Cisco :: OID To Show Total MAC Addresses In Use On 6509
Jul 28, 2011
How to identify the OID to show the “total MAC Addresses In Use” on a 6509, This is the value we can see from a show mac-address counters, and I want our Solarwinds system to poll for it.
I have a solution of thre ACS.. one primary and two secondaries. My customer report me that in port of the switch where is connected the ACS show two mac address. [code]
I can see what MAC addresses have a wireless session and I've used MAC Filtering to stop some MAC addresses from using the network at certain times, but they are still getting through to the internet. I don't know if they were to clone their MAC address as to whether this would show up with the cloned address in active sessions list. How I can stop some users from getting through at certain times? Any utility I can use on my Mac (Mac OS X 10.6. to show which computers/MAC addresses are on the network?
Is there a way I can check the version of each device on two Cisco 6509 if they are Virtually connected (VSS)? When I enter the command show version, it only shows one result, unlike show module, you have an option to choose which switch by entering 1 or 2.
Configuring FWSM in a 6509. When I set "firewall vlan-group 40 40-42,251", it results in: "No more than one svi is allowed. Command rejected.".
I had "firewall multiple-vlan-interfaces" set for a previous use of this module, but took that off with the "no" command. Suspect that is the issue, but do not see how to resolve. Seems similar to bug CSCsr48563, but I am at the fixed code for that bug.
We have a design of two 6509 running in a VSS with dual supervisor each having fthree 10/100/1000mb etherner modules. We have diagnosed a wierd problem that none of the switchports in module 1 and 2 on either switches are having layer2/layer 3 connectivity.
Tried everything from changing the cables to changing the end device but no luck with it.
Module results show pass and no errors in the logging.
In setup for old RV042 (V1), when updating / adding Mac addresses, the table is always sorted by IP addresses. But in the new oneRV042 (V3) I have, even with latest firmware 4.2.1.02 the list is random, thereby increasing the chance of user entering DUPLICATE IP addr with diff Mac addr. That will result in conflict.If the firmware sorts the DHCP entries by ip addresses, user would be able to catch duplicate ip errors even if the system does not flag the errors. All Cisco smart engineers can you all get the dhcp entries SORT by ip addresses.
I have configured a vlan interface on a 3750 switch. there is aprox 4Mb active traffic flowing through the interface, but when I do a "show interface vlan (vlanid)" the output show zero bits in and zero bits out. Its a typical L3 config with one IP on the vllan interface acting as the gateway for the VLAN devices. Is this a normal behaviur ? and if so is there any way to get the traffic in/out stats. The end PC/devices are connected to this switch via an L2 TRUNK and I dont have access to the L2 switch on which the actual devices connect. so cant get the real time stats of those interfaces.
Facing issue with 2960G switch , where its do not display "logging trap informational " in show running and show startup .where its showing all other levels from 0 to 5 and 7 after configuration and save commands. [code] after config getting saved , it do not shows in show runn or in show startup while for all other levels it do show the config lines .I tried the same on 12.55.SE release also but its same results . Is this a limitaion of this platform, is there any doc explaining the same for reference. [code]
We have a pair of ASA5520 firewalls setup in a very inefficient fashion, and I wish to convert them to an active/passive cluster. Trouble is, there are a number of configuration option I will need to re-implement (VPN tunnels, remote users etc), and trying to capture the configuation with a simple "show running-config" or "show running-config all" or even "show startup-config" doesn't get me things like the pre-shared-key from the VPN configurations - and I don't know them all, so I can't simply re-enter them.Is there any way to get a dump of the running (or startup) config which shows the hidden settings like pre-shared keys and OSPF message digest keys?
I have a 48 port 2960 switch with 2 10/100 ports ( fa0/46-47) setup in an etherchannel with a 2950 48 port switch. I am getting total output drops on port fa0/47. [code]
We've (an independent school) just bought an SR520 with a view to replacing one of our Draytek 2820s. We need to set up some site-to-site VPN with NAT and the Drayteks won't do it.
I've been trying to configure the SR520 in just the most basic fashion using CCA (3.1) and the CLI but with no success. I can't get a PPP connection with our ISP.
I've tried following the instructions in the software config pdf and also tried replicating the various 'running configs' reported in other posts in this forum to allow connection to a UK ISP, with no success. I don't know how many times I've reset the poor thing to factory defaults.
I have to say that I'm dismayed at how flaky the CCA appears to be. Many of the things I've tried with it simply don't work and often end up in it hanging. Close to useless in my view.
So instead I've tried to use the CLI which seems a lot more solid but is somewhat impenetrable and there's precious little by way of supporting explanation.
