk     full    10G     10Gbase-SR
    Eth1/17       --                 sfpAbsent 1         full    10G     --
    Eth1/18       --                 sfpAbsent 1         full    10G     --
    Eth1/19       --                 sfpAbsent 1         full    10G     --
    Eth1/20       --                 sfpAbsent 1         full    10G     --
    Eth1/21       --                 sfpAbsent 1         full    10G     --
    Eth1/22       --                 sfpAbsent 1         full    10G     --
    Eth1/23       --                 sfpAbsent 1         full    10G     --
    Eth1/24       --                 sfpAbsent 1         full    10G     --
    Eth1/25       --                 sfpAbsent 1         full    10G     --
    Eth1/26       --                 sfpAbsent 1         full    10G     --
    Eth1/27       --                 sfpAbsent 1         full    10G     --
    Eth1/28       --                 sfpAbsent 1         full    10G     --
    Eth1/29       --                 sfpAbsent 1         full    10G     --
    Eth1/30       --                 faulty    1         full    10G     --
    Eth1/31       --                 connected trunk     full    10G     10Gbase-LR
    Eth1/32       --                 connected trunk     full    10G     10Gbase-SR
    switch#       --                 notconnec routed    auto    auto    --
    </code>

    Yes try reload. To me this looks like hardware issue might need replacement.
    NXOS version?
    Any recent upgrade?
    Thanks,
    Richard.

  • ASA 5505 Logging Issue - Warning: Configured logging host interface conflicts with route table entry

    I am getting this warning on my ASA 5505 when I try to set up logging from my off site FW to the central FW, which is a 5510. What I am trying to do is send the FW logs through the VPN Tunnel into the central 5510 to our logging server at 192.168.22.99, but allow all other traffic out the outside interface so customers can hit our web servers down there. Here is an example of my config with fake IP's. I get this error when trying to do "logging inside host 192.168.22.99". If I try to put in "logging Tunnel host 192.168.22.99" I get the "Warning:Security Level is 1" message
    5505
    ethe0/0
    desc To LA ISP (217.34.122.1)
    switchport access vlan2
    ethe0/1
    desc To Redwood City HQ via VPN Tunnel
    switchport access vlan1
    ethe0/2
    desc To Internal Web Server
    switchport access vlan3
    VLAN1
    desc Tunnel to HQ
    ifinterface Tunnel
    security level 1
    217.34.122.3 255.255.255.248
    VLAN3
    desc Internal Web Server
    ifinterface inside
    security level 100
    192.168.0.1 255.255.255.0
    access-list LosAngeles extended permit ip 192.168.0.0 255.255.255.0 192.168.22.0 255.255.255.0
    (No access-group is performed, as I match from the crypto map instead since I have multiple sites going out of HQ - see HQ configs)
    route Tunnel 192.168.22.0 255.255.255.0 65.29.211.198
    crypto map TO-HQ 10 match address LosAngeles
    crypto map TO-HQ set peer ip 65.29.211.198
    5510 at HQ
    access-list LA extended permit ip 192.168.22.0 255.255.255.0 192.168.0.0 255.255.255.0
    (again no access-group, since I have a couple other off sites)
    crypto map TO-LA 20 match address LA
    crypto map TO-LA 20 set peer ip 217.34.122.3

    Hi Jouni,
    I have the following configs in place with fake IPs
    5505
    1 outside interface with security level 0 (vlan1 direct connect to isp 217.33.122.2/30) - goes to ISP
    1 Tunnel interface with security level 1 (vlan 2 direct connect to isp 217.33.122.6/30) - goes to Tunnel to our 5510
    1 inside interface with security level 100 (servers connected to hub, with vlan3 ip of 192.168.0.1)
    access-list LosAngeles extended permit ip 192.168.0.0 255.255.255.0 192.168.22.0 255.255.255.0 - acl to 5510 inside network
    route outside 0.0.0.0 0.0.0.0 217.33.122.1 - route for all traffic (except for 192.168.22.0/24) to take the outside connection
    route Tunnel 192.168.22.0 255.255.255.0 65.29.211.198 - route for 192.168.22.0 destined traffic to take the Tunnel connection
    crypto map  TO-HQ 10 match address LosAngeles
    crypto map TO-HQ 10 set peer ip 65.29.211.198
    tunnel-group 65.29.211.198 type ipsec-l2l
    5510
    1 outside interface with security level 0 (vlan1 direct connect to isp 65.29.211.198) - goes to isp
    1 inside interface with security level 100 (vlan2 connection to corporate servers and SIP 192.168.22.0/24)
    access-list LA extended permit ip 192.168.22.0 255.255.255.0 192.168.0.0 255.255.255.0
    access-list OUTBOUND extended permit icmp host 217.33.122.6 host 192.168.22.99 (allows Nagios monitor to ping the DE interface
    access-group OUTBOUND in interface outside
    nat (inside,outside) static 192.168.22.99 interface destination static 217.33.122.6
    route outside 192.168.0.0 255.255.255.0 217.33.122.6
    crypto map TO-LA 20 match address LA
    crypto map TO-LA 20 set peer ip 217.33.122.6
    tunnel-group 217.33.122.6 type ipsec-l2l
    I am mistaken on the 5510 interfaces. They do not have vlans, and the IP address is directly applied to the interfaces for outside and inside.

  • GL Interface status code of "P"

    I noticed that on our GL_INTERFACE table several records which had the status code of "P" instead of "NEW". Since we have no Oracle documentation (especially the Techinical Reference Manuals),does anybody know or can find out what that code means?
    Normally, I would though it means pending. When you import the records, if the transactions have a problem or does not balance, these records remain on the interface. I never though that it will set these records as pending. We were trying to import records from two sources at the same time. One set of records from a source had an invalid flexfield combo. After we fixed the problem, all the transaction processed without an problems and the GL_INTERFACE table cleared.
    Is this a new function to 11i? I came from a 10.7.4 NCA enviroment and never seen this before. Thanks for your assistance.
    David Correia
    System Analysis
    NECMSC

    hi david,
    this feature is also there in 10.7. If any one record contains any problem, then all the records in that batch will be stopped. And once the same is corrected the whole batch will be imported. until then the records will be in status 'P', ie pending. This feature is there in 10.7 also.

Maybe you are looking for

  • Sort field in maintenace plan

    hi does some one implementd sort field use in img of maint plan and does dead line monitoring in ip3o whar are the benifits or scope

  • Hp officejet pro 8500 will not print alignment page

    Hi, I saw that others on this thread where having similar problems and I was wondering if anyone could help. I have been having trouble with my HP Office Jet Pro 8500 Wireless (A909g series) printer with the print heads. Initially, it stopped printin

  • Confirm that iTunes 11.1 and Windows 8.1 are not compatible.

    My system worked as expected today until the update of iTunes. I am now not able to see my iPad listed in iTunes but I am able to see the iPad storage in file Explorer. I have re-installed iTunes, updated the driver, tried other USB ports all to no a

  • SSL handshake with webcache

    Hello, I am having some trouble with using Webcache and WebLogic.  Basically I have narrowed the problem through debug logs down to a certificate error involving the certificate being sent from weblogic to webcache.  Webcache cannot validate it and a

  • Is it possible to achieve table column paging in ADF?

    I have this huge table of important data and want have a "frozen" part of a table and next to it multiple pages of groups of columns that i can view with a "next", "previous" button, similar to this site: Regular Season Standings | MLB.com: Standings