SA540 Optional Port problem

We have a client with 2 SA540 units both connecting back to a SA520 with ipsec tunnels. Nothing out of the oridinary really. We did have some VOIP QoS settings that never really worked so the client opted to add a Time Warner Roadrunner cable connection (8mbx1.5mb) connection. The idea here then is to run the phones off the T1 interface and move web traffic to the cable modem connection.
We have a monitoring package (Labtech) running on all machines that report to out central server at our office.
So we got the cable installed and got static IP information. I enabled the optional port for WAN, Load balancing. Entered all the IP info. Tested with trace route from the router to the cable modem gateway, all ok.
Went to protocol bindings and enter a binding that "any source for service 80/443 destined to our IP address" would route through the optional port for testing. On the monitoring system, I noticed after about 3 minutes the clients started going black in that they had stopped reporting to the server. I went and modified the binding (or confirming I should say) and all looked ok. I disabled it, and all the clients popped back online. Renabled, all the clients started dropping again.
Scratched my head for a minute and then it happened. The client called in and said they had lost all phones and computers dropped off internet and they were down hard. What??!!! I disabled optional port, call the client and by the time the manager got on the phone he said the phones came back on and the computers were getting to their hosted app again.
What gives? Load balancing A) should have not stopped the internet from working all together and B) the protocol binding should have only effected the port 80/443 traffic that was destined to our server anyway (which the only service on the machines that comes to that specific IP is the labtech monitoring agents).
Ideas on what happened? Now the client won't let me touch it again until later this week but I'm at a loss as to why it killed the entire network.
It is running a revision notch or so old on firmware (2.0.17? It isn't the newest 2.02 I know that).
Any ideas would be heplful.

Good morning
Hi Eric, thanks for using our forum, my name is Johnnatan and I am part of the Small business Support community. Can you please reach out to our Small Business Support Center and open a Service Request to address this issue? One of our Engineers may be able to work with you and diagnose the root cause. You can find the appropriate contact information for SBSC in the below link.
http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
Before you call them I recommend you to upgrade your firmware and perform a factory reset(always do a backup of your information). I hope you find this answer useful,
*Please mark the question as Answered or rate it so other users can benefit from it*
Greetings,
Johnnatan Rodriguez Miranda.
Cisco Network Support Engineer.

Similar Messages

SA540 Firewall Rules Fail when Optional Port Configured to Failover

Today, I configured a client's SA540 for failover. The primary WAN port is FIOS with a static IP address. The optional port is Road Runner cable with a static IP address. The failover tested successfully. However, now the SA540 cannot be accessed on its internal IP address (https://192.168.1.1) and none of the firewall rules work any longer. There are several rules but to name two; remote desktop port forwarding to an internal server, and HTTPS to another internal server. Both rules use IP addresses different than the SA540's WAN IP address. Additional external IP addresses were configured previously and assigned and they worked up to the point were the failover was configured.
Now here is the strange part. If the optional port cable is removed from the port, everything returns to normal, but plug it back in and problems. I even tried disabling failover in the SA540's configuration and it made no difference unless the cable was unplugged.
As you might imagine the client is upset about this. Anyone have any ideas?
The firmware is 2.1.18.
Tony
PS. About an hour after I posted this, I tried moving the remote desktop external connection from one of the additional IP addresses configured in the SA540 to the dedicated WAN address and remote desktop sessions were then forwarded into the correct server. Apparently, the additional IP addresses are not working with the two ISP failover configured, or at least it doesn't work in my configuration. Any help on this would be much appreciated. The additional IP addresses are configured in the same subnet as the dedicated (primary) WAN port. Again, this worked until failover with another ISP was configured.

