ASR 9001 BFD and BVI/subinterface

Similar Questions

• Ganymede ACS 5.4 asr 9001 authorization

  Hello

  If anyone can help with Ganymede attributes users authoriezed on cisco asr 9001 (ios/xr)

  Thank you

  Yoram

  You should know the command you are trying to emit belogns to which task.

  Then you know that the task is mentioned according to which task group.

  Visit this link to know how to perform the above:

  https://supportforums.Cisco.com/docs/doc-15944

  Then, you must configure the GANYMEDE server + to return the attribute that puts the task under the privilege of the user:

  See here: http://goo.gl/7YP5zu

  I use the following command on the ACS server in the config of user group (we have version 4.2):

  task = #cisco - support, rwx:admin, #root - system

  This will be the user inherit the read, write and execute access to the 'admin' task and will put the user in the local (locally defined on the router) 'cisco-support' and 'root-system' users groups.

  NOTE: we did two things at the top. inherits access to the task AND put the user in the context of local groups selected. I don't know if it can be used without the other.

  HTH

  Amjad

  Rating of useful answers is more useful to say "thank you".

• ASR 9001 - root password

  Hello

  We install a new asr 9001 but every time us recharge, he ask us to enter a new password of root-system.

  any idea why?

  Thus, the admin config or the normal config are getting saved properly.

  I recommend 2 steps:

  1 - Check the

   IOX_ADMIN_CONFIG_FILE=

   IOX_CONFIG_FILE=

  Variable on the command "set" rommon mode gives you all of the variables, check that they have a valid path/file

  2 - follow the XR - IOS install guide to initialize all devices and services (you can find the installation on the Cisco documentation guide)

• How to distinguish the physical interface and logic (subinterface) interface to the Cisco router/Switch?

  Hi Expert,

  How to distinguish the physical interface and logic (subinterface) interface to the Cisco router/Switch? Can you please clarify a formal way for this so have?

  A physical interface is numbered with the same name of the interface when printing on the physical port. For example "GigabitEthernet 0/1" corresponds to port 1 of the 0 module (or the base unit).

  A logical interface can be a subinterface on a routed port and will have a point ("". "") preceding the number sous-interface (ex. GigabitEthernet 0/1.1). It can also be a loop or a virtual interface (on a router this could also include interfaces like the tunnel and virtual tunnel or VTI types). A switch may also have a VLAN logical interfaces (e.g. interface vlan 1) which are used as layer 3 virtual interfaces of type.

• ASR 9001 built in ports can support the Twinax cables?

  Hello

  Can of ASR9001 built in ports support 10Gig using Twinax connection cables:

  SFP-H10GB-CU3M, 5 M, 7 M and 10 M?

  Thank you!

  -Mazzy

  We support only the active cable not the cables (passive) CU ACU.

  Support came in 5.1.1

  Thank you

  Sam

• Autonymous 1300 AP wireless bridge - BVI1 and bridge group Question

  Hi all

  I am setting up two 1300's as a bridge wireless, but I' am not going to use in the network, vlan 2 vlan 1 is my managent.  Does this mean that I won't be able to manage the wireless bridges because only the Group 1 bridge can route ip?

  I configured bridges wireless with the network infrastructure such as vlan vlan 2 on the SSID and I created a control2 on both AP quit my BVI1 on both sides.  AP associate between them, but I could not telnet or ping the bridge on the vlan 2.  I went then to the vlan 1 as the infrastructure vlan and I turned to BVI1 upward.  Then I could ping and telnet to the bridge wireless between the bridges.

  So with the installer, I want bridges will be managed locally via the console?

  The other issue I have is that I have a vlan 900 for the voice across the bridge but bridge-group # s only go up to 255, will my traffic vlan 900 still cross the bridge without the configuration of the bridge Group on the dot11 and fa0 subinterfaces?  Thank you

  Thank you

  Jason

  No need to create control2... BVI 1 is sufficient and map the SSID of the Valn 2... This will be enough to get the operational wireless network. the switch port configuration must be a trunk allowing all the VLANS.

  in what concerns the vlan voice... Simply create the interafce sub on the bridge. That's the problem.

  Concerning

  Surendra

• ASR9001 SFP + port 2 and port 3 disabled auto

  Hello

  Everyone has the same problems?

  We have an ASR9001, when we test the port SFP +, after several days of market, the port SFP + 2 and port3 off yourself.

  The port is disabled only, but not err - disable.

  We can use command 'stop' and 'no stopping' for the recovery of these two ports.

