I have a route-map on a 6500 thats is very definitely no longer required. 2 attempts to remove it have been a disaster.
[Code]...
The route-map and access-list ae not being used at all. Anyny tips for how I can get this removed - for info the process is mush easier on 7206 VXRs.
direct me to a document detailing the order that line cards are supposed to boot in a 6500? I'm noticing random boot sequences in some of my chassis,?Note: We currently run Sup720 3CXL for the most part.
View 6 Replies View RelatedI have a Cisco ASA 5505 with eth0/0 as outside and eth0/1-eth0/7 as inside.On the outside interface I have to IPS's. One cable and one dsl.My main connection goes out over my cable ISP.I have 2 static routes on the outside interface.One with metric 128 for my cable ISP.One with metric 254 for my dsl IPS.I'm tracking my cable ISP with a ping to their default gateway (only available on my cable ISP)Failover from cable to dsl works perfect when my cable IPS goes down and fails back when it's back online.My problem however is when a VPN user connects from the outside using the Any connect client.Every time, about 5-10 minutes later, my tracked route get's removed (message: 622001) and added back 15-30 seconds later.This of course drops the VPN user. It doesn't happen again if the VPN user logs back in after that. [Code]
View 1 Replies View RelatedI'm performing tests with following desired scenario: We have several remote offices, connected to our HQ via MPLS. In these remote offices, we have several vlan's. Each vlan has it's own ip-range. The MPLS cloud is routed, so we cannot switch our HQ vlan's to the remote offices. In this case, the client pc is in a guest vlan which allows him internet access. The uplink for this internet access is hosted in our HQ datacenter.
basic scheme:
client pc --> MPLS cloud (managed by ISP) --> 6500 switch LAN --> Checkpoint Firewall --> 6500 switch DMZ --> ASA Firewall
My test scheme:
Client pc is in a subnet A (guest vlan range office).
We receive this traffic on our first LAN 6500.
[Code].....
I have an issue with my setup of a 6500 switch (12.2(33)SXI9).We have a 6500 switch with several VRF's. For a certain VRF I would like to redistribute a static route in EIGRP. After doing so I don't see the static route on my eigrp neighbor.
This is a overview of my config. I'm basically redistributing only my static route for this vrf in eigrp.
I found a similar case in which the solution was adding a metric to the static route. (eg. redistribute static route-map static-eigrp-pp metric 10000 100 255 1 1500). But the strange thing is that we don't have this issue on a similar machine (same IOS, same config setup). [code]
I'm facing a problem where certain port on my swtich keep grant and remove poe.
Nov 12 07:02:43.639: %ILPOWER-5-POWER_GRANTED: Interface Gi1/0/18: Power granted
Nov 12 07:02:44.399: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi1/0/18: PD removed
[Code].....
I had a problem during setup of a new module N7K-M148GS-11 into a Nexus 7000 10-Slot chassis.The module was powered-dn and removed by platform with the following message: [code]
Do I need to upgrade nx-os? There is a workaround?
I have a problem with dscp preservation on a WS-C3750X-48 catalyst; in my little diagram, his name will be SW2, so I have this:SW1 <-> SW2 <-> RT1. some phone connected to SW1 mark with dscp EF (46) the voice traffic.The "mls qos" was enabled on SW1 and SWt. The interlink switch ports has the "mls qos trust dscp" option, the phone port and the router port also.And the problem is I can see the dscp marking on the SW2 when I span the voice vlan on this switch but the dscp was removed ( DSCP set to 0) on the router port ( span on the router port for look )If I made also a packet capture on the router RT1, I see the DSCP was effectively reset to zero.If I disable the "mls qos" on SW2, of course all is fine and the dscp was preserved and forwarded to the router. [code]
View 2 Replies View RelatedI have reconfigured the FEX numbers attached to a Nexus 5548 running on NXOS5.2 If I do show running-config the interfaces are not there anymore. But if I do show startup-config the old Fex interfaces still shows up. I did try write erase then saved the running-config and its still there.
View 1 Replies View RelatedI am going to be putting an SG200-08 (8 port switch) inside a 2U rack mount chassis. To enhance cooling I thought I would remove the outer case. Are there, or would there be any issues with using the switch with the cover removed?
View 2 Replies View Relatedwe have applied route-map on vlan interface in the form:
ip access-list extended TEST
permit ip 172.16.1.128 0.0.0.127 172.16.0.0 0.0.255.255
route-map TEST permit 10
match ip address TEST
set ip next-hop 172.16.111.1
interface Vlan11
ip policy route-map TEST
The problem is in the traffic matching by the rule - there is matches not only for 172.16.0.0/16 prefixes but for the whole traffic in that VLAN.
I am very new to high end Cisco devices.(like 7600/6500 or ASR9K).
Why do we log in on RP. What actions we can perform after logging-on RP (route processor) or Why they are required ? Cant we make those by normal router mode (router#) .
