Sometimes our network lag and i thing there is a computer making this problem. i'd like to audit all input output of all port of a Catalyst 1900. all i manage to do is to enter to the console menu via Telnet.. once here, i try monitoring but i'm afraid to do a bad thing :
Catalyst 1900 - Main Menu
[C] Console Settings
[S] System
[N] Network Management
[P] Port Configuration
[Code]...
I have this topology in part of my networ:k
Cisco7200---Cisco6500---Cisco3560---LAN1
|
Cisco3560
|
LAN2
All devices are interconected via optical 1Gb/s links. There is no QoS implemented on any device and all VLANs are allowed on all interfaces.
Also all links are trunks (with many VLANs)
In LAN1 there was a layer 2 broadcast-storm and 4000packets/s was comming to rest of the network (in one particular VLAN).
1) 7200 with G1 should be able to handle traffic up to 500Mb/s, but a lot of users experienced drops on traffic via 7200.
(CPU load was around 10%).
2) Why do I have input drops on 7200 on link toward 6500 if CPU was normal. Broadcast comming to this interfaces were cca 4kpps. But since it's destination is not on router these packets should be rejected on interface controller. Is that right? (7200 doesn't even has dot1q subinterface in that VLAN but since 6500 allow all VLANs on its trunk these packets reach 7200)
3) Why do I have output drops on Cisco 6500 (it is here as layer 2 device only)? It is max 160Mb/s in output direction. It has WS6724 card with DFC (there is no oversubscription).. Shouln't 6500 send traffic as fast as interface allows (up to 1Gb/s). Am I righ't?
4) After all how coul'd 6500 now if 7200 can't handle these traffic?Output drops should be only seen if QoS is enabled (i.e. shaping), or if there is oversubscription on the linecard?
We have 7206 VXR running NPE-G1, we are looking for the GigE cards for 7200 which supports upto line rate and came across Cisco 7200 Series Input/Output Controllers The datasheet for the same doesnt say anything about line rates.
View 3 Replies View RelatedMy router, a Cisco 7204 with NPE 300, is experiencing output drops and input errors on a fastethernet interface. I have a 100Mbps connection with less than 15Mbps utilization at peak times.
FastEthernet1/0 is up, line protocol is up Hardware is DEC21140, address is 0014.a985.1a1c (bia 0014.a985.1a1c) Internet address is 38.102.66.134/30 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 3/255, rxload 1/255
[Code]....
I found increasing of total output drops and output queue drops even input rate was low and no qos apply on this interface. I plan to increase hold queue out for output queue.
Router 1941, 15.0(1)M4
Serial0/0/0 is up, line protocol is up
Hardware is WIC MBRD Serial
[Code]....
when i type "show interface" command on 1941 router, shows below print. Why 5 minute input-output rate are 0 bits? Can it be a bug?
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
304015 packets input, 151607798 bytes, 0 no buffer
[Code].....
I have a video feed coming into my 3570. It comes in at 5 minute input rate 18777000 bits/sec, 1695 packets/sec. However, the uplink to the router is much different, 5 minute output rate 130000 bits/sec, 28 packets/sec. I am in a lab and about ready to go into testing phase for a project when we discovered this problem, as this video feed is not veiwable on the other end.
Below is the config and capture from the switch.
BLOSSw1#sh int g1/0/6GigabitEthernet1/0/6 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is a44c.112f.3506 (bia a44c.112f.3506) MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec, reliability 255/255, txload 1/255, rxload 4/255 Encapsulation ARPA, loopback not set Keepalive not set Full-duplex, 1000Mb/s, link type is auto, media type is 10/100/1000BaseTX SFP input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:00, output hang never Last clearing of "show interface" counters 15:16:25 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute
[code]....
On my SUP-7E, when I issue a " show interface vlan X " I cannot see the expected input/rate reflecting the real rate (which should be very high).
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 4000 bits/sec, 2 packets/sec
(Under the physical interfaces it is ok)However on other SUP-IV I can see the real rate.
My questions are :
- Why the SUP-7E does not reflect the rate, whereas the SUP-IV does ?
- I have heard about the 'counter' command under the vlan interface to activate the rate counters. Is this command application has any side effect on the switch ?
Our customer get the problem that the switch count the 5mins input/output rate of connected traffic interface always ZERO.The problem only occur in the module 3,4 and 5 interface, module 2 has no problems.
-------------------------------------------------------------------------------------------------
Catayst 4506E
12.2(52)SG
Chassis Type : WS-C4506-E
Power consumed by backplane : 0 Watts
Mod Ports Card Type Model Serial No.---+-----+--------------------------------------+------------------+-----------1 6 Sup 6-E 10GE (X2), 1000BaseX (SFP) WS-X45-SUP6-E 2 48 10/100/1000BaseT (RJ45) WS-X4548-GB-RJ45 3 48 10/100/1000BaseT (RJ45) WS-X4648-RJ45-E 4 48 10/100/1000BaseT (RJ45) WS-X4648-RJ45-E 5 48 10/100/1000BaseT (RJ45) WS-X4648-RJ45-E
[code]....+
I bought a DVI D to hdmi connector so i can watch movies from my computer on my hdtv but whenever i try to switch to DVI on my HP w1907 my monitor says no input signal.
