Spanning Tree & interface.

sh span det | i ieee|exec|occur|last change - - Cmd to check Spanning tree topology changes to the Vlan.

sh int  counters errors - Checking errors on interface

sh diagnostics switch all  -- Hardware checkup

SNMP Troubleshooting in Cisco Device.

Configuring this command terminate the connection between device towards the SNMP Server(Solar Winds)

***********************************************************************************

(config)#snmp-server view cutdown iso include

snmp-server view cutdown 1.3.6.1.2.1.4.21 exc (OID ipRouteTable)

snmp-server view cutdown 1.3.6.1.2.1.4.22 exc (ipNetToMediaTable)

snmp-server community ldhepub01 view cutdown RO

Commands to see the CPU Utilization:

*****************************

Device# sh process cpu sort --> shows Indiviual Entries

Device# sh run | sec snmp

Device# sh snmp status oid

Device# sh proc cpu sorted | exc 0.00

Cisco 7925 wifi phone get disconnected from wifi: Network Busy or Leaving Service Area

In WLC, go to WLANs > Edit the SSID  XXXX > Change QoS to “Platinum (Voice)”

Cisco ASA Packet Process Algorithm

 

Here is a diagram of how the Cisco ASA processes the packet that it receives:

Here are the individual steps in detail:

1.      Packet is reached at the ingress interface.

2.      Once the packet reaches the internal buffer of the interface, the input counter of the interface is incremented by one.

3.      Cisco ASA will first verify if this is an existing connection by looking at its internal connection table details. If the packet flow matches an existing connection, then the access-control list (ACL) check is bypassed, and the packet is moved forward.

If packet flow does not match an existing connection, then TCP state is verified. If it is a SYN packet or UDP packet, then the connection counter is incremented by one and the packet is sent for an ACL check. If it is not a SYN packet, the packet is dropped and the event is logged.

4.      The packet is processed as per the interface ACLs. It is verified in sequential order of the ACL entries and if it matches any of the ACL entries, it moves forward. Otherwise, the packet is dropped and the information is logged. The ACL hit count will be incremented by one when the packet matches the ACL entry.

5.      The packet is verified for the translation rules. If a packet passes through this check, then a connection entry is created for this flow, and the packet moves forward. Otherwise, the packet is dropped and the information is logged.

6.      The packet is subjected to an Inspection Check. This inspection verifies whether or not this specific packet flow is in compliance with the protocol. Cisco ASA has a built-in inspection engine that inspects each connection as per its pre-defined set of application-level functionalities. If it passed the inspection, it is moved forward. Otherwise, the packet is dropped and the information is logged.

Additional Security-Checks will be implemented if a CSC module is involved.

7.      The IP header information is translated as per the NAT/PAT rule and checksums are updated accordingly. The packet is forwarded to AIP-SSM for IPS related security checks, when the AIP module is involved.

8.      The packet is forwarded to the egress interface based on the translation rules. If no egress interface is specified in the translation rule, then the destination interface is decided based on global route lookup.

9.      On the egress interface, the interface route lookup is performed. Remember, the egress interface is determined by the translation rule that will take the priority.

10.  Once a Layer 3 route has been found and the next hop identified, Layer 2 resolution is performed. Layer 2 rewrite of MAC header happens at this stage.

11.  The packet is transmitted on wire, and Interface counters increment on the egress interface.

 

Please consider the environment before printing this e-mail Disclaimer: This  communication  is  for the exclusive use of the intended recipient(s) and  shall  not attach any liability on the originator or ITC Infotech India Ltd./its  Holding company/ its Subsidiaries/ its Group Companies. If you are the addressee, the contents of this e-mail are intended for your use only and it shall  not be forwarded to any third party, without first obtaining written authorization from the originator or ITC Infotech India Ltd./ its Holding company/its  Subsidiaries/ its Group Companies. It may contain information which is confidential and legally privileged and the same shall not be used or dealt with  by any  third  party  in  any manner whatsoever without the specific consent  of  ITC  Infotech India Ltd./ its Holding company/ its Subsidiaries/ its Group Companies.

ASA Show commands

 

Show Commands

Here are some useful commands that help in tracking the packet flow details at different stages of processing:

·         Show interface

·         Show conn

·         Show access-list

·         Show xlate

·         Show service-policy inspect

·         Show run static

·         Show run nat

·         Show run global

·         Show run global

·         Show nat

·         Show route

·         Show arp

 

Please consider the environment before printing this e-mail Disclaimer: This  communication  is  for the exclusive use of the intended recipient(s) and  shall  not attach any liability on the originator or ITC Infotech India Ltd./its  Holding company/ its Subsidiaries/ its Group Companies. If you are the addressee, the contents of this e-mail are intended for your use only and it shall  not be forwarded to any third party, without first obtaining written authorization from the originator or ITC Infotech India Ltd./ its Holding company/its  Subsidiaries/ its Group Companies. It may contain information which is confidential and legally privileged and the same shall not be used or dealt with  by any  third  party  in  any manner whatsoever without the specific consent  of  ITC  Infotech India Ltd./ its Holding company/ its Subsidiaries/ its Group Companies.