  The fault happened several times and we do not know how to solve.

  Everyone knows the reason?

  Hi David,

  If you use ASR 9001 - S SFP and SFP + 2 and 3 are disabled by default. You can enable with a license.

  If you use ASR 9001, you hit the following bug: CSCug60558 - fix for ASR9001 port flap problem

  More details can be found at: https://tools.cisco.com/bugsearch/bug/CSCug60558

  Thank you

  Michel.

• Nuance ASR OUT_OF_SERVICE subsystem

  Hello

  We have a CM 4.1.3 and IPCC 3.5.3

  With the IPCC, we also have licenses, TTS and ASR (3 TTS and ASR 3)

  I have the problem that the service of the ASR is OUT_OF_SERVICE. TTS works very well.

  When I restart the system or do a restart of the engine, I can see both services during initialization.

  After awhile the TTS is IN_SERVICE and works fine, but the ASR is going after 2-3 minutes initializing OUT_OF_SERVICE.

  These are the messages:

  352: Jan 26 EET % MIVR-SS_ENT_SRV-1 17:28:53.628 - SS_OUT_OF_SERVICE:Enterprise Server Subsystem in out of service:

  "353: jan 26 17:29:20.394% MIVR-SS_NUAN_ASR-7-UNK EET:"nlm"with vpid '3802' on ' 10.10.50.2 ' is not running.

  "354: jan 26 17:29:20.394 EET % MIVR-SS_NUAN_ASR-7 - UNK:Not all processes on AppServer ' 10.10.50.2 ' are running

  "355: jan 26 17:30:20.396% MIVR-SS_NUAN_ASR-7-UNK EET:"recserver"with vpid '3804' on ' 10.10.50.2 ' is not running.

  "356: jan 26 17:30:20.396 EET % MIVR-SS_NUAN_ASR-7 - UNK:Not Speechserver ' 10.10.50.2 ' all the processes are running

  357: Jan 26 17:30:20.396 EET % MIVR-SS_NUAN_ASR-7 - SUBSYSTEM_NUAN_ASR_WN_STATUS_CHANGED_OOS:WatcherNetwork status has changed: WN_OUT_OF_SERVICE: Integer Msg = 1

  358: Jan 26 17:30:20.396 EET % MIVR-SS_NUAN_ASR-3 - SS_OUT_OF_SERVICE:Nuance ASR subsystem is OUT_OF_SERVICE:

  359: Jan 26 17:30:20.396% MIVR-SS_NUAN_ASR-1-ModuleRunTimeFailure EET: Real-time failure Nuance ASR: Module = Nuance ASR subsystem, Cause of failure = 1, failure Module = SS_NUAN_ASR

  Strange thing is that TTS works.

  CM, IPCC and Nuance TTS/ASR are installed together.

  Someone at - it any idea why this happens?

  JH

  This is a new installation of shade on 3.5 2 or 3.5 (3) you can run in the CSCsc96390bug. There is a hard-coded license file which expires on 12/31/2005. Nuance ASR will initialize and then go out of service, however, TTS will remain in service.

  You can quickly verify this by setting the date of your IPCCx server to a date prior to 12/31/2005. If Nuance ASR goes into service, then you will need get the fix from the Cisco TAC to correct this problem.

• Cisco asr 1001 compatible fiber modules

  Hello

  We recently purchased a cisco asr 1001 router and I have a number of interface units. I want to fill these with fiber modules.

  Can you tell me what fiber modules are compatible Please? SFP regular ok to use or is there a special series of asr of FPS to use?

  Thank you very much

  Paul

  Paul,

  You reason that GLC - T & GLC - SX - MM is not supported with the ASR1000 platform.

  The following link confirms that:

  http://www.Cisco.com/en/us/docs/interfaces_modules/transceiver_modules/compatibility/matrix/OL_6981.html#wp131775

  More FPS are supported with ASR1000 platform:

  SFP-GE-T

  SFP-GE-S
  SFP-GE-L
  SFP-GE-Z
  CWDM SFP
  DWDM SFP

  GLC-BX-D
  GLC-BX-U

  I handled a similar case yesterday where GLC - T wouldn t aith ASR1k & I confirmed that it would be not be funded in the future as well.

  HTH,

  Amit

• is that I can spend 5.1.3 to 5.3.3 XR?

  Hello!

  is that I can spend 5.1.3 to 5.3.3 XR?