This issue has been resolved. After much testing and discussions with the great guys at Cisco TAC, we determined that Verizon FIOS is doing something on their routers to defeat use of IP aliasing. If you have FIOS and you must have more than one IP address and expect to create an IP alias to direct traffic in a 1 to 1 NAT to a node on your network, FIOS doesn’t work. Contact with Verizon technical support is no help. They are oblivious to the problem and don’t want to be bothered.
Tony Lombardi

SA520W Optional WAN port problem

Hello,
I have a problem to configure the optional wan on my SA520W.
We have 2 connexions (Cable and ADSL), when I set the primary wan with the Cable there are no problems. When I set the primary wan with the ADSL there are no problems. But when I set the Cable on the primary wan, and the ADSL on the optional wan, primary wan works, but optional wan doesn't. Leds are green, link state is UP, but wan state is DOWN.
Connection Time
: Not Yet Available
Connection Type
: PPPOE
Connection State
: Not Yet Connected
Link State
: LINK UP
WAN State
: DOWN
IP Address
: 0.0.0.0
Subnet Mask
: 0.0.0.0
Gateway
: 0.0.0.0
DNS Server
: 0.0.0.0
Secondary DNS
: 0.0.0.0
MAC Address
The SA520 runs firmware 2.2.07.
Can anyone point me to a solution ?
Thanks,
Graham.

Graham,
To use both WAN ports at the same time, browse to Networking-> Optional Port-> WAN Mode. Select Load Balancing so that all traffic will be balanced between the two WAN ports. The other modes only allow a single WAN port to be connected at one time.
- Marty

SA520 Optional port WAN mode for isolated network?

Long story short, client bought 2 SA520's, one for each site due to it's ability to have a second wan/lan port (Optional Port). They have a 2nd WAN connection installed that does not have internet. Esentially it is a hospital link that was install to gain access to some Citrix systems and custom web portals for hispital use.
The IDEA was to enable optional port for WAN mode. Then I was going to add a route statement that any traffic destined to the hospital network would route to the optional wan port,
Problem - When just enabling WAN port in Optional settings, the WAN port won't come online. I have to chose load balancing or failover. Neither of which are true; I don't want balancing or failover since it isn't a real "internet" connection.
I thought about setting port to LAN mode but it appears that simply makes the router a 5 port switch instead of 4. I was hoping I could just simply create a second LAN segment and route to it as well for certain traffic. Once I enable LAN mode however all configuration disappears and the Networking>LAN menu shows no specific Optional Port configuration options.
??? Can this not be configured as such? Saying it offers a optional port for LAN/WAN/DMZ configurations sort of means doing what I need it to do. I'm missing something, somewhere.
Help!
Eric

Hi Eric,
One thing you can do is to enable the Optional WAN port. Set the 'WAN Mode' to load balancing. Then use the 'Protocol' Bindings' to handle your routes. You would configure your Hospital network IP network range as the destination network and select your Optional WAN. Another rule would be a destination of ANY for the Destination that would go out the dedicated WAN. You may have to add a rule for DNS resolution to go through your hospital network so the local hospital DNS entries resolve.
Hope this helps.
Chris

Creating optional ports in a custom IP core

Using ISE 14.3 (I'll be upgrading to 14.7 soon hopefully) for a Spartan6.
I'm writing a VHDL core that has some optional outputs, via the following generic and port:
C_OUTPUTS : natural range 0 to 32 := 4;
output_pin : out std_logic_vector(C_OUTPUTS-1 downto 0);
In the MPD file, this is specified as follows:
PARAMETER C_OUTPUTS = 0, DT = NATURAL, RANGE = (0:32)
PORT output_pin = "", DIR = O, VEC = [(C_OUTPUTS-1):0], ISVALID = (C_OUTPUTS > 0)
This works fine in both synthesis and simulation for any number of outputs. It also works fine in EDK/XPS for any non-zero number of outputs. But it fails in EDK/XPS when specifying zero outputs.
The specific problem is that the wrapper VHDL generated by platgen specifies output_pin as std_logic_vector(-1 to 0), which is illegal, instead of std_logic_vector(-1 downto 0), which is valid (as a null vector) and would have worked. (It similarly declares the component further down with std_logic_vector((C_OUTPUTS-1) to 0) instead of correctly using downto.)
Has this been resolved in a later version of ISE/platgen?
Is there some other/better way to define optional ports?

