Cisco :: 6509 - Can't Access WS-SVC-NAM-2 Module Through HTTP Or Telnet
Jun 16, 2011
I try to access to WS-SVC-NAM-2 module in the Switch 6509. But is not work although the HTTP port is enabled (I tested with the command telnet @ip 80).
I try telnet access to the module to check the config , but I always the message that the lo gin / password is wrong even though they are valid.
I was logged in to this device in monday normally and in tuesday when i trying to
Cisco SW#telnet 172.17.1.1 Trying 172.17.1.1 ... % Connection refused by remote hos
And i compare the current configuration with last configuration in monday i found no change, this device in live network also cpu is normally and memory.
I have issue to access one of the wism on 6509 switch however other wism is ok both wism on switch are up and functional how to enable remote access on wism.
On a Catalyst 6509 switch I have configured wccp protocol in order to redirect the Http traffic to a Bluecoat SG8100. It was working fine until a new L3 interface implementation.Thereafter I was unable to redirect the http traffic due to an error reported from the Cat6509: [code] After some checks I supposed that the problem should be the UDP 2048 port connection between the Switch and the Bluecoat while the switch L3 port and the bluecoat are on the same Lan. A deep analysis found that the WCCP protocol seems to be as follow:
-Proxy address 10.64.28.240 to Switch Port 10.64.28.250 Here I Am -Switch Port 10.64.28.250 to Proxy address 10.64.28.240 I See You -Switch Port 10.66.0.251 to Proxy address 10.64.28.240 UDP 2048 packet (dropped by firewall)
It's strange to me that the first dialog is correctly handled by the correct Cat6509 interface while the UDP packets are flowing from another Vlan interface not configured with the WCCP and apparently not involved on the protocol.Last of all the WCCP is now disabled and unusable?
We have a 6509-e (WS-C6509-E V04) with (4) (WS-X6148-GE-TX) 48 port modules and a supervisor 32 (WS-SUP32-GE-3B).We purchased a supervisor 720 (WS-SUP720-3B) and (2) (WS-6708-10G-3C) 8 port fiber modules and (1) WS-X6748-GE-TX)48 port module to add to the switch. My question is what is the best way to swap out the supervisor module? Can the SUP720 be added as a standby module so that the config can be transferred? Probably a long shot. Is there anything in this swap that I should be concerned with? The other three modules should be pretty straight forward.
we have two 6509 catalyst. we bought two new SFM-capable 16 port 1000mb GBIC/WS-X6516A-GBIC module. but our catalysts doesnt support them. we don't know the reason. we tried on another 6500 series catalyst they worked.
here are the outputs from our 6509:
Core-SW-1#sh module Mod Ports Card Type Model Serial No. --- ----- -------------------------------------- ------------------ ----------- 1 0 1-subslot SPA Interface Processor-600 7600-SIP-600 JAE14090958 2 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX SAL1413DX2B 3 16 CEF720 16 port 10GE WS-X6716-10GE SAL1414EL2Q 4 1 Application Control Engine Module ACE20-MOD-K9 SAD1408036Z 5 5 Supervisor Engine 720 10GE (Active) VS-S720-10G SAL1414ERDT 6 5 Supervisor Engine 720 10GE (RPR-Warm) VS-S720-10G SAL1414ERE3 7 16 CEF720 16 port 10GE WS-X6716-10GE SAL1414ER93 8 16 SFM-capable 16 port 1000mb GBIC WS-X6516A-GBIC SAL1326SVBS(code)
Need to remove the IPSec VPN SPA module from the 6509 chassis. Does the module is hot swappable or does the 6509 need to be turned off prior to removal.
I have a pair of 6509-E Switches running VS-720 Supervisors. We are planning to add Ace Module onto the 6509-E. Will IP Base Image suffice the requirement? Will Ace Module work with only IP Base Image?
We have a 6509 with an ACE module. For reasons I don't fully understand the ACE is running using a BVI in bridge mode. It has loads of secondary interfaces.
[Code]...
I can ping all of the IPs on the BVI, but only servers in Subnet 10.7.42/42 can ping out of the the layer 3 on the 6509. I have all the routes configured properly on the 6509 pointing to the ACE for these subnets. The question is though the config has been excepted, is there a limit to the number of secondary on a BVI.
