We have a CE560 which we use for caching and websense integration for almost 2 years w/ no problems. Recently, Internet browsing complaints from customers have ramped up. Have an open case w/ TAC & thought might be hitting 100% every 30 min bug but some info we sent development now shows the cache engine is getting a huge # of RST's which looks like it may be causing the issue.
We're wondering if our Checkpoint NG FP3 firewall may be sending the RST's & if anyone has had a similar issue w/ a similar config. Need advise on a place to start looking on the checkpoint (or really any other firewall) w/ regard to the possible RST's issue. Don't expect much help from the FW guys unfortunately.
Our config is 6000 wan & lan users funnel to 2 6513's doing wccp v2 to single CE560 which sits behind a Checkpoint/Nokia FW cluster. ACNS 5.1x w/ websens onbox. Same problem when websense was on Win2k server.
I understand the CE560 to be rated to about 25mb throughput & we're currently running our Internet DS-3 at a max of about 12mb so I would hope load isn't the main culprit here. We turn wccp back on, browsing fast & blocking works. Within minutes it stalls.
TIA for any insight. Our users are having WAY too much fun while CE/Websense is down <G>
I've seen that the PIX sometimes denies the last packet in a TCP connection and sends a TCP RST. This happens intermittently, but may be related to amount of data transferred during the connection (it seems to occur when there is little data transferred). However am not sure if it holds good for the Check point firewall too.
Moquery is the command line cousin of Vizore, it's very helpful and efficient sometimes during the troubleshooting. This article aims to provide moquery cheat sheet to the users for some most common seen scenarios.
Here is the checklist before customers/partners contact Cisco TAC:
Firmware Version of APIC and Switch
Download Switch and APIC techsupport logs
Problem description (Symptoms with details)
Business impact (eg, what kind of services...
moquery usageAPIC moquerySwitchmoquery
This document discuss a common issue observed during the VMM integration & VM workload migration to ACI fabric.
VMware Virtual machines are hosted in Cisco UCS-B seri...