Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

After switching from ASA 5510 to ASA 5512 strange ack = (big number) behavior?

Posted on 2014-01-22
6
Medium Priority
?
355 Views
Last Modified: 2014-02-11
After switch from ASA 5510 to ASA 5512 the internal network are acting strangely. We can't connect and print to our Konica-Minolta printers. And can't connect to WMware ESX via Sphere. Everything else seems to work OK. Our switch is a Cisco 2960S. No vLan.
The funny thing is when we connect to our hosted office server via RDP we can connect and print.
The ASA's are configured 1 to 1 as closely as possible. Latest firmware on both.
Switching back to ASA 5510 removes the problem.

We have had Cisco people looking at this, but no luck so far, except for the communication to the printer, ACK= are not 1, but a large number?

Does anyone have clue to this?
0
Comment
Question by:khc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 26

Expert Comment

by:Soulja
ID: 39800117
Can you post both fw configs as well as the switch? Please attach them to the post instead of pasting them.
0
 
LVL 25

Expert Comment

by:Cyclops3590
ID: 39800304
ACK being a large value doesn't mean anything.  I'm assuming you're talking about seeing it in wireshark maybe.  could happen if it doesn't know where the sequence numbers started depending on when the capture was started so it doesn't know the relative number to the starting point.

But as Soulja commented, the configs would help.
0
 
LVL 12

Expert Comment

by:Henk van Achterberg
ID: 39800891
How is your NAT config?

Are you sure that ProxyArp is not messing things up?

When you are on the same network traffic should not flow trough the ASA when connecting internally.
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 26

Expert Comment

by:Soulja
ID: 39800959
Until configs are provided, we can only make assumptions.
0
 

Author Comment

by:khc
ID: 39804334
Thank you for answering. Here are the configs for ASA 5510 and ASA 5512.
ASA5510-5512runningconfig.txt
0
 
LVL 18

Accepted Solution

by:
Akinsd earned 1500 total points
ID: 39829007
I probably would recommend a packet trace to identify where the packets are dropping

- packet-tracer input inside tcp 192.168.118.x 4444 192.168.118.x 4444 detailed

You can also use Examdiff to compare both configs to determine if a command is missing or a new command is introduced
http://www.prestosoft.com/edp_examdiff.asp

Also, check if aaa authentication is enabled on the switch or any acl that may be filtering traffic based on MAC address
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question