I have an Avamar grid in our home office and another one in our disaster recovery site. On the Avamar grids we have two interfaces created (one for accessing internal servers and one for replication). On the ASA the physical interface associated with the "inside" network is split into two sub-interfaces. One sub-interface is the NIC associated with the internal network uses the normal "inside" interface to get to the Internet. The NIC associated with the replication network uses the other sub-interface and is a direct connection through our ISP to our disaster recovery site.
We're trying to work on a bandwidth issue with the replication and noticed that we're seeing dropped packets. I would like to be able to traceroute from the source Avamar grid to the target Avamar grid but can't get this to work through our ASA. If I traceroute from the NIC associated with the internal network to www.google.com traceroute works fine. If I do the same thing and specify the source IP as the IP address of the replication NIC on the source Avamar I see the first hop as the switch where the NIC on the Avamar grid is attached. After that I don't see anything other than "* * *".
I've allowed ICMP in general on both ends just to make sure that the issue isn't a wrong ICMP value being allowed (once this works I'll tighten it down). I've also verified that the global inspection rule is inspecting ICMP.
What am I missing to allow traceroute between the two sites?
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...