  I can't find the guide here

  http://www.Cisco.com/Web/Cisco_IOS_XR_Software/index.html

  RP/RSP0/0/CPU0xxx: #sh short version
  03:58:50.624 Thu Feb 18 UTC

  Software IOS Cisco XR, Version 5.1.3 [Default]
  Copyright (c) 2014 by Cisco Systems, Inc.

  ROM: System "bootstrap", Version 2.03(20131022:110718) [ASR9K ROMMON],

  the availability of xxxx is 3 hours 35 minutes
  System image file is "bootflash:disk0/asr9k-os-mbi-5.1.3/0x100000/mbiasr9k-rp.vm".

  Cisco series ASR9K (P4040) processor with K 8388608 bytes of memory.
  P4040 processor 1500 MHz, revision 2.0
  ASR-9001 chassis

  2 Ethernet management
  4 TenGigE
  4 controllers of DWDM
  4 WANPHY controllers
  219 k bytes of non-volatile configuration memory.
  2868M bytes of disk space.
  3915760 k bytes of disk0: (sector size of 512 bytes).

  Node RSP0/0/CPU0 [RP] [CSD: owner]
  Starter: disk0:
  Boot image: /disk0/asr9k-os-mbi-5.1.3/0x100000/mbiasr9k-rp.vm
  Active packages:
  Disk0:asr9k - fpd - px - 5.1.3
  Disk0:asr9k - k9sec-px - 5.1.3
  Disk0:asr9k - mini-px - 5.1.3
  Disk0:asr9k - mpls-px - 5.1.3
  Disk0:asr9k - px - 5.1.3. CSCus71103- 1.0.0

  Node 0/0/CPU0 [LK] [CSD: owner]
  Starter: mem:
  Boot image: /disk0/asr9k-os-mbi-5.1.3/lc/mbiasr9k-lc.vm
  Active packages:
  Disk0:asr9k - mini-px - 5.1.3
  Disk0:asr9k - mpls-px - 5.1.3
  Disk0:asr9k - px - 5.1.3. CSCus71103- 1.0.0

  BR

  Oka

  Yes its not easy when you try to install the wrong TAR :)

  It's crying out to tell you that you're missing the PIE ipsec. Please go ahead and download the k9 tar.

  Eddie.

• WAN PHY configuration,

  Dear all,

  Is there a duty to reload the card from LAN PHY to WAN PHY?

  ASR 9001

  MPA-A9K-4X10GE

  Best regards, Pok.

  On 7600, certainly not. but not sure on asr9k

• X interface VLAN 4451

  I try to configure interfaces VLAN on a 4451 X and problem. I can configure subinterfaces, but I want to set up a real interface VLAN like this:

  B12_3925 (config) #int vlan 11
  * Jan 11 21:17:20: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Vlan11, change of State down
  B12_3925(Config-if) #IP add 192.168.100.1 255.255.255.0

  Am I missing something? This should be very simple.

  Thank you

  Hello

  4451-X is a router, so, working with the VLAN is different to the switches. Creating a interface Vlan would make sense only if you had a switching module installed in this router and had some of its interfaces configured as switchports in the VLAN individual. Otherwise, the only way to work with the VLAN attached to interfaces routed to this router is to create some subinterfaces.

  Keep in mind: a router can have several routed interfaces and each of them can put an end to an independent set of VLANS. To a router, simply saying 'VLAN 11' doesn't mean anything, because this VLAN can be used on several routed ports and their subinterfaces. That's why the style interface Vlan is not used with routers without changing of modules installed because it is ambiguous.

  Welcome to ask for more!

  Best regards
  Peter

• Changes of State DMVPN intermittent dmvpn

  We run a double DMVPN hub and spoke configuration using the router ASR for hubs and 2811 routers for the spoke routers.  Have passed us recently 3000 remote sites and discovered a problem in which we struggle with.  On some routers spoke (we don't know for sure how much), we see that the show in some cases dmvpn responds with IKE or PNDH with one of the peers hub (see below)

  Ro1-13349 #sho dmvpn
  Legend: Attrb--> S - static, D - dynamic, I - incomplete
  Local N - using a NAT, L-, X - no Socket
  # Ent--> entries number of the PNDH with same counterpart NBMA
  State of the NHS: E--> RSVPs, R--> answer
  UpDn time--> upward or down time for a Tunnel
  ==========================================================================

