TS News May 2013
Articles | Tech Docs | Get Involved | Subscribe | Refer A Friend | Contact Us | Website | View in Browser
Cisco Evolves Associate-Level Certifications

Yes, Cisco UCS Servers Are That Good

Find out just how much Cisco’s Unified Computing System is helping our current customers and how it might also help you.
> Get the facts

TAC-Authored Tech Docs

How Cisco IT Simplified Network Growth with EIGRP

Easy-to-use protocol minimized effort to provision 25,000 teleworker offices and simplified transition to IPv6.
> Find out how


Expert to Expert:

Innovative Troubleshooting Tools in Cisco Switches

When a customer calls Cisco TAC to troubleshoot a connectivity problem, TAC uses these innovative troubleshooting tools to confirm if a packet is really received by the switch, what the packet looks like when it is received, what is the forwarding decision made by the switch and where is the packet going.... Sounds like real innovation! Cisco experts Andy Gossett and Yogesh Ramdoss tell you more..
> Read on

What do YOU want to ask a TAC engineer? Send your questions to techsupportnews@cisco.com. If we publish an answer to your question, you'll see your name in print, impress your friends, and get some free stuff too!

TAC Tip:

ASA Firewall Has High CPU Due to a Traffic Loop When VPN Clients Disconnect

This document, by Cisco TAC engineer Magnus Mortensen, describes a common issue that TAC sees often when VPN clients disconnect from a Cisco Adaptive Security Appliance (ASA) running as a remote access VPN headend. It also describes the situation where a traffic loop occurs when VPN users disconnect from an ASA firewall and possible mitigation methods.
> Check it out

Chalk Talk:

The Evolution of Identity Services on Firewalls

This article, by Cisco expert Alexandre Moraes, discusses the three generations of Identity-based control on Cisco Firewalls, with particular emphasis on the ASA family.

The first generation is centered on the captive portal paradigm, mainly relying on downloadable ACLs to differentiate among users that are connecting through the firewall. The second, sometimes referred to as the ID Firewall, allows the creation of permissions based on MS AD user/group domain information. The third generation, known as the SGT Firewall, represents a true evolution because it provides integration not only between the firewall and the edge devices (such as wireless APs and LAN switches), which are the main source of user information, but also between the firewall and switches that reside on the server side.
> Find out more


New Cisco Product Documentation Available Online
Check the September release for information about the latest documentation releases for Cisco products, including Cisco Catalyst 2960 XR Switch, Cisco Identity Services Engine, and Cisco TelePresence.
> Start your search

Cisco IPv6 Lab Goes Mobile
Measure and report IPv6 adoption statistics real-time from your mobile device.
> Go now

On-Demand Developer Exchange on Cisco Support Community
This new community is where you can develop, share your code, and get recognized as a Cisco's Preferred Developer. With this collaborative space, it will be easier than before to write code and share it with your co-workers, friends or other developers.
> Develop! Share! Get Recognized!

Come See Us at Interop New York, September 30 - October 4, 2013
Visit Interop NY and learn how to transform and create new opportunities to claim your share of the Internet of Everything economy. On Wednesday 10/2/2013, join us for a keynote with Cisco Chairman/CEO John Chambers.

New Bug Search Tool is Live
New features make finding, watching and managing software bugs easier.
> Read more

Tune-Up Your Collaboration Experience for Peak Performance
Are new technologies, business demands and use models affecting your collaboration experience and affecting overall productivity and ROI? Take this quick test and see if you are ready for a tune-up.
> Test now

Cisco Accelerator for Entrepreneurs
Cisco Accelerator for Entrepreneurs is a new Cisco-powered start-up accelerator designed to support early-stage entrepreneurs working on the next big ideas in enterprise web. Apply now or contact Cisco at


New documents or documents with major updates (italicized titles) published August 1 - 31, 2013

See a list of new and updated Security Advisories.


Configuration Example:
TAC - CUSP Proxy

Tech Notes:
TAC - Nexus 7000 Series M132XP-12 Module Troubleshooting Based on Error Logs
TAC - ACE No space left on device Error Message
TAC - CUSP Call Processing
TAC - ACE Upgrade to A5(2.2) and Higher Causes URL-based Load Balancing


Configuration Examples:
TAC - AnyConnect VPN Phone Connection to a Cisco IOS Router
TAC - EEM Applets to Capture Output from Show Stacks Command Configuration
TAC - Simultaneous Embedded Packet Capture from Two Interfaces

Tech Notes:
TAC - MTU Behavior on IOS XR and IOS Routers
TAC - IOS XR Software Maintenance Updates (SMUs)
TAC - mVPN Profiles


Tech Note:
TAC - CUIC Licensing Type Issue


Tech Notes:
TAC - Copy Files to a Router without File Transfer Access
TAC - Policy Routing and Its Impact on ESP and ISAKMP Packets with Cisco IOS
TAC - Network Time Protocol (NTP) Issues Troubleshooting and Debugging Guide


Tech Note:
TAC - Nexus 7000 Peer-Switch Configuration (Hybrid Setup)


Configuration Examples:
TAC - CSM Authentication with ACS and Authorization with Local RBAC
TAC - NCS Integration with ACS 5.4
TAC - Configure HTTPS Support for ISE SCEP Integration