View 1 Replies View RelatedWe have Cisco ME3400 switch, with configuration described below.
GE0/1 port is uplink:
interface GigabitEthernet0/1
description ***MATED-IUB_C&U-Plan***
port-type nni
switchport trunk allowed vlan 331,450,4085
switchport mode trunk
GEo/2 is configured as below:
interface GigabitEthernet0/2
description ***From NIB***
port-type nni
switchport access vlan 4085
[URL]
We have also tried Loopguard feature enabled on all ports: but after some period same problem is repeated.
version information is below:
Cisco IOS Software, ME340x Software (ME340x-METROIPACCESSK9-M), Version 12.2(25)SEG3, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 25-Jul-07 22:56 by amvarma
I am looking at the interface stats of port Fa1/0/2 and see something strange. Ouput drops are 42Billion in 16mins, then 21249 few seconds later, then followed by 42Billion drops again, then 21444...and so forth..I keep getting an entirely different output drops reading everytime i refresh within seconds of each refresh!
sh int fa1/0/2
FastEthernet1/0/2 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is ecc8.8266.d604 (bia ecc8.8266.d604)
Description: MSGMERGF1
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 12/255, rxload 11/255
[code]....
I have 2 cat3524xl's and a 3550. I recently did something to the IOS that makes the switch not display any output to the console port. Not sure what I did but even doing the reset as instructed in the Cisco docs by holding the mode button foe 2 seconds after boot. I get the flashing green light but still no output. All POST tests pass according to lights so I tried different cables and all baud rates with no change. I hoocked switches back up in lab and can see them in CDP neibors but do not know how to access them from there as they have no IP assigned to them. Remember this is two of them with exact same issue.
View 2 Replies View RelatedI have a 48 port 2960 switch with 2 10/100 ports ( fa0/46-47) setup in an etherchannel with a 2950 48 port switch. I am getting total output drops on port fa0/47. [code]
View 2 Replies View RelatedOn my D-link routher the power supply broke. I instal another one but it has 2.5A as output instead of 2A as the broken one has. Is it dangerous.
View 2 Replies View RelatedWhat is the cause of having a huge number ( 875349) of total output drops on one of my gigabit utp port gi 2/12 which is connected to Cisco 1841 fa0/0 router by mean of cat5e cable.I did change the cable from cat5e to cat 6 and tried to increase hold queue to 4096 and to tweak wrr queue bandwidth
View 4 Replies View RelatedOne of my Catalyst 3750 switch have many out drops, I execute "sh mls qos int g2/0/3 statist" command, there are many output drops in queue3 threshold3. [code]
View 8 Replies View Relatedwhat's the meaning of the output:
Interface Speed Local pair Pair length Remote pair Pair status
--------- ----- ---------- ------------------ ----------- --------------------
Gi0/40 100M Pair A 2 +/- 4 meters Pair A Normal
Pair B 2 +/- 4 meters Pair B Normal
Pair C 2 +/- 4 meters Pair C Short
Pair D 2 +/- 4 meters Pair D Short
From the command
test cable-diagnostics tdr int gi 0/40
It's normal?If not, then. the problem is on the cable or on one of the interfaces?The interface is connected between a fastethenert on a 2811 router and a 3560-48 switch.The cable is a straight through cat 5e cable. (I have changed several cables with same result).
I just got a Cisco 2960G 24-port gigabit switch so that our HP servers can have a Gigabit connection to the network. I moved 2 servers to it (HP Proliant DL380's) but they don't actually seem to be able to achieve even close to 1000Gbps. I ran same some LAN bandwidth tests and it was showing only around 200-300 Mbps between all of them. I also ran a network stress test utility, LAN Tornado, and it was showing packet loss as high as 60% when on gigabit, and only .07% when on 100Mbps.
-Both the NIC's and the switch ports are set to 1000/Full
-Currently using Cat5e cabling no more than 25Ft in length (I know Cat6 would be better but Cat5e is supposed to support Gigabit)
-All servers are on the same VLAN
Here are the port statistics when running just a stress test @ 10Mbps that had a 45% packet loss. What's odd though is when I set the servers and switches to 100Mbps, I get less than 1% packet loss.
GigabitEthernet1/0/16 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 203a.07ff.7e90 (bia 203a.07ff.7e90)
MTU 9000 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
[Code].....
this router of my girlfriends only works when iplug the dsl modem into the output ports what could possibly cause this. would a firmware upgrade straighten it out...
View 1 Replies View Relatedme what are the best Free tools to do a Network Audit (Thoughput, speed linksswitchs usage, analyse network topology.. etc)
View 7 Replies View RelatedIn our network we use cisco WS-C6509-E (R7000) Backbobe switch. We want to route syslog to log server.But I couldn't do it. How can solve this problem?
