Hello all, do you have any update news on this? thanks Le Luu
From: P C <pc50...@gmail.com> To: Deny IP Any Any <denyipany...@gmail.com> Cc: cisco-nsp@puck.nether.net Sent: Monday, November 28, 2011 12:32 PM Subject: Re: [c-nsp] keeping ASA-5585s stable asa823-10-smp-k8 is very stable for me on ASA 5580s (not 85) and large-scale ipsec RA vpn termination. Sounds like you are hitting a bug though, I'd push for escalation in TAC. You have a traceback and can grab the crashinfo file off the flash. They should be able to get a developer involved to find the offending bug. On Mon, Nov 28, 2011 at 10:15 AM, Deny IP Any Any <denyipany...@gmail.com> wrote: > I've got a pair of ASA-5585s in an Active/Standby config running > asa825-13-smp-k8.bin. A week or two after being deployed, the Active > unit started to crash every few hours; TAC had me move to > asa825-17-smp-k8.bin, and to also stop using remote-access IPSEC VPN > on these units. > > Now, 2 weeks later, the Active unit started to crash again, and TAC is > baffled (when the secondary unit goes Active, it crashes too, so I > don't think it is hardware) > > Does anybody have ASA5585s that run stable? Mine aren't doing anything > crazy; pushing 120megabit/sec on the outside int with around 35000 > connections, and about 275 static NAT translations for an e-com web > farm; the exact same config was very stable on a pair of 5540s for > years, until we "upgraded" to 5585s. > > Cisco Adaptive Security Appliance Software Version 8.2(5)17 > > Compiled on Fri 28-Oct-11 17:09 by builders > Hardware: ASA5585-SSP-10 > Crashinfo collected on 09:12:57.554 EST Mon Nov 28 2011 > > Traceback: > 0: 0x8061c83 > 1: 0x8062797 > 2: 0x8af4cc5 > 3: 0xff6a86d5 > 4: 0xff57b1e0 > 5: 0x81dd98b > 6: 0x81dc88a > 7: 0x8af0a28 > 8: 0x8af9f62 > 9: 0x8afeb47 > 10: 0xff6a3a1c > 11: 0xff61f7d7 > > -- > deny ip any any (4393649193 matches) > _______________________________________________ > cisco-nsp mailing list cisco-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/