On my 2691 Router i see the buffer leak due to syslog
2691Router# sh buffers leak
Header DataArea Pool Size Link Enc Flags Input Output User
650743C4 F200084 Small 0 0 0 0 None None Init
[Code].....
My 2691 Router has already 2 serial cards WIC-1DSU-T1 installed, When i install the 3rd serial card and reboot the router, it detects the 3rd card installed but 3rd card has no light.
When i do sh ver it shows 3 cards installed.
When i install this 3rd serial card to other Router then light shows on card and it works fine
So i am thinking if 2691 Router only supports 2 serial cards?
I have a scenario which is fairly common - certain servers are accessed from the internet via a Load Balancer, and since seeing true client IP is a requirement, the return traffic path must go back through the load balancer. However, I do not want to route all traffic via the load balancer for obvious performance reasons. Internal traffic should be routed directly by the Layer 3 switch, which has a default route of a Firewall.
My plan is to use a VRF for the load balancer and any applicable servers, which works fine. But now I need to join the VRF's routing table with the switch's GRT (global routing table) so that internal traffic works. What is the best way to do this? For scalability reasons I'd like to avoid static routes and I see many examples using BGP, but in this case it seems overkill since everything is on a single logical switch. Can I use OSPF instead? Or a different method? The Supervisors will be 2Ts, so IOS 15.0 will likely be running.
after upgrading about 35 Catalyst 2960 and Catalyst 2960S to IOS 15.0(2)SE2, we experience a memory leak on several switches. After some days / weeks the switches are not accessible via Console/Telnet/SSH/Web any more. Only SNMP seems to work properly.Attached users do not experience any decrease in service.
Trying to connect to the console, we get following error message:
"% Low on memory; try again later"
The only (temporary) solution is to reboot the switch. The behavior is similar to Bug CSCts52797.With regards to the Bug notes this bug should only affect Catalyst 2960 with 64MB of RAM and should already be solved with IOS 15.0(2)SE2.
We experience the erroneous behavior with
-WS-C2960-48TC-S running IOS 15.0(2)SE2
-WS-C2960S-48LPS-L running IOS 15.0(2)SE2
I was wondering if i can enable url filtering on my 2691 or 2651XM routers so that if someone visits any website i can see that under router logs. right now i am using kiwi syslog that logs the router activities.
View 3 Replies View RelatedWe're starting to share video across our network and would like to setup multicast to conserve at least some of the bandwidth. We have a broad mix of equipment (A Catalyst 6509-E at the core, a combination for Cisco 2691 & 2811 routers, and a whole lot of Catalyst 3500, 3550, 3560 switches at a hundred locations. Where would I begin? Would I need to define routing for the multicast IP addresses (224.0.0.0)? Would I need to setup interfaces & IP networks where each multicast device is located like I would for a new IP subnet?
View 1 Replies View RelatedI have 2691 router with following config
line console 0
login local
password xty
When i remove the login local from the line console i connect to console port and press enter it shows router prompt 2691Router> but i am unable to go to enable mode.If i telnet to router then i put username and pw then it goes straight to enable mode.
vty config is
line vty 0 4
exec-timeout 600 0
logging synchronous
login local
length 500
transport input telnet ssh
escape-character 3
Any reasons why i can not go to enable mode by console?
Here is my Lab Setup: 2691 is BGP nei to R4 router and they are not directly connected. 2691 and R4 are in same AS 6500. 2691 Config---router ospf 1 network 3.3.3.3 0.0.0.0 area 0 . Its advertising its loop back IP to OSPF domain.
router bgp 6500
no synchronization
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 6500
neighbor 6.6.6.6 update-source Loopback3
[code]...
R4 Router
router ospf 11
log-adjacency-changes
network 6.6.6.6 0.0.0.0 area 0
[ code].....
We can see that 2691 and R4 are BGP neis and 2691 has 200.1.x.x routes in its route table. My question is why from 2691 router i am unable to ping any route learned by BGP from R4?
2691Router# ping 50.1.1.0 Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 50.1.1.0, timeout is 2 seconds:.....Success rate is 0 percent (0/5)2691Router#ping 200.1.2.0 [ code]...
We're having some issues with a 3560 CPE. It's uplink is a GE fiber link, customer port is FE RJ45. We see a lot of TX-frames being dropped at the FE port,but none at the GE port. Even when the customer is only at ~50Mbit/s downstream traffic. When customer sending ~50Mbit/s upstream, there are no TX- drops at the GE link. Is this a normal behaviour? From what I know the physical medium shouldn't have any inpact on this since drops occurs in the port- asic, and not in physical transmission.Do the buffer-sizes between GE and FE differ? What could we do to optimize the flow and reduce drops? QoS is set to off and no modifications on the queues have been made on the interfaces.
