Several times a day, the ASA 5505 "goes down", and users cannot get on the internet. After a short while, the router begins working again, almost as though it did a "reset" or something. Is there some log or some way to see what is causing the router to stop like that? I found the "firewall" monitor in the ASDM, and it shows spikes in the "syn attack" graph, but I have checked the computers that show in the "under attack" list and those computers don't have a virus or malware (from what I can tell)
What I would like to do, is make sure all "VPN" related stuff is removed from the config if possible to ensure that I am not being attacked that way.
Do you see the source IP & protocol/port of the attack on ASDM? If not, I think you should set up a syslog server to see where the "sync attack" is coming from. Then block the source and protocol/port on your ACL.
I had a bad power supply / brick a few weeks ago. TAC had to send a replacement. Do a show version and see the uptime. If it is rebooting, check the power source and get an RMA if you have smartnet. If not, try purchasing a new power brick.
Yes, I have it connected to a battery backup. I also tried another power source.
It has quit a couple times today. When it did, I ran in and unplugged the inside network cable and plugged it back in real quick (because it was blinking really fast). As soon as I did that, internet works again.
When I did sh ver this morning, it had been up for 2 days and 19 hours. But now I see it has been hard reset because it says it is only up for 3 hours 59 min
Cisco arranged an RMA for me, still waiting on the new hardware to arrive.
[toc:faq]The ProblemOn traditional switches whenever we have a trunk
interface we use the VLAN tag to demultiplex the VLANs. The switch needs
to determine which MAC Address table to look in for a forwarding
decision. To do this we require the switch to do...
[toc:faq]Introduction:Netdr is a tool available on a RSP720, Sup720 or
Sup32 that allows one to capture packets on the RP or SP inband. The
netdr command can be used to capture both Tx and Rx packets in the
software switching path. This is not a substitut...
IntroductionOSPF, being a link-state protocol, allows for every router
in the network to know of every link and OSPF speaker in the entire
network. From this picture each router independently runs the Shortest
Path First (SPF) algorithm to determine the b...