Since the ACE supports only static routing, when pointing a default route from the ACE what is your preferred method when using multiple 6500s with an ACE in each in a failover scenario to prevent just pointing at one 6500? Static route to an HSRP address? Multiple static routes on the ACE, etc?
View 2 Replies View Relatedi'm working on a QoS troubleshooting issue, I want to know the order how the QoS ACLs will be getting processed.For example I have configured the ACLs AF11, AF12 and AF13, in what order switch will process the ACL? does it in a ascending order fashion?
View 1 Replies View RelatedI have 4 switches in a 3750-X stack.Here is the output from the stack why are the switches out of order and I'm not able to bring up switch 1 port 1.
switch 4 port 2 shows not connect it is I've checked the cables.
Power stack name: Powerstack-4
Stack mode: Power sharing
Switch 1:
Power budget: 695
Low port priority value: 22
High port priority value: 13
Switch priority value: 4
Port 1 status: Shut
Port 2 status: Connected
Neighbor on port 1: 0000.0000.0000
Neighbor on port 2: c471.fe84.e100
Switch 2:
Power budget: 713
Low port priority value: 21
High port priority value: 12
Switch priority value: 3
Port 1 status: Connected
Port 2 status: Connected
Neighbor on port 1: c471.fe85.3000
Neighbor on port 2: c471.fe80.2800
Switch 4:
Power budget: 697
Low port priority value: 19
High port priority value: 10
Switch priority value: 1
Port 1 status: Connected
Port 2 status: Not connected
Neighbor on port 1: c471.fe80.2800
Neighbor on port 2: 0000.0000.0000
Switch 3:
Power budget: 710
Low port priority value: 20
High port priority value: 11
Switch priority value: 2
Port 1 status: Connected
Port 2 status: Connected
Neighbor on port 1: c471.fe84.e100
Neighbor on port 2: c471.fe7f.eb00s
#sh run | inc user
!
username USER0 secret 5 $1$passwordusername USER1 privilege 15 secret 5 $1$passwordusername USER2 privilege 15 secret 5 $1$password
!
#sh run | inc aaa
!
aaa new-modelaaa authentication login local_authen localaaa authentication login radius_authen group radius localaaa authorization consoleaaa authorization exec local_author localaaa authorization exec radius_author group radius localaaa session-id common
!
#sh run | begin line vty
!
line vty 0 4access-class 3 inexec-timeout 15 0authorization exec radius_authorlogging synchronouslogin authentication radius_authentransport input sshline vty 5 15!sh verCisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(55)SE6, RELEASE SOFTWARE (fc1)
the intent of the above is that management connections will only be accepted via SSH, and all of those will be authenticated via RADIUS, unless it's down, then it will use the local username/pw combinations, most of which are given Privledge level 15. Telnet should never work.SSH works as expected (authenticates via RADIUS), but the problem is that Telnet also works, will ONLY use the local database (never RADIUS), and, for some reason, leaves the users at Privledge level 1, instead of the configured 15.Essentially, it seems that at every point I have told it to do something that isn't the default with regards to telnet, it ignores me.Prior to a recent IOS upgrade, the switch didn't support SSH, so the previous config was Telnet with RADIUS, and that worked fine.
My current setup.
Layout:
Line01 Line02
| |
Cisco 2951 Cisco 2951
---------------------
|
Cisco 3750G - Server #1 & #2 for domain controller, sharepoint, etc
|
---------------------
| |
Cisco 2960 Cisco 2960
| | | | | | | ... | | | | |
workstation #1, #2, .... #70
And I would like to ask some opinion on the best configuration for the above layout:
1. Configuration #1 - Using load sharing and automatic failover So I want to ask whether there's any link/url that provides details/guides on how to setup the load sharing and failover?
2. Configuration #2 - Workstations 1 - 35 will be routed through Line01 gateway and workstations 36 - 70 will be routed through Line02 As for this configuration, it's done now. However, I want to know whether there's any software (preferred web based application which allows me to change the gateway from line #1 to line #2 for all 70 computers instead of having to go to each workstation to update the gateway).
Do I need to run any special license (like IP SERVICES) on the Cisco Catalyst 4900M in order to run VRF lite?
View 4 Replies View RelatedI have the requirement to provide a Cisco Router with 3 x ADSL lines (768k) to increase the internet speed.PPP multilink is not supported from the ISP.
Is it possbile to distribute the traffic between this three ADSL lines?How can I configure this?
I have the following hardware configuration:
1 x CISCO1921-SEC/K9
2 x EHWIC-VA-DSL-B
The third ADSL line is connected over an ADSL modem at one fixed Router Gigabit interface.
What is the purpose of these default configuration lines? What do they mean? I can't find an explanation of them anywhere. I believe some are written to the config when FCoE is enabled..
I would like to know exactly what they are doing.
class-map type qos class-fcoe
class-map type queuing class-fcoe
match qos-group 1
[Code].....
how can we upgrade 6500 non modular ios to normal 6500 ios?