I have a switch Cisco WS-C6509-E WS-X6716-10G-3C module ( module for 10 GB) , i have the IOS s72033-ipservicesk9-mz.122-18.SXF9.bin. I want to know if this IOS can support this module or not ? or , if i must do a upgrade , is that the IOS : "s72033-ipservicesk9_wan-mz.122-33.SXH8" work fine ?
Suffered a big outage on the network, the fix was to reload the module 3 on the 6509 switch, we had these errors on the log %CONST_DIAG-SW1_SP-3-HM_PORT_TEST_FAIL: Switch 1 Module 3 TestUnusedPortLoopback Port(s)[24,46] failed. System operation continues.in the end, we reloaded the card and it was all ok. is there anything I can do to check the card / or any deeper logs? would that error cause the card to crash?
I have a cisco 6509 configured with a cisco NAM module. I have reset the config of the NAM module by the config clear command. Since this moment I can't no more ping the NAM module via the management port: OK via the 127.0.0.91 address and log in ok via the ios cli session command. [code] I have already tried to reboot the module via the ios cli hw module command and nothing better.
I have a cisco 6509 (ws-c6509-e) IOS 12.2.(18)SXF6 with the following modules and submodules: [code] I would like to add another module, I have WS-6816-GBIC or WS-6516-GBIC which one will work with my 6509 ? The 6509 has four module slots empty: 4-7-8-9, Can I add the card in one of these slots ?
How I can shutdown a module when I am running vsl.I can use the following command #hw-module module 2 shutdown.As I have modules in both switch 1 and switch 2 how can I ensure I only shut down module 2 in switch 1.
We have a VSS environment with two Cisco 6509-Es. IOS image:s72033-ipservicesk9_wan-mz.122-33.SXI5 when I switch on or reload the Core switches(VSS), I find a Minor Error in the "Show module switch all" command.I also did a "show diagnostic result switch 1 module 5"Switch 1 Module 5: Supervisor Engine 720 10GE (Active) SerialNo : SAL1521E035
Overall Diagnostic Result for Switch 1 Module 5 : MINOR ERROR Diagnostic level at card bootup: complete Test results: (. = Pass, F = Fail, U = Untested) 45) TestVslLocalLoopback: Port 1 2 3 4 5 ------------------- U U U . F
This issue temporarily relieves when reseating the X2 module, but reappears after reloading the switch.
I am desiging a topology with two Cat 6509 and Two ACE Module, one ACE per Catalyst. I am thinking to use bridge mode for the customer contexts, I would like to know if the Bridged mode is an Assymetric topology.
The server gateway is the ip address of the ACE or the Router?
We have a requirement to build a datacenter within a datacenter for a new project. The existing Core network is 2 x Cisco 6509 in VSS configuration. We would like to connect the new datacenter to the existing Core switch from the new low-end Core switch. This datacenter would have a SAN network and blader chassis.
Listing the Cisco Switches requirements and expansion module requirements ?
- What expansion module is required at existing 6509 ? Can we have one 10Gibit modules on each switches and crate a port-channel connection from new datacenter core switch ?
- Which model of Switch you recommend for the new Datacenter Core which is only going to have one SAN Enclosure and two blade chassis? Will it be a good option to use 3750E ? If yes do we need any additional modules there ?
- Which aggregation switch should we use for the blade enclosure ?
- Should we have a Cisco Embedded Switch module on the chassis to create trunk with aggregation switch ?
- How the SAN director switch is connecting to the LAN ? should we have any particular module at new Core switch ?
I trying configure ASN traffic load balance, but doesn't works.I have one Cisco Catalyst 6509 and onde Cisco Ace10 module, in my context "PanWEB" i have the interfaces above: [code] If i try to establish a telnet session(telnet 10.96.202.10 80) i see the SYN packet passing through the ACE and going to the real server, but, the server do not response the SYN packet. I done a capture in the server using wireshark and could see that the IP address of the destination is the VIP and not the rserver ip address , this is a problem? Why can not I have the SYN + ACK from the server?
I m planning to implement VSS in core but want some inputs on IOS as i have FWSM as a service module Core :- Ii am running 12.2(33)SXH2a on my Core 6509 and i checkd cisco sites and Fwsm release notes but it states only I-Train of IOS while mine is H-Train so can I directly upgrade to I-Train or I was thinking of SXH8b IOS.
We are facing a strange issue, our ACE 20 got failed due to power issue , after RMA once we are installing ACE 20 to 6509 , the status LED is showing ORANGE . The sh module shows it as " Others " ... The IOS is same as it was previously in 6509 .