For now, I've worked around this by adding a boolean C_HAS_OUTPUTS parameter as well, limiting C_OUTPUTS to a minimum value of 1, and using eg. C_HAS_OUTPUTS instead of C_OUTPUTS > 0.
On a related note, the 14.7 SDK does not seem to generate the C headers for boolean parameters correctly (it should use TRUE/FALSE in uppercase).
PARAMETER C_HAS_OUTPUTS = false, DT = BOOLEAN
PARAMETER C_OUTPUTS = 1, DT = INTEGER, RANGE = (1:32), ISVALID = C_HAS_OUTPUTS
PORT output_pin = "", DIR = O, VEC = [(C_OUTPUTS-1):0], ISVALID = C_HAS_OUTPUTS
This works, but it's a bit uglier.

I'm facing a problem with my ipad3 importing picture from ipad to my windows PC,my pc says port problem..What should I do?

my ipad is 3rd generation+cellular. ios7.1.2 .storage capacity 13.2 GB
the problem i'm facing is when i insert my ipad to my pc the autoplay option is not appearing as a result i'm not able to take pics from ipad to pc,,,,generally autoplay option appears & i used to take pics but now i cant..I went to device manager option & there i discover some random port problem.what should i do?

Try this - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.) No data/files will be erased. http://support.apple.com/kb/ht1430
How to Transfer Photos from an iPad to a Computer
http://www.wikihow.com/Transfer-Photos-from-an-iPad-to-a-Computer
Importing Personal Photos and videos from your iOS device to your computer.
http://support.apple.com/kb/HT4083
iTunes: Frequently asked questions about viewing and syncing videos
http://support.apple.com/kb/HT2729
Also check out the Photo Manager Pro app.
https://itunes.apple.com/us/app/photo-manager-pro/id393858562
Check out the Feem WiFi File Transfer app
https://itunes.apple.com/us/app/feem-wifi-file-transfer-free/id596378699?mt=8
 Cheers, Tom

Port Problem, cant Recieve Mail

Hi
Just recently my mail has stopted working due to a port problem. By my inbox i get a small icon which is a triangle with an explanation mark in. When i click it the first message i get is:
*Connection Failed*
+There may be a problem with the mail server or network. Check the settings for account "POP Account" or try again.+
+The server error encountered was: The connection to host mail.kahane.co.uk on port 110 failed.+
Then it willl give me a chice to go offline or online, ill click online and the icon is still there so i click the icon again and the second message i get is:
Alert
+There may be a problem with the mail server or network. Check the settings for account "POP Account" or try again.+
+The server error encountered was: The connection to host mail.kahane.co.uk on port 110 failed.+
I haven't changed any settings in the preferances or done anything which may have caused this. Incase you need to know i am on a POP account.
I would much appreciate any help, thanks

Me too... it comes and goes. It all started when I got a wireless router.

Portege R835 USB 3.0 port problem (Shutdown everytime)

Hello,
The problem is that the USB 3.0 port continues to turn off shortly after connecting any device (mouse, usb memory, printer...).
The only way to restore it's functionality is to reboot. I have continued to have this problem since I bought the computer.
There is no issue with the 2 USB 2.0 ports.
I have bios 3.0, win 7 64bit home premium.
Few other people have address the same problem here before but I didn't see any solution.
Please Help!
links to other topics:
http://forums.toshiba.com/t5/Computer-Troubleshooting/R835-P50x-USB-3-0-Random-Shutdown/m-p/210318#M...
http://forums.toshiba.com/t5/Windows-7/Portege-R835-USB-port-problem-wireless-mouse-amp-keyboard/td-...

Thank's for the info Jerry
I sent my laptop to Toshiba labs here in israel.
They replaced the usb 3 part in the computer.
2 days have passed for now and it is working!
Finally!

X6 8gb Usb Port Problem

My x6 usb port not working and i took it to nokia care to fix that problem and they told me that we don't have that type of IC to fix your problem and we can't fix your usb port problem .....if u can't fix the problem they why the hell your running service centre i am totally fed up with this nokia ....guys pls tell what should i do now

Can't they arrange for the part ? Insist on that.. if they agree, you may be asked to pay for the part upfront..If they do not, contact Nokia by using the 'Contact Us' tab at the top of this page and hope for a favourable resolution.