Is it possible to increase bandwidth througput on 2951 router if you have 3 WAN connections from different ISP, lets say 12Mbps + 24Mbps + 8Mbps, so will I get 44Mbps internet connection in total?Also, on 887G router, if I use DSL 12Mbps broadband, can I use 3G internet connection constantly, not for backup only. And will I get the total bandwidth output as a sum of two connections?
I have 2 Cat-6506's that are used for my WiSM's. The only thing in both Chassis is 2 X WiSMs a SUP-7203A and a 6516A line card.The only connection between the rest of the network and these chassis is on port gig 1/2.[code] If I have read other posts correctly all points to the ASIC being overun by that traffic being sent from my WiSMs out to the Network.
I have a Catalyst Switch that is been used as a SAN switch providing ISCSI connection for servers.The total output drops of the interfaces connected to the SAN and some connected to the servers keep increasing.
Example below:
SWESAN1-1#sh interfaces gigabitEthernet 0/1 GigabitEthernet0/1 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is ec44.763c.8f01 (bia ec44.763c.8f01)MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 5/255Encapsulation ARPA, loopback not setKeepalive set (10 sec)Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTXinput flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00Last input never, output 00:00:08, output hang neverLast clearing of "show interface" counters 03:25:04Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 78Queueing strategy: fifoOutput queue: 0/40 (size/max)5 minute input rate 22322000 bits/sec, 2171 packets/sec5 minute output rate 5155000 bits/sec, 1487 packets/sec20441503 packets input, 23941254166 bytes, 0 no bufferReceived 0 broadcasts (0 multicasts)0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 0 multicast, 0 pause input0 input packets with dribble condition detected16323602 packets output, 9608971046 bytes, 0 underruns0 output errors, 0 collisions, 0 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier, 0 PAUSE output0 output buffer failures, 0 output buffers swapped out
I have a problem with Total Output Drops, it's increase and decreases on WS-C3750E-48TD-E.
SWCIACTCT05#sh int gi1/0/47 | i Total output drops: Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 6487344 SWCIACTCT05#sh int gi1/0/47 | i Total output drops: Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 6487344 SWCIACTCT05#sh int gi1/0/47 | i Total output drops: Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 6487344
[code]....
I checked and found two registered bug id: CSCtq86186 / CSCso81660.I would like to know what is the best IOS version to update my switch, IOS 15.0.2 SE2 or 12.2.58 SE2, by the way, my environment is very critical (data center) and the version 15.0.2 SE2 is very recent, but its stable ?In both versions the problem are fixed?
I´m monitoring the total number of concurrent sessions of my ACE 20 (using Cacti), and from time to time, with no discernable pattern, I see an instant drop of sessions to half...I don´t detect any disturbance with our traffic and service, I have no complaints, but it's a very accentuated drop.
I´m able to get 1 or 2 days withouth any suddent drop of connections, and then for no reason I pass from 500.000 to 200.000 sessions in a minute. Then they gradually go up again.
I´ve seen in ACE´s session table that she keeps a great number of half-open, or closed sessions, and those are counted as part of concurrent sessions. Is there any flush on ACE´s table when she reaches a certain number of closed TCP sessions or something like that?
Our database server is connected on cisco swich 2960G gigabitEthernet 0/38.while showing the interface command the total output drops is a large value..Is there any issue with this value.I think this is one of the reason for slow access of the server.
cisco6#show interfaces gigabitEthernet 0/38 GigabitEthernet0/38 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 58bc.2746.45a6 (bia 58bc.2746.45a6)
We had several AIR-LAP1131AG-N-K9 devices have a peculiar failure recently.About 10 total units failed in groups of 2-4. Each group was on the same 3560 switch, and they failed at the same time.Now all but one of the units will power and work properly with an inline power injector. But they are either intermittent or not at all when connected to the POE Switch. Even when I use a 3ft patch cable to connect directly to the switch. I have certified the cable and they do the same no matter which port or cable used. 'show inline power' command will show these failed units as 'Iee PD'v
What is the cause of having a huge number ( 875349) of total output drops on one of my gigabit utp port gi 2/12 which is connected to Cisco 1841 fa0/0 router by mean of cat5e cable.I did change the cable from cat5e to cat 6 and tried to increase hold queue to 4096 and to tweak wrr queue bandwidth
I am seeing Interface output drops that appera to be incorrect. When I do "Show Interface gi1/0/20", I will get interface output drops of "4294961382". But, when I do the same command again it shows "0" drops. Is this a reporting error? I am ruinning c3750-ipservicesk9-mz.122-58.SE.bin on a 3750 stack with 2 switches in the stack. [code]
When it comes to networking and require some advice on setting up my wrt61on router with my airport express. I have managed to get it all connected up and working but am suffering frequent dropouts while streaming music. I have done a little reading and have tried changing a few settings on the router but have found no improvement. My set up is as follows.