View 7 Replies View RelatedI need to understand why change audit report reports an unused username Name of the user who performed the change. This is the name entered when the user logged in. It can be the name under which the LMS application is running, or the name using which the change was performed on the device. #The User Name field may not always reflect the user name. The User Name is reflected only when: A config change was performed using LMS. #A config change was performed outside of LMS, but the network has username-based AAA security model, wherein authentication is performed by an AAA server, which could be TACACS/RADIUS or local.
View 2 Replies View RelatedWe have a PIX 515E running ver 6.3 and we want to implemente some sort of logging to keep track of who/when logs in to the PIX and if they make any config changes or to the file system. All of this is for forensic purposes in the future. I have already looked at some PIX docs but I don´t seem to find what I am lokking for.
View 1 Replies View RelatedACS and i would like to know how to enable the "Configuration Audit" for someone login to my network devices using their ACS login and i can monitor what they did on it.
ACS Version : 5.2.0.26
We are trying to finally get rid of a couple old 3060 concentrators and would like to see how many active connections are still on. Is there any reporting that can be seen from the concentrators?
View 3 Replies View Relatedi can configure a requirement type as audit (opposed to mandatory or optional), so the client will still access the network, the user will not be notified, and the information will be sent to the cas.It is possibile to generate an email or similar automated process to notify administrators on these audits?
(version in use 4.7.2)
When performing an audit from NCS Prime 1.3 on our 5508 controllers (500 lic) we are getting mismatch messages from many of our 3602i AP's that say the following...
(Type)Configuration Name Audit Status Attribute Prime Infrastructure Value Controller Value
(AP APname, Interface) 802.11a/n Mismatch Spectrum Intelligence true false
These AP's are not configured as Spectrum Intelligence on the controllers, rather as local. It seems that NCS believes that they are supposed to be SI. We have refreshed the config from controller many times but this does not change. The 5508's run v.7.2.111.3 Is there a change I can make on NCS or otherwise to make this mismatch go away? Is this a bug? It is not causing any problems (that we can see) but as most would rather not have these mismatches.
I'm using ACS 5.4p2 within distributed systems: one primary and one secondary instance.For now, primary instance is acting as Log Collector server and I can see any AAA audit logs.
When the primary instance fails I can authenticate successfully using the secondary instance.However, when primary instance comes back, I'm not able to see any audit logs operated by secondary.
I have noticed that under the Device Change Audit list under the configuration dashboard. LMS lists the wrong user for the last change. For example. User ABC performed a change on a switch yesterday but switch shows user XYZ has performed the change.
e.g.
SwitchA
! Last configuration change at 16:27:06 AEST Mon Aug 15 2011 by ABC
User XYZ then performs changes on switchB, switchC. These show up correctly. but the change on switchA shows user XYZ instead of ABC.
User XYZ has never logged into the switchA in question.
My cisco works LMS3.2 is not showing recent configuration of my Cisco devices. also it dont show any change report on last 24 hours or even if i select x number of day, looks like its not saving any changes made on devices.
today i logged in and cisco ASA was showing this in status as well Configuration Last Archived Time May 03 2012 11:27:46 EDT on checking i could see it is same date when cisco ASA was added in cisco works. do i need to click some where for auto update configuration changes and latest confoguration in cisco works setting?
I have a cisco 2811 router set up as a nat/firewall gateway for my network. I've configured it for CBAC on using ip inspect and an access list.What I want is to use audit-trail to record network traffic (which means sending syslog messages to a server) concerning established sessions from my own network to locations in the outside. If i configure this using ip inspect audit-trail and no ip inspect alert-off, the configuration looks like this: [code] which works just fine, but there is the matter of icmp packets.
Since i use polling software that needs to check some machines in the outside part of the network, it is only natural that several icmp sessions are established through the Inspection Rule per minute. The problem is that since these sessions are recorded along with everything else, my syslogs are flooded with these (since i am using logging trap informational) to the point that more messages are generated about icmp than all other traffic combined, especially in non-working hours.What I am asking is a way for the audit-trail to be selecively disabled for icmp, so that the outgoing (echo) &incoming (echo reply) sessions can be established without generating syslog messages.
I have a client whom uses a DSL 10 MG circuit as their backup circuit for Internet Connectivity in case of a failure. The circuit uses a DSL modem that is unreliable. I was recommending yesterday tot he client that perhaps we could place a Cisco router in place of the residential grade DSL modem /router currently in place.I wanted to place a 1900 ISR G2 in there, which would allow me to swap the DSL module out whenever I can talk the company into a Metro E connection. At that point I could swap the DSL module out and put an Ethernet module in to receive the Metro E. I was not able to find a solution last night using the Dynamic Configuration Tool. Seems DSL has been phased out.Is there any recommendation that could be made to accommodate this clients request for a Cisco router that will handle DSL?
View 7 Replies View Related