Z68A-GD80 G3 rear audio port problem

Just built his system a couple of weeks ago. My first build. When I first started the system, I was using the integrated graphics. I had my speakers plugged into the green audio jack on the MB, and it worked fine. Used it like this for a couple of days while transferring programs, photos, etc. I was never able to get the HDMI port working to set up both monitors, so I removed the graphic card from my old computer (GE Force 210), installed it in the new computer and installed the NVIDIA drivers for it. This got both monitors working, but then I found the sound was not working. I tried connecting the speakers to the surround sound ports and they worked, but at a very low volume. I finally connected the speakers to the front speaker port. This works but the sound quality is not very good. I get random? static noises.
I had it this way for a few days while I tried to troubleshoot the problem. It seemed like the problem started after installing the graphic card and drivers, so I removed them and tried it again. Still the rear speaker port did not work. Also, at this time I tried to get the dual monitor setup working again. I had found that the IGD multi-monitor setting was disabled, and assumed that was why I could not get both monitors working the first time around. After enabling this setting, still could not get both monitors working. No HDMI. I am really not too concerned about this, as I plan to get a better graphic card, but thought that it might be related to the audio port problem.
I believe there is a newer version of BIOS, but I am not sure if that is something that I want to tackle. Does anyone have any ideas of what could cause this? Thanks.
Monty

Not real sure of this since I haven't been personally involved in it, but the HDMI problem could be related to a cable issue? HDMI 1.4 versus older types? Monitor v1.4 compliant, etc.?
A battery removed CMOS clear & reset may be of help. It's worth a try. If the sound was clear & worked normal before, I doubt a UEFI/BIOS update would be of benefit. Something hardware related, drivers, or the way the OS is responding are my guesses for the sound problem & static.
A corruption in Windows is always a possibility. Doing a fresh install of the OS may help. Maybe before that extreme, using a utility like driver sweeper to get a fresh start with the audio drivers. Presume the speaker system is a self powered unit?

SA520 optional wan port problems

Hi,
I've got some problems activating my optional wan port...
The error is :
[SA520]pppoeMgmtTblHandler: pppoe enable failed
[SA520]pppoeMgmtDBUpdateHandler: error in executing database update handler
Thanks for your help,

Hello weillia,
Thanks for your response,
but....
I don't understand your question ? i tried protocol bindings to force DNS protocol using first wan port...
Problem is the same...
And I'm using public Google dns for my domain.
But I've got another big problem !!!
I bought a small DLink DSL320B to replace my old Thomson 510 (wich is not ADSL2+ compatible)....
It doesn't works with SA520... I've got kernel errors :
Fri Sep 30 14:45:00 2011(GMT +0200)
ERROR
Kernel
ip_conntrack_in: Frag of proto 17 (hook=0)
Component: KERNEL
Fri Sep 30 15:24:01 2011(GMT +0200)
ERROR
Kernel
*******The above log repeated 41 times *******
Component: KERNEL
Fri Sep 30 15:24:01 2011(GMT +0200)
ERROR
Kernel
ip_conntrack_in: Frag of proto 47 (hook=0)
Component: KERNEL
Configuration is good (bridge mode) and It works well directly on a PC...
Thanks for all.

A Quality Assurance Engineer's perspective on Neo2 PS/2 Port Problems.