-Modem connected to WRT610N Router -Desktop Computer connected to network via wusb600N dongle -Airport Express connected via wif -Using Iphone 4 as remote
Is there a way where i can set up the airport express on a total different frequency to everything else in the house i.e laptops iphones etc to prevent these cutouts.
We're having kind of a problem with our Catalyst 4507r switches. If we do a "show interface" command we're getting a lot of "Total output drops" on some of our interfaces. It seems to be most of the time on the same vlan.I was wondering if it has got something to do with QOS or queue selection As we don't have any QOS markings configured, is it possible that all traffic is using only one of the four tx queue's?
Product: Linksys Wireless-G Broadband Router WRT54G Version: 6 Firmware: Has Been Updated
I am directly connected to my router. Lately, I have been receiving high latency spikes and total loss of internet. The problem must be related to my router, because when I connect to the internet through my modem I don't have this problem.
I currently have a couple of 6509 chassis (router/switches) with the following hardware blades:
x3 48 ports x1 NAM x2 Sup720 Running 12.2(18)SXF3
I am keeping the four Sup720 modules and have purchased new versions of the others blades including two new 6509-E chassis?Can I take my stand-by Sup720 out of the production machine and insert it into the new chassis?
I currently have a couple of 6509 chassis (router/switches) with the following hardware blades:
x3 48 ports x1 NAM x2 Sup720
Running 12.2(18)SXF3.I am keeping the four Sup720 modules and have purchased new versions of the others blades including two new 6509-E chassis. Can I take my stand-by Sup720 out of the production machine and insert it into the new chassis?
We got a bunch of port-sec violations on port fa1/0/42. after checking logs, we noticed that the MAC address responsible for generating the alert was not one, but many.We asked the user, he said he only restarted his computer.The MAC addresses happen to be existing MAC on the network.How is it possible that a port-sec violation is made by many MAC addresses on the same port, successively?
Syslog message generated from device SW_Etage1: May 25 15:17:08 10.100.254.11 1454802: May 25 15:19:11.693 CET: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 6416.8dbb.930e on port FastEthernet1/0/42. Syslog message generated from device SW_Etage1: May 25 15:17:29 10.100.254.11 1454805: May 25 15:19:32.874 CET: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 78e3.b58f.1011 on port FastEthernet1/0/42.
When I try connecting via anyconnect the logs (and anyconnect messages) state the connection "cannot be established due to no addresses being available for SVC connection'". The group etc has a dhcp scope assigned, (and this was working for the past year). I'm not sure what config changes (if any) he made before leaving.
We've never had a problem setting up ASA to ASA or ASA to PIX vpn site to site tunnels using RFC-1918 addresses ( 10.x.x.x usually ). Now we have a customer ( a hospital ) that requires a public non-RFC1918 address to be presented to them. Since the addresses that we send are routable, they get routed through the internet instead of going through the tunnel. Here's the boiler plate from the customer:
"Important Note: The following information is to be used as a guideline in setting up a VPN connection between XXXX and your organization. Currently, XXXX supports only site-to-site VPN’s and all partners MUST present valid registered public IP addresses through the VPN tunnel.XXXX is unable to accept RFC-1918 addresses (i.e. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16). We do not support PPTP, L2TP, or client VPN connections through a dialer application."
I was able to get a tunnel running between two ASA-5505 units using a public class C address that is currently not routable. How do I get this to work with a routable address? The tunnel will be carrying patient data and is basically a single server to single server link. It needs AES-256 and SHA-5 encryption but that shouldn't be a problem. The hospital is using a PIX, we are using an ASA-5510 with Security Plus license. We also have a couple of ASA-5505 units with base license to test with.
We sold an ESW 540 switch to a 3COM customer that is replacing old equipment. This replacement will be on different faces so we have to interconnect some 3COM switches to the Cisco equipment. We are installing rigth now and this two situations:
Virtual machines can´t get IP addresses via DHCP (using a different MAC address) when connected to the Cisco switch. Physical machines receive IP addresses from DHCP without problem. This situation never happened with 3COM switches.When we interconect the Cisco Switch to the 3COM switches (not using uplink ports) the connection never goes up. Remembering that 3COM switches are old we fixed the speed to 100 Mbps Full Duplex but it didn't work.