Cisco Systems 2621XM - np ip inspect causes failure

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
2621XM - np ip inspect causes failure Chris 12-13-05
Posted by Chris on December 13, 2005, 10:36 am
Please log in for more thread options
 We are having a problem with browsing a particular web site - half of
the packets are dropped and it takes a long time to load the page.  The
site is good, and we have no problems with any other sites.  As a
troubleshooting step the tech from the ISP had me enter the command NO
IP INSPECT ETHERNET - to stop filtering on the ethernet level.  When we
do this the internet goes down.  We can still ping outside IP's - but
no browsing.  I am not a Cisco pro, but I am being told this should not
happen.  Any ideas or has anyone had this happen before?  The config
has been looked at by a couple people and nothing stands out to them.
IOS ver 12.3(3a).  Thanks!

  Chris.


Posted by Merv on December 13, 2005, 11:45 am
Please log in for more thread options
There are quite a few CBAC bugs that have been fixed in higher 12.3
releases so you might want to try upgrading the IOS version being sued


Posted by Chris on December 13, 2005, 11:04 pm
Please log in for more thread options
  Problem was fixed.  Apparently if you have an access list, you have
to remove that before removing IP inspect.  The problem in our config
was the ip inspect http.  The word from Cisco is that many people use
that command incorrectly to inspect web traffic, when it really blocks
some java functions.  Who knew?

  Chris.


Posted by on December 14, 2005, 9:22 am
Please log in for more thread options

Is this what you want?


     ip inspect name any-name http

When applied to an interface:-

turns on java blocking

Obviously!


Similar ThreadsPosted
2621XM - np ip inspect causes failure December 13, 2005, 10:36 am
IP Inspect May 18, 2006, 7:13 pm
HTTP Inspect November 11, 2005, 3:05 pm
HTTP INSPECT November 11, 2005, 3:11 pm
IP Inspect vs. established March 12, 2009, 9:59 pm
IP INSPECT question January 21, 2010, 6:28 am
CBAC / IP Inspect Confusion December 6, 2005, 6:27 am
IP Inspect and Browsing issues October 13, 2007, 2:08 pm
inspect pptp - disruptive? February 14, 2008, 1:35 pm
ASA, static, icmp and inspect FTP August 22, 2008, 5:11 am
NAT and access lists and IP INSPECT January 22, 2010, 6:24 am
DNS Fixup/Inspect Pix/ASA 7.0 or greater breaking email October 7, 2006, 6:47 pm
ip inspect causing problems joing domain December 7, 2006, 9:43 pm
Using an ASA's AIP SSM module to inspect traffic going into and coming out of a VPN tunnel. January 22, 2009, 12:14 pm
2620XM and 2621XM March 20, 2006, 2:17 pm
Latest PostsForumRSS
Re: 871W: Wi-fi to Wi-fi unreliable Wireless Networking
Traffic Shaping Cisco Systems
School district and Verizon collaborate over cell phone lear... General Telecommunications Forum
Re: Motion Sensor Light for Front Entrance General Home Automation
Telecom Hardware Cisco Certification
Selling Routes Bangladesh CLI (White) Voice-Over-IP
USB _to_ RJ45 (not from) connection Ethernet LAN
FAQ: Maximizing cable modem or DSL speed Cable Modems
CASH FOR CISCO - I BUY USED AND NEW EQUIPMENT & LOTS MOR... Telecom Technical
FAQ: Maximizing cable modem or DSL speed Digital Subscriber Line
How to set up Meridian 1 to "provide clock" to a C... Nortel Networks
NFL Soccer Jersey, NBA NHL Sports Jersey From China LAN and Telecom Cabling
Control Hot Water Circ Pump With X10? Home Automation
Text file to automate restoring a dropped VPN connection. Virtual Private Networks
Home Theater Installation Home Theater
Re: The Turkic Languages in a Nutshell Fiber Optics
sip Video Conferencing
Residential Cabling Guide Home Cabling Guide

Finally, an instantly downloadable book that saves you thousands in home improvement dollars! Enjoy living in 21st century technology-advanced home while increasing its selling value and competitive advantage on the real estate market. Whether your cabling is for home office or high-tech leisure, you can wire your home yourself or learn "wirish" to speak with your cabling contractors in their language!

Click Here to learn more