I came here looking for some insight . . . . and while i got some confirmation that it's a common problem, I think some things need to be cleared up.
There's a mistake being made that disconnects cause and effect by lumping together effects that aren't necessarily from the same cause. Don't feel bad, everybody does it, I've just been trained to be critical about it.
I think there is more than one issue. Here's why.
1: I think the chipset or BIOS is cooking the ps/2 mouse data stream (and maybe USB HID data streams as well) when the "BIOS Support for USB Mouse" option is turned on. By this i mean that it's presenting the operating system with a virtual mouse device and working some behind-the-scenes magic on the data between computer and mouse.
My evidence:
With that option turned on, Linux kernel 2.6.12.2 (vanilla kernel.org sources) says this:
Jul 10 19:38:00 type kernel: input: PS/2 Generic Mouse on isa0060/serio1
Jul 10 19:38:00 type kernel: psmouse.c: Failed to enable mouse on isa0060/serio1
Jul 10 19:38:01 type kernel: psmouse.c: Mouse at isa0060/serio1/input0 lost synchronization, throwing 1 bytes away.
And with that option turned off, the kernel says this:
Jul 11 21:58:48 type kernel: input: ImExPS/2 Generic Explorer Mouse on isa0060/serio1
I think this bios option prevents the linux kernel serio driver from allowing the psmouse driver to perform two-way communication with the mouse in the standard way.
Disabling this bios option also makes all my PS/2 mice and trackballs work on bootup, where all of them needed to be re-plugged or have the kvm switch to another port and back before they would work previously.
I think many people are having some of their problems purely because of this bios option.
I think this is very bad, and that the developers responsible for this bios feature should be subjected to a public flogging and sent to a reeducation camp where they might learn to respect the law that the quality of a piece of software is inversely proportional to the amount of magic performed within it.
I can't even think of what the advantage of a virtual PS/2 mouse would be. You want to run DOS with mouse.com driving your usb mouse or something? We're supporting Win95 OSR1 users? I guess it might make Partition Magic boot floppies a tiny bit easier to manage, but sheesh. The damage far outweighs the benefit.
Even when it works, it will only work for fairly plain mice that don't need special protocols to work.
I don't think MSI did this, I think the bios vendor did it, and MSI doesn't realize what's going on.
Yes, I know the Explorer is a USB mouse on a PS/2 adapter, but i started down this road because my Logitech trackball - which uses the MouseManPlus protocol - and it still didn't work right when i replaced the mouse. I have a PS/2 based KVM that I'd like to keep using. The KVM has been out of the loop for these diagnostics.
2: While i admit that it could very well be a PS/2 port power issue, I think it has nothing at all to do with system power supply problems, least of all the 12V rail.
Why? Why on earth would my 5V keyboard and mouse care what's happening on the 12V rail, what's why.
Furthermore, the same KB and mouse mostly kinda/sorta work on a USB to PS2 adapter cable, which is on the exact same 5V rail as the keyboard and mouse ports, and if anything should draw MORE power.
They are however probably on separate fuses.
If it's a power problem, I'm leaning toward it being a slow-blowing fuse on the PS/2 ports that is being pushed near it's limits and is thus rippling. This is conjecture, and only MSI's rework guys or someone with a lot of diagnostic gear can tell you for sure.
3: Having fixed the mouse initialization and synchronization problems, I still have a problem.
I replaced my Lexmark (IBM) PS/2 keyboard with a KeyTronic PS/2 keyboard, replaced my Logitech Trackman Marble FX with a Microsoft Trackball Explorer, and sometimes, I still get an input lockup.
The mouse will just stop tracking in mid-sweep and the keyboard will stop keying.
And then the kernel says this:
Jul 11 23:37:49 type kernel: atkbd.c: Keyboard on isa0060/serio0 reports too many keys pressed.
Jul 11 23:37:50 type last message repeated 54 times
Jul 11 23:37:50 type kernel: atkbd.c: Spurious ACK on isa0060/serio0. Some program, like XFree86, might be trying access hardware directly
Jul 11 23:37:50 type kernel: input: AT Translated Set 2 keyboard on isa0060/serio0
Jul 11 23:37:50 type kernel: atkbd.c: Keyboard on isa0060/serio0 reports too many keys pressed.
Jul 11 23:38:18 type last message repeated 623 times
Jul 11 23:38:18 type kernel: atkbd.c: Unknown key released (translated set 2, code 0x7c on isa0060/serio0).
Jul 11 23:38:18 type kernel: atkbd.c: Use 'setkeycodes 7c <keycode>' to make it known.
Jul 11 23:38:18 type kernel: atkbd.c: Spurious ACK on isa0060/serio0. Some program, like XFree86, might be trying access hardware directly
Jul 11 23:38:19 type kernel: atkbd.c: Keyboard on isa0060/serio0 reports too many keys pressed.
Jul 11 23:38:19 type last message repeated 10 times
Jul 11 23:38:19 type kernel: atkbd.c: Unknown key released (translated set 2, code 0x68 on isa0060/serio0).
Jul 11 23:38:19 type kernel: atkbd.c: Use 'setkeycodes 68 <keycode>' to make it known.
Jul 11 23:38:19 type kernel: atkbd.c: Spurious ACK on isa0060/serio0. Some program, like XFree86, might be trying access hardware directly
Jul 11 23:38:21 type kernel: atkbd.c: Keyboard on isa0060/serio0 reports too many keys pressed.
Jul 11 23:38:21 type last message repeated 4 times
Jul 11 23:38:21 type kernel: atkbd.c: Spurious ACK on isa0060/serio0. Some program, like XFree86, might be trying access hardware directly
Jul 11 23:38:46 type kernel: atkbd.c: Keyboard on isa0060/serio0 reports too many keys pressed.
Jul 11 23:39:16 type last message repeated 2439 times
Jul 11 23:40:16 type last message repeated 4986 times
Jul 11 23:41:16 type last message repeated 4988 times
Jul 11 23:42:16 type last message repeated 4987 times
Jul 11 23:43:16 type last message repeated 4987 times
Jul 11 23:44:16 type last message repeated 4987 times
Jul 11 23:45:16 type last message repeated 4986 times
Jul 11 23:46:16 type last message repeated 4944 times
Jul 11 23:46:24 type last message repeated 688 times
I wonder if the "AT Translated" designation that the atkbd driver gives the keyboard may indicate that the PS/2 keyboard is having it's data stream cooked as well?
Edit: (for geeks) - It turns out that bios can set up your keyboard as either "raw" or "translated". It's possible to switch a keyboard back into "raw" mode, but most operating systems don't do this because it can cause problems on laptops and other computers that don't have their keyboard on a normal ps/2 port.
I don't mind having a keyboard on a usb converter, but the usb converter translates the ps/2 mouse signals too poorly. My Trackman FX has no buttons on the usb converter, and the Explorer is missing two buttons on the usb converter.
4: I don't have the 'reboot' problem, but maybe that only happens in windows.
What i see sometimes is the above, and sometimes the keyboard starts responding slowly - like it takes 30 seconds per keypress. And sometimes by re-plugging the connectors i can get it to come back.
I'm CERTAIN that some of these problems - at least one of them - can be fixed in bios. If only by defaulting the mouse bios support to off. This won't keep you from being able to navigate in bios or use your USB mouse in any OS since Win95 OSR2.1.
For at least the mouse problems, it appears that many of the problems people have reported can be resolved merely by disabling "BIOS Support for USB Mouse".