View 5 Replies View Relatedwhy pppoe support has been dropped from 12.4 for the 1841's? (1801's 12.4 still supports pppoe)
View 6 Replies View Relatedwe have noted the automatically removing of the only "nat (inside,any)" line, during the upgrade of ASA 5540 from 8.4(3) to 8.4(4) 1: why ?
View 1 Replies View RelatedI saw a USB sign at the down right down corner of my Remote Desktop Connection and I thought it was my usb storage device and I safely removed it only to find out that it was my network connection hardware. now I can't connect to remote desktop again. what can I do? I am using windows XP
View 1 Replies View RelatedEMC replication between two NS-120 devices is much slower then the WAN link should preform at. In fact doing a simply CIFS transfer off between same EMC hardware over same network results in much better preformance on par with expectations. EMC engineers believe the issue is due to the TCP Sack option being removed somewhere in the network layer between the two units resulting in data flow issues.
Site 1: EMC NS-120 connected to 1GB interfaces on Cisco 3750 switches. Traffic crosses IPSec Site-To-Site Tunnel over WAN link (20MB Internet connection) between Cisco ASA 5510 - 5540.
Site 2: EMC NS-120 connected to 10GB interfaces on Dell PowerConnect 8024 Switches
From what I understand TCP Sack option should be passed by default on all current Cisco switches / ASA equipment. Is that a correct assumption. For the most part we have not modified the standard features on any of the switches or firewalls. Would it potentially be removed in the IPSec Tunnel?
I was updating my Graphics driver (Nvidia Geforce GT 440) today and it asked me to update the other NVIDA things as well that I have. Apparently one was an Nvidia Nforce ethernet driver or something... So pretty much I chose yes. "Installed the Nvidia Network Forceware" thing it said. All of a sudden, my icon down at the bottom right went to a yellow caution sign (Limited/no Connectivity)... Thats where I'm stuck. I tried some of the following:Uninstalled that Nvidia Network Forceware thingWent to Device manager and played a little with it from other forums. (This is how I got my "Caution sign" back...at first it wasn't even showing my local network connection.)System Restored about 7 times...Nothing is working and I really don't know what to do about this situation.[CODE]
View 1 Replies View RelatedI faced a strage issue as one of our router port cable was removed from the router port but the Port status is showing as up /up which made our HSRP state to active active causing an outage , The router we are usign is cisco 3845 and IOS is c3845-adventerprisek9-mz.124-8b.bin
View 4 Replies View RelatedMistakenly 'removed' a PC from the network. I followed the instructions on the EasyLink Advisor to add a new computer: open the .exe file that contains all the settings onto the new computer. That didn't work. But even if I removed the computer (by mistake) I don't see why when she goes to log in to the wifi account, she can't just type in the password.how to add a new computer to the wifi WRT160Nv3?
View 1 Replies View RelatedOn previous cameras (eg: the 932L) we could enable the FTP function to send a snapshot image every xx seconds, set a base file name, and set the Overwrite file function. On the 942L, this functionality appears to have been removed from the code. How I can get the 942L to FTP the current image every xx seconds and overwrite the file on the destination? (just like the previous cameras) Perhaps there is a new way and I can't find how to do it?
View 1 Replies View Relatedi have removed the icmp inspection from my default policy-map in my ASA 5520,now i could not able to ping to 4.2.2.2 from my LAN even though i have configured an ICMP Access-list in my asa like ,but I can't ping 4.2.2.2 for testing the Internet connectivity,what shall i do to allow only my self as admin to ping outside?
-icmp permit host 192.168.60.60 echo
-icmp permit host 192.168.60.60 echo-reply
As per my understanding 6509 all slots are dual channel, so 9 slot * 40 per slot (20 g in and 20 g out) = 360 GB How cisco claim the 720 ?? What about the 6513 chassic switch fabric connection?
View 5 Replies View RelatedI am seeing a strange situation on my 6500 switch?By having snmp walk on '1.3.6.1.4.1.9.9.109.1.1.1.1.3' (== cpmCPUTotal5sec), I came to know that there are two processor and the cpu util for switching processor is gone to 88 % and some time creeps to 99 %.
snmpwalk -v2c -c "removes" sw6500 '1.3.6.1.4.1.9.9.109.1.1.1.1.3'
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.3.1 = Gauge32: 12 (--- this is for CPU of Router Processor )
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.3.3 = Gauge32: 99 (--- this is for CPU of Switching Processor )
but when I do sh process cpu on the console, all looks normal as it shows cpu utilization of RP. why the value is so high on the switching processor ?
I've enabled antispoof on all interfaces on asa 5510.If you start a traceroute to a network on the default route, everything works, since replies comes to an interface with route 0.0.0.0/0 defined.If you start a tracer route to a network that is NOT on the default route (let's assume coporate MPLS), you only get response from first carrier router, the other are discarded because of anti spoof violation.
I have ICMP inspection and icmp-error inspection enabled.