We have two 6509 switches with one WS-X6704-10GE module in each of them. There is an optical cable between the two switches plugged in WS-X6704-10GE module on both sides. When you shut down the port on one side the other port still stays as up and you need phisycally to unplug the cable to have it down. The same behaviour is seen no matter on which of the two switches you shut down the port, the opposite one always stays as up and only removal of the cable makes it go down.
The ports are configured quite simply:
interface TenGigabitEthernet1/1 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 1-10 no ip address udld port
We have a Catalyst 6509 switch, and we hope to use policy based routing to redirect http traffic to my proxy server, where I can find the configuration example?
We have a design of two 6509 running in a VSS with dual supervisor each having fthree 10/100/1000mb etherner modules. We have diagnosed a wierd problem that none of the switchports in module 1 and 2 on either switches are having layer2/layer 3 connectivity.
Tried everything from changing the cables to changing the end device but no luck with it.
Module results show pass and no errors in the logging.
I am testing out some inspection options on an ASA 5505, and I am running into a situation in which applying a http inspection is dropping all outbound http traffic. I get a "protocol violation" error in the logs.
Here is the setup: I'm not sure why the web traffic is getting dropped.
policy-map type inspect dns preset_dns_map parameters message-length maximum client auto
I've set up this router in the office, and I can access it via PPTP without any problems from home (via windows VPN), Router is sat in DMZ with full access to the internet.
Q1,I've created a 2 phase ipsec vpn with an IKE & preshared key (AES/MD5/1), but I can't find out how to get my encrypted hash for it?also, I can't access the IOS via telnet/ putty, I found an article online explaining how to enable it via url string, but it didn't work,
Q2,I've setup the cisco client on my laptop, and working on the pcf file, without much luck.. Everytime I try to connect it get " error 412. the remote peer is no longer responding. " With wireshark, I can see the requests been made to the router.. ( from the office )
I recently acquired a Cisco VPN 3000 Concentrator Series (fairly old hardware) without a manual, and I'm trying to figure out how to 'telnet' or browser into the router to access the IOS. The device has been reset and I am plugged into the console. I'm running Windows 7 and enabled the Win7 Telnet Client in the OS. Can any tell me how to do this or at least point me in the right direction to obtain the user manual for basic instructions?
Model number: CVPN3005-E/FE
I found the manual for it after going through some hyperlinks. But when you access the console in the Windows OS, is your network connection supposed to show disconnected, or connected but no internet access?
i have 68 sites with Routers. On each site I have one equipment DIRECTLY connected to the Router that needs to be accessed by telnet port 23.
I have 15 off this sites that the access via telnet to the equipment’s connected after the routers are not working. These sites are using Router Cisco 3925. The other sites that are working are using Routers Cisco MWR 2921.
Both router models are running the same configuration with no filter on it.
The equipment’s after the routers are all accessed directly via telnet without the router. If the router is directly plugged to the equipment the 15 sites with Router Cisco 3925 are not accessed via telnet.
There is any bug related with the IOS version that Router Cisco 3925 is using?:
Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 15.1(2)T2, RELEASE SOFTWARE (fc1).ROM: System Bootstrap, Version 15.0(1r)M8, RELEASE SOFTWARE (fc1).System image file is "flash0:c3900-universalk9-mz.SPA.151-2.T2.bin"
I cannot access http sites unless I manually write the prefix https. The issue is mainly on Wordpress blog pages and I have to keep writing https if I want to access other blogger's page.For the time being I am using Chrome's extension "Https Enforcer" which slows down my browsing speed but eventually the sites open. I have to disable it if I have to use google images. I use windows 7, Chrome browser, Pocket Modem.
We've got a SG200-18 switch that is to be used as a workgroup switch in our environment (SW Version 1.1.1.8). Working with CLI on big and mid-range Cisco-gear over the past two decades I'm having a hard time figuring out the following on the SG200:
o) I want to change the Management-VLAN from the default "1" to the management-VLAN used in our environment. Sure enough I created that vlan in the SG200-config, however when it comes to assigning the management-IP and VLAN for the management interface in the corresponding pulldown under "IPv4 interface -> Management VLAN" the only thing selectable is the default "1". (see screenshots enclosed)So how do I set a management VLAN different from 1?
o) How do I enable telnet/ssh-access to the SG200-18 - I'd be far more comfortable with a CLI-environment?