  Interface: Tunnel1, IPv4 PNDH details
  IPv4 recording timer: 30 seconds

  IPv4 NHS: 10.1.0.1 RE
  Type: talk, Total NBMA peers (v4/v6): 1

  # Ent Peer NBMA Peer Tunnel Addr add State UpDn Tm Attrb target network
  ----- --------------- --------------- ----- -------- ----- -----------------
  1 A.B.C.D 10.1.0.1 UP 6d14h S 10.1.0.1/32

  Interface: Tunnels2, IPv4 PNDH details
  IPv4 recording timer: 30 seconds

  IPv4 NHS: 10.2.0.1 E
  Type: talk, Total NBMA peers (v4/v6): 1

  # Ent Peer NBMA Peer Tunnel Addr add State UpDn Tm Attrb target network
  ----- --------------- --------------- ----- -------- ----- -----------------
  1 A.B.C.D 10.2.0.1 IKE 3w6d S 10.2.0.1/32

  The State gets between IKE and PNDH and upward.  We captured the data from our 3000 connections 3 times + and we saw about 15 to 20 on each capture data with 1 location that was on every list.

  Is there an extra logging that can help determine the cause?  We have recently added dmvpn logging on 32 branches and the typical message we see is as follows

  Apr 4 10:34:29.619 CDT: % DMVPN-5-NHRP_NHS: tunnels2 10.2.0.1 is DOWN
  Apr 4 10:35:53.048 CDT: % DMVPN-3-NHRP_ERROR: registration failed for on tunnels2 10.2.0.1

  In some cases, we get the following

  Apr 4 14:28:40.558 CDT: % DMVPN-7-CRYPTO_SS: tunnels2 - A.B.C.D socket is BROKEN

  Compensation crypto sessions or a tap continuously on the tunnel has rarely solves the problem.  If the problem returns.  We use a mixture of pre-shared key and CA cryptographic authentication.  We use Version 12.4 (24) T1 as IOS based on other issues.

  Please provide any idea that you may have on this type of problem.  I'll add more as discover us more information and has no relevant data to add.

  ERP,

  I'm afraid that my expertiese lies in troubleshooting, rather than surveillance.

  SNMP is an option? (I don't think there's much tagetted for DMVPN)

  I thought something similar to this:

  http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_dmvpn_tun_mon.html#wp1055877

  (although not sure how well ASR suppoorts this)

  Regarding conditional debugging and debugging at all.

  There is a debugging, you can generally activate "debug crypto isa err" which displays only the parts of the IKE negotiation error without risk.

  For conditional debugging. We can narrown down particular peer VRF interfaces or even particular debugging connections - this however would require that we already know if / what specific rays are affected more than others.

  PINGER#debug nhrp condition ?
  
        interface  based on the interface
  
        peer       based on the peer
  
        vrf        based on the vrf
  

  and

  PINGER#debug crypto condi ?
  
        connid     IKE/IPsec connection-id filter
  
        fvrf       Front-door VRF filter
  
        isakmp     Isakmp profile filter
  
        ivrf       Inside VRF filter
  
        local      IKE local address filter
  
        peer       IKE peer filter
  
        reset      Delete all debug filters and turn off conditional debug
  
        spi        SPI (Security Policy Index) filter
  
        unmatched  Output debugs even if no context available
  
        username   Xauth or Pki-aaa username filter
  

  I trust mainly "debug crypto condition homologous ipv4.

  Marcin

• Need help with the automatic backup feature - please!

  Hello

  I recently started a flash animation and the AutoSave feature is enabled.  I got a good animation, but decided to play a little with it.  After a few moments, I decided to call one night and you exit the program ensuring NOT to save my work.  When you open this file the next time, I just found out that Flash has my file saved automatically while I was playing.  Now I have an animation worthless and have to start over again.  Is it possible to go back to an earlier backup or AutoSave at this point or I am about to do a lot of work again?

  Thanks to all who can help.

  As far as I know, the auto save feature is not able to track down the previous versions of the document being saved - that calls for a specified version control system. I think that Flash saves the file only if it is requested to the. There are several ways to enable or disable auto-save:

  1. in the dialog "new Document." You can choose to activate the automatic backup.
  2. In the "Properties of the Document" dialog box, you can set the check mark.

  If these are true, it will not happen of any economy car. The problem may be, there is also a section called ASR. Backup and recovery is not the same when it comes to Flash, but people tend to consider the same. You set the AutoRecover feature in preferences under general.