Quote from: d2thez on 13-July-05, 10:00:03
Ok, I am lost to be honest, but I just need to know if this applies to me. Please help!
I have a K8N Neo Platinum for the socket 754, not a Neo2. I use a USB mouse and a PS/2 keyboard. I have both "USB keyboard/storage support" and "USB mouse support" enabled in my bios.
You have me scared from reading your post that having them enabled will short out my PS/2 or USB. Will this happen? And should I have these options enabled or not?
And finally, if I do disable them, do I lose and functionality?? Please help me out here!
Relax. You're not going to short out anything or lose any functionality.
The first one - USB Keyboard/Storage Support - this makes it possible for you to boot off of USB drives (like the flash drives) and makes USB keyboards work in DOS. It may be required to make USB keyboards work in bios setup, but i haven't tested that.
If you have a PS/2 keyboard and you don't intend to boot off of a USB drive, you can safely disable that option with no loss in functionality of any kind.
The second one - USB Mouse Support - This is a bit of software in BIOS that takes control of USB mice and makes them appear like PS/2 mice in order to provide easy mouse support for operating systmems that don't understand USB.
Specifically, DOS and Windows versions prior to Win95 OSR2.1.
Since Win95 probably won't boot at all on an Athlon64 - and in any case won't have the drivers you need for nearly anything - the only possible scenario where you might need this feature is if you were booting some old versions of Partition Magic or Norton Ghost or other utility floppy that runs on DOS, supports mouse navigation, and is old enough that it doesn't have a DOS USB mouse driver. Newer versions of pqmagic and ghost probably have usb mouse support on their boot floppies.
You can stop reading now if you just wanted to be reassured.
The reason it causes a problem is because mice are far more complex than keyboards. For some reason, even if you don't have a USB mouse installed, the signals from your PS/2 mouse are run through software in BIOS to make the signals from your mouse look like the signals from a generic PS/2 mouse - instead of a mouse that speaks the MouseMan protocol or the Intelimouse protocol or the Explorer protocol (or three or four other protocols).
This sounds like a strange way to do it, but it's actually easier in software to treat all inputs to the same logic and translate them to a virtual device than it is to detect whether translation is needed and then only translate the signals that need it.
This interferes with the mouse drivers. It also makes it impossible for some mice to 'wake up' properly when the computer is turned on.
It also doesn't work very well because it doesn't install all the myriad mouse protocols out there. KVM manufacturers have the same problem. If they fix the Intelimouse protocol they frequently break the MouseMan protocol.
If your mouse has only two or three buttons and no scroll wheel (which counts as two or three buttons), and your mouse was not made by Microsoft or Logitech, chances are your mouse only speaks the plain PS/2 Mouse protocol and you won't have problems with translation, but you might have some other symptoms. It appears that the BIOS may actually understand the Intelimouse protocol, so Microsoft mice may work anyway.