Tech Notes:
TAC - ASA Network Address Translation Configuration Troubleshooting
ASA SNMP Polling for Memory-Related Statistics
TAC - RSA Token Server and SDI Protocol Usage for ASA and ACS
TAC - Restore an ISE Version 1.1.x Monitoring Node Backup to Another Node
TAC - Java Update Enforces CRL Checks by Default Which Prevents NSP and Guest Flows
TAC - Simple Certificate Enrollment Protocol Overview
TAC - ASA 5500-X: Clear a Console Connection to an Installed IPS/CX Module
TAC - SSL Introduction with Sample Transaction and Packet Exchange
TAC - ASA Connection Problems to the Cisco Adaptive Security Device Manager

TAC - ASA FAQ: How do you open ASDM-IDM Launcher when the Macintosh OS X claims "Cisco ASDM-IDM" is damaged and cannot be opened?
TAC - AnyConnect FAQ: Tunnels, Reconnect Behavior, and the Inactivity Timer


Configuration Example:
TAC - Private VLAN and Cisco UCS Configuration

Tech Note:
TAC - Tracing of MAC Addresses in UCS with Nexus 1000V


Tech Note:
TAC - Smart Zoning


Tech Notes:
TAC - FabricPath: Mapping Out the Multidestination Tree for a FTAG
TAC - N2K-C2248TP-E-1GE FEX Not Supported on N7K Series Routers
TAC - Catalyst 6500 Series Switches: Identify a Module Affected by an LTL Parity Check
TAC - Nexus 1000v VSM and Host UUID Changes
TAC - Catalyst 6500 Series Switches Netflow TCAM Utilization Management
TAC - SERVER line in license should have "this_host ANY" Error Message Troubleshoot for Nexus 7000 Series Switches


Tech Note:
TAC - Tls Handshake Failure On the Vcs Web Interface


Tech Notes:
TAC - CIM: Use Alarm Workflow to Process Activities from the nIPTA Queue


Configuration Examples:
TAC - CUBE Third-Party Interoperability Fax Guidelines

Tech Notes:
TAC - Jabber for Windows MSI Transformation failing via MS Orca
TAC - UC Integration for IBM Sametime and Secure CTI Issues
TAC - Jabber for Windows Hangs at Login
TAC - Click to Call Menu Does Not Appear in Microsoft Office Applications
TAC - CUCIMOC and CUCILync Do Not List Any Desk Phone Devices
TAC - PIMG Clips Audio at the End of Recorded Messages
TAC - Jabber for Windows Active Video Call Bandwidth Identification
TAC - Jabber for Windows Decreases the Volume on a Windows 7 PC
TAC - CUAC User Entry Maximum Limit Determination
TAC - Jabber for Windows Crash Dump Analysis with the WinDbg Tool
TAC - Unity Connection Unable to Add a DRS Backup Device
TAC - Unity Connection Receives NDRs to the Unaddressed Distribution List
TAC - Unity Web Page Does Not Work
TAC - CVP "wan-delay-ringback" Configuration in the Survivability.tcl Script to Mitigate Network Latency Effects
TAC - API_NOT_INITIALIZED Error Message Troubleshoot on CUAC
TAC - CCMP DBCheck Tool Does Not Launch
TAC - Diagnostic Framework Portico Manual Installation and Log Files
TAC - CUCM Security By Default and ITL Operation and Troubleshooting
TAC - Jabber Displays Incorrect Contact for a Number
TAC - Jabber for Windows Phone-Only Mode Feature Overview and Installation Tips
TAC - Unified Attendant Console Version 9 Licensing Error
TAC - Identify Active Cisco Desktop Suite (CAD/CSD/CDA) Users by IP Address
TAC - CUCM License Migration from Version 8.x to Version 9.x
Understanding Inbound and Outbound Dial Peers Matching on IOS Platforms

TAC - CIPC FAQ: How is time determined?
TAC - CUPS FAQ: How do you resolve the "Update Failed for the Service(s)" error?
TAC - CUAC FAQ: What is the difference between consult and blind transfers and why do blind transfers sometimes fail?
TAC - What are the best practices to follow in order to preserve disk space on the Cisco Unity Server?
TAC - DX650 FAQ: How do you take a screenshot?


Configuration Example:
TAC - CT5760 Controller and Catalyst 3850 Switch



Cisco Press Meet the Authors

Meet Cisco Press authors from across the technology spectrum in this exciting webinar series. Here's your opportunity to learn from people, including Wendell Odom, who literally "wrote the book". Register Today!

Cisco TechAdvantage Webinar


Missed the Supporting Zeroconf and Apple Bonjour in the Enterprise using Cisco’s Service Discovery Gateway TechAdvantage Webinar? Download the slides and reply

Upcoming Ask the Expert Events from Cisco Support Community's Expert Corner


• Google Hangout on Air: IOS-XR Introduction and Command Line
Ask the Expert:
Managing Controllers with Cisco Prime -starts September 9, 2013
Tech Talk:
Introduction to Cisco Identity Services Engine (ISE)
Webcast Archive:
• Missed a live webcast? Read all the Q&A and watch the videos!

Technology You Can Use from Geeks You Can Trust


Join your favorite geeks in these TechWiseTV videos and workshops:

Unified Communications: Am I Missing Something? - Why upgrade? Experts explain the business and IT benefits of updating your technology.
Networking101: Open Shortest Path First (OSPF) - Join Cisco as we cover everything you need to know about Open Shortest Path First.

Easily Deployed Provisioning with Cisco Prime Infrastructure - Deploy, Provision, Configure: Cisco Prime Infrastructure Makes It Simple
Cisco Catalyst 6500/6800 Instant Access (IA) Fundamentals - Simplify Deployment with Instant Access: Our Expert Shows You How

Contact Us

Send us your questions or comments.