  • Windows: Edit > Preferences: general > auto salvage
  • Mac OS: Flash Professional > preferences: general > auto salvage

  Both has a default value of 10 minutes and it can confuse the user. Please see the document to make sure, that you have not disconnected ASR instead of the Auto-Save. You can do this:

  1. Go to preferences (Ctrl + U on Windows, and command + U on Mac OS) and check if the automatic recovery is set.
  2. Go to the properties of documents (Ctrl + Windows and cmd + D on Mac OS) and check if the Auto-Save is set.

  The first (in preferences) is ok to have fixed. It is the second, which could have caused problems for you.

  /Ockley

• We are faceing in windows2003 backup problems, ' question VSS_E_UNEXPECTED_PROVIDER_ERROR and ASR

  Hi team,

  This is regaridng backup failure!

  We use windows2003 and 2008 servers get more backup failres in windows2003, backup fail with the following error. Please suggest me on this. view.

  Here ARE THE error MESSAGES: we frequently get.

  ===============================

  TSM file: vssback.cpp (3086)
  02/11/2011-18:40:25 ANS5258E an error initialization of VSS application. For more information, see the TSM client error log.

  02/11/2011-18:40:25 ANS5258E an error initialization of VSS application. For more information, see the TSM client error log.

  03/11/2011 05:10:19 Manager Windows ANS1577I console event receives a console event "logout".
  03/11/2011 05:10:22 Manager Windows ANS1577I console event receives a console event "logout".
  03/11/2011-15:53:51 ANS5250E an unexpected error has been encountered.
  The TSM function name: isVolumeSupported
  Function TSM: IsVolumeSupported() returned 'VSS_E_UNEXPECTED_PROVIDER_ERROR' for the volume "c:\". »
  Return code of TSM: 4353
  TSM file: vssreq.cpp (5542)
  03/11/2011-15:53:51 ANS5250E an unexpected error has been encountered.
  The TSM function name: vssCheckVolumeSupport
  Function TSM: isVolumeSupported() returned an unexpected error for volume "\\usdc2qsapa30\c$".
  Return code of TSM: 4353
  TSM file: vssback.cpp (3086)
  03/11/2011-15:53:51 ANS5258E an error initialization of VSS application. For more information, see the TSM client error log.

  03/11/2011-15:53:51 ANS5258E an error initialization of VSS application. For more information, see the TSM client error log.

  ===================================================================================

  04/11/2011-04:17:35 ANS1228E 'C:' object sending failed
  04/11/2011-04:17:35 ANS1468E backup file (ASR, Automated System Recovery) has failed.  No files will be saved.

  11/04/2011 04:31:07 Manager console event Windows ANS1577I received a console 'Close' event
  04/11/2011-04:31:07 ANS2820E an interruption has occurred. The current operation ends and the
  customer stops.
  04/11/2011-15:02:25 ANS5250E an unexpected error has been encountered.
  The TSM function name: VssRequestor::QueryStatus
  Function TSM: returned from pAsync-> QueryStatus() calling 'VssQuerySystemWriters()' VSS_E_WRITER_INFRASTRUCTURE
  TSM return code:-1
  TSM file: vssreq.cpp (8273)
  04/11/2011-15:06:15 ANS1228E 'C:' object sending failed
  04/11/2011-15:06:15 ANS1468E backup file (ASR, Automated System Recovery) has failed.  No files will be saved.

  =====================================================================================

  11/05/2011 02:05:25 ANS5250E an unexpected error has been encountered.
  The TSM function name: isVolumeSupported
  Function TSM: IsVolumeSupported() returned 'VSS_E_UNEXPECTED_PROVIDER_ERROR' for the volume "c:\". »
  Return code of TSM: 4353
  TSM file: vssreq.cpp (5486)
  11/05/2011 02:05:25 ANS5250E an unexpected error has been encountered.
  The TSM function name: vssCheckVolumeSupport
  Function TSM: isVolumeSupported() returned an unexpected error for volume "\\usdc2rsapa07\c$".
  Return code of TSM: 4353
  TSM file: vssback.cpp (3066)
  11/05/2011 02:05:25 ANS5258E an error initialization of VSS application. For more information, see the TSM client error log.

  11/05/2011 02:05:25 ANS5258E an error initialization of VSS application. For more information, see the TSM client error log.

  11/05/2011 02:11:07 regular ANS1512E event 'INCR_0200' failed.  Return code = 12.

  Hello

  Microsoft Answers is oriented level consumer support only. As such, we don't focus on products Windows Server here. You should repost the Forum at http://social.technet.microsoft.com/Forums/en-us/winserverfiles/threads .