USB ports problem

Hi all,
I have got a brand new laptop Pavilion dv6-2060ea and have noticed problems with the usb ports. I generally use linux as a primary OS but I have noticed the same problem on Windows 7 as well. The laptop sometimes doesn't recognize usb devices as a mouse or an external harddrive, it means when I turn on the laptop boot on an OS, the mouse doesn't work and I have to reinsert it to get it work. It happens 2 or 3 times from 5 boots so it's quite often I would say. The same problem is with the external hdd, have to reinsert it and then it's all right. I have noticed that there has been a new BIOS released and this should fix some problems with usb ports but I already have upgraded to that BIOS(F.13A) and problems persist. I also miss more options in the BIOS about the CPU settings because the laptop has Core i7 and there is no any option to configure the CPU.
Be patient with my English, please. Cheers, Pepe
Dv6-7000 /Full HD/Core i5-3360M/GF 650M/Corsair 8GB/Intel 7260AC/Samsung Pro 256GB
Testing - HP 15-p000
HP Touchpad provided by HP
Currently on Debian Wheeze
*Please, help other users with the same issue by marking your solved topics as "Accept as Solution"*

hello mate,
Try to check in the BIOS if the udb always on is enabled and in the boot order if the usb is not in first otherwise u could have problems to boot with something plug in...
Knowledge is of two kinds. We know a subject ourselves, or we know where we can find information on it.
ThinkPad T510 4313-CTO Windows 8 x64 - Intel Core i7-620M - NVIDIA NVS 3100M - 8GB RAM - 240GB SSD- Intel Centrino Ultimate-N 6300 - Gobi 2000.
ThinkPad Helix 3697-CTO Windows 8.1 x64 - Intel Core i7-3667U - Intel HD Graphics 4000 - 8GB RAM- 256GB SSD - Intel Centrino Advanced-N 6205 - Ericsson C5621gw