View 8 Replies View RelatedI need to configure these qos settings in a C2960S. [code]How I calculate the buffer allocation needed? [code]
View 4 Replies View RelatedI have been experiencing discards and no buffers errors on my 2950 switches. These switches are connected to two core switches 4948 and 3560G. I have noticed previous posts regrading these problems but have been unable to find any cases that were resolved. We are using 12.1(22)EA11 software on our 2950 switches.
Outputs:
flrnet3#SH controllers ethernet-controller gigabitEthernet 0/2
Transmit Receive 22204993 Bytes 904542488 Bytes
[Code]....
I'm trying to view the logs from a Cisco 857W router to a workstation running the Kiwi Syslog server. what I've done is the following:
Config term
Logging on
Logging source-interface BVI1
Logging Facility Local7 (or any other facility you want to allocate for this router.)
Logging [IP Address or Hostname of machine running Kiwi Syslog Server]
End
I see noting on the syslog server. Although I can see the log information on the router Also is there a command to stop the logging from generating or is this on by default.
I have a customer that is seeing output drops on a 2960S with mls qos not enabled. It appears that they are getting bursts traffic on the switch that is filling up the buffers, hence causing the drops. I have a couple of questions:
1. What are the default queue/buffer settings when mls qos is NOT enabled on the switch.
2. Is there any good documentation out there regarding the buffer sizes of the different switch models
The customer is looking for an answer as to whether or not replacing the 2960S with a higher model would eliminate the output drops WITHOUT having to mess with QOS/buffer/drop threshold settings on the switch, and Cisco doesn't seem to make the buffer sizes readily available for the the smaller Catalyst switches.
I am using Solawinds syslog and trying to get our Cisco routers send syslogs to our syslog server. I followed the procedure on Configuring Cisco Devices to Use a Syslog Server from [URL] Our Cisco swtches are all sending syslog messages but not the routers. I compared the config with our access switches but can't seem to find the problem:
Sample router config:
service nagleno service padservice tcp-keepalives-inservice tcp-keepalives-outservice timestamps debug datetime msec localtime show-timezoneservice timestamps log datetime msec localtime show-timezoneservice password-encryption!hostname WWF-RT1boot-start-markerboot-end-marker!security authentication failure rate 10 logsecurity passwords min-length 8logging buffered 4096logging rate-limit all 10logging console critical!aaa new-model!!
[Code] .......
is there a command that prevents the router from sending the syslog to the server?
Is there a way to get more messages out of a 2950 set to syslog? I've turned every logging option I can find to DEBUG, but all I get in my syslog are LinkUp/Down messages and "Configured from console by console". I'd love to see more information such as configuration changes, or even someone attempting to set up DTP on a switchport set to access mode.
View 2 Replies View Relatedhow to enable snmp traps for syslog message in Cisco Nexus platform ?
Mean what would be equivalent CLI for the below
"snmp-server enable traps syslog"
I have a couple of Cisco 2960's sending syslog messages to a remote syslog-ng on port 514 (standard).
I need to set another Swtich so it sends traffic to the same syslog server but on another UDP port (such as 714),, is that possible,? I cannot find the option on the documentation.
I have enabled syslog on my Cisco 2960S swtich as shown below -
-logging facility local6
-logging host 10.11.12.122 transport tcp port 514
I have sent the port to TCP since that is what is configured on the SYSLOG server which is a CENTOS 5.8, running rsyslogd.I have tested the rsyslogd locally and it work.However i want to send any and all log messages in the buffer to my syslog server and it is not working.there is no firewall on the CENTOS and the ASA firewall filter is enabled for outgoing traffic.
I can't seem to send config changes to our syslog server on a 2950, I'm fine with 2960's and 3750's. The Cisco 2955 is using the latest IOS c2955-i6k2l2q4-mz.121-22.EA14.bin.
Here is what I have added:
logging buffered 64000 debugging
logging console informational
logging monitor informational
[Code].....
The only sylog message I get is "Configured from console by username on vty0 (10.1.1.35)
Is there any way to change the port that is used for syslog messages on a Cisco 9500 switch?By default this is set to UDP port 514.There doesn't seem to be a command to change the port.
View 1 Replies View Relatedlogging buffered 4096 warnings The above causes router to log all the events with severity level 4 or below in buffer.What about logging console warnings command?will the above command cause router to send log messages with severity level 4( warnings severity level) to console only or will the router send all the log messages with severity level 4 or below to console ?
View 3 Replies View RelatedI recently upