Author Topic: Video Streaming Issue With ISG2000  (Read 2966 times)

sbalagru6

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Video Streaming Issue With ISG2000
« on: August 11, 2010, 12:21:10 pm »
Hi Friends,

We are facing strange issue while accessing youtube videos. The video streams for 30-35 seconds and after that it stops automatically.

We have a ISG2000 setup (Active-Active) between trust & untrust network. From inside we will be using public ips to access the internet.

The debug output shows the below,

**st: <ISP_Untrust|ethernet1/1.352|Root|160> 479c11c: 0:74.125.209.119/2954->27.57.105.102/c00a,17,189
****** 1791504.0: <ISP_Untrust/ethernet1/1.352> packet received [189]******
  ipid = 0(0000), @0479c11c
  packet passed sanity check.
  ethernet1/1.352:74.125.209.119/10580->27.57.105.102/49162,17<Root>
  no session found
  flow_first_inline_vector: in <ethernet1/1.352>, out <N/A>
  chose interface ethernet1/1.352 as incoming nat if.
  flow_first_inline_vector: in <ethernet1/1.352>, out <N/A>
  search route to (ethernet1/1.352, 74.125.209.119->27.57.105.102) in vr untrust-vr for vsd-0/flag-0/ifp-null
  [ Dest] 30.route 27.57.105.102->10.89.210.82, to ethernet1/1.363
  routed (x_dst_ip 27.57.105.102) from ethernet1/1.352 (ethernet1/1.352 in 0) to ethernet1/1.363
  policy search from zone 1002-> zone 1005
 policy_flow_search  policy search nat_crt from zone 1002-> zone 1005
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 27.57.105.102, port 49162, proto 17)
  No SW RPC rule match, search HW rule
rs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
rs_search_ip : no rms ctx! (rms_ctx 0, rule cnt 0)
policy id (320000)
  packet dropped, denied by policy
**st: <ISP_Untrust|ethernet1/1.352|Root|160> 8076811c: 0:74.125.209.119/2954->27.57.105.102/c00c,17,855
****** 1791504.0: <ISP_Untrust/ethernet1/1.352> packet received [855]******
  ipid = 0(0000), @8076811c
  packet passed sanity check.
  ethernet1/1.352:74.125.209.119/10580->27.57.105.102/49164,17<Root>
  no session found
  flow_first_inline_vector: in <ethernet1/1.352>, out <N/A>
  chose interface ethernet1/1.352 as incoming nat if.
  flow_first_inline_vector: in <ethernet1/1.352>, out <N/A>
  search route to (ethernet1/1.352, 74.125.209.119->27.57.105.102) in vr untrust-vr for vsd-0/flag-0/ifp-null
  [ Dest] 30.route 27.57.105.102->10.89.210.82, to ethernet1/1.363
  routed (x_dst_ip 27.57.105.102) from ethernet1/1.352 (ethernet1/1.352 in 0) to ethernet1/1.363
  policy search from zone 1002-> zone 1005
 policy_flow_search  policy search nat_crt from zone 1002-> zone 1005
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 27.57.105.102, port 49164, proto 17)
  No SW RPC rule match, search HW rule
rs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
rs_search_ip : no rms ctx! (rms_ctx 0, rule cnt 0)
policy id (320000)
  packet dropped, denied by policy
**st: <ISP_Untrust|ethernet1/1.352|Root|160> 479c11c: 0:74.125.209.119/2954->27.57.105.102/c00a,17,192
****** 1791504.0: <ISP_Untrust/ethernet1/1.352> packet received [192]******
  ipid = 0(0000), @0479c11c
  packet passed sanity check.
  ethernet1/1.352:74.125.209.119/10580->27.57.105.102/49162,17<Root>
  no session found
  flow_first_inline_vector: in <ethernet1/1.352>, out <N/A>
  chose interface ethernet1/1.352 as incoming nat if.
  flow_first_inline_vector: in <ethernet1/1.352>, out <N/A>
  search route to (ethernet1/1.352, 74.125.209.119->27.57.105.102) in vr untrust-vr for vsd-0/flag-0/ifp-null
  [ Dest] 30.route 27.57.105.102->10.89.210.82, to ethernet1/1.363
  routed (x_dst_ip 27.57.105.102) from ethernet1/1.352 (ethernet1/1.352 in 0) to ethernet1/1.363
  policy search from zone 1002-> zone 1005
 policy_flow_search  policy search nat_crt from zone 1002-> zone 1005
  RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 27.57.105.102, port 49162, proto 17)
  No SW RPC rule match, search HW rule
rs_search_ip: policy matched id/idx/action = 320000/-1/0x0
  Searching global policy.
rs_search_ip : no rms ctx! (rms_ctx 0, rule cnt 0)
policy id (320000)
  packet dropped, denied by policy

shailender

  • Newbie
  • *
  • Posts: 19
  • Karma: +0/-0
    • View Profile
Re: Video Streaming Issue With ISG2000
« Reply #1 on: March 06, 2011, 07:54:33 am »
Hi.
have you recieve any solution for that ? I am also searching for that...
MCSE2000,CCNA,CCNP(BCMSN),JNCIA-ER,JNCIS-ER,CEH5.0

muppet

  • Global Moderator
  • Full Member
  • *****
  • Posts: 211
  • Karma: +0/-0
  • I Like Beer
    • View Profile
    • LiCe for EPIC5
Re: Video Streaming Issue With ISG2000
« Reply #2 on: March 07, 2011, 07:57:39 pm »