Open ports problem ASA5505

Hi everyone.
I'm trying to open ports on a specific host but I can't make it work.
I tried to make it clear as possible,
Thanks for helping.
There is my config:
Result of the command: "show run"
: Saved
ASA Version 9.1(3)
hostname ciscoasa
enable password *** encrypted
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
xlate per-session deny tcp any6 any6
xlate per-session deny udp any4 any4 eq domain
xlate per-session deny udp any4 any6 eq domain
xlate per-session deny udp any6 any4 eq domain
xlate per-session deny udp any6 any6 eq domain
passwd *** encrypted
names
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 1.1.1.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address MY-FIREWALL-IP 255.255.255.240
boot system disk0:/asa913-k8.bin
ftp mode passive
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network LAN-SITE-B
subnet 1.1.2.0 255.255.255.0
object network LAN-SITE-A
subnet 1.1.1.0 255.255.255.0
object network Firewall-SITE-B
host VPN-SITE-B-IP
object network SERVER01
host 1.1.1.2 (MY SERVER THAT I WANT TO ACCESS FROM OUTSIDE)
object-group service ALL-IP tcp-udp
description ALL-IP
port-object range 1 65535 (FOR TESTING PURPOSE, I'M TRYING TO OPEN ALL PORTS ON THIS HOST)
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
access-list outside_cryptomap extended permit ip object LAN-SITE-A object LAN-SITE-B
access-list outside_access_in extended permit object-group TCPUDP any host MY-HOST-PUBLIC-IP (DIFFERENT FROM THE OUTSIDE INTERFACE) object-group ALL-IP
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
nat (inside,outside) source static LAN-SITE-A LAN-SITE-B destination static LAN-SITE-B LAN-SITE-A no-proxy-arp route-lookup
object network obj_any
nat (inside,outside) dynamic interface
object network SERVER01
nat (inside,outside) static MY-HOST-PUBLIC-IP (DIFFERENT FROM THE OUTSIDE INTERFACE)
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 MY-GATEWAY 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
no user-identity enable
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 1.1.1.0 255.255.255.0 inside
http 0.0.0.0 0.0.0.0 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev2 ipsec-proposal DES
protocol esp encryption des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
protocol esp encryption 3des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
protocol esp encryption aes
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
protocol esp encryption aes-192
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES256
protocol esp encryption aes-256
protocol esp integrity sha-1 md5
crypto ipsec security-association pmtu-aging infinite
crypto map outside_map 1 match address outside_cryptomap
crypto map outside_map 1 set pfs
crypto map outside_map 1 set peer SITE-B
crypto map outside_map 1 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto map outside_map 1 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
crypto map outside_map interface outside
crypto ca trustpool policy
crypto ikev2 policy 1
encryption aes-256
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 10
encryption aes-192
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 20
encryption aes
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 30
encryption 3des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 40
encryption des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 enable outside
crypto ikev1 enable outside
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 inside
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
dhcpd auto_config outside
dhcpd address 1.1.1.100-1.1.1.125 inside
dhcpd dns 24.200.241.37 24.201.245.77 interface inside
dhcpd enable inside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
group-policy GroupPolicy_SITE-B internal
group-policy GroupPolicy_SITE-B attributes
vpn-tunnel-protocol ikev1 ikev2
username MY-USER password *** encrypted privilege 15
tunnel-group SITE-B type ipsec-l2l
tunnel-group SITE-B general-attributes
default-group-policy GroupPolicy_SITE-B
tunnel-group SITE-B ipsec-attributes
ikev1 pre-shared-key *****
ikev2 remote-authentication pre-shared-key *****
ikev2 local-authentication pre-shared-key *****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:f5d698f2b08e98028f2d487a42c7187e
: end

Hi Jouni,
Thanks for helping again,
Looks like i'm getting the same problem.
ciscoasa# show run access-list
access-list outside_cryptomap extended permit ip object LAN-SITE-A object LAN-SITE-B
access-list OUTSIDE-IN extended permit ip any object SERVER01
ciscoasa#
ciscoasa# show run access-group
access-group OUTSIDE-IN in interface outside
ciscoasa#
ciscoasa# packet-tracer input outside tcp 1.1.1.1 12345 MY-SERVER01-PUBLIC-IP 12345
Phase: 1
Type: UN-NAT
Subtype: static
Result: ALLOW
Config:
object network SERVER01
nat (inside,outside) static MY-SERVER01-PUBLIC-IP
Additional Information:
NAT divert to egress interface inside
Untranslate MY-SERVER01-PUBLIC-IP/12345 to 1.1.1.2/12345
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: inside
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule

Port problem on RG60se

I have a problem with a port. I have my main pc which is connected with wire to the router and my laptop which connects with the Wi-fi. I have a software that syncs outlook with each other. The software requires that port 9234 is open. I entered in the router software and enter port forwarding for the main pc, and it worked for it since it has a static ip. But the problem is that My laptop is assigned an IP by DHCP since we use it abroad and the other problem is that the router does not let me make 2 port forwarding options with the same port number. how can i fix this issue?

Stop!
When you are running local (=same router) wired/wireless, you do NOT need any portforwarding or special settings.
It's more likely that one of the machine holds a firewall blocking the access.
Portforwarding = Internet <-> Local machine
Local = Wired/Wireless <-> Wireless/Wired
DHCP = Assign an IP to a local machine when it connects
If everything is local, then the problem is not the router (remove your portforwarding)

SA540 Optional Port problem

Similar Messages

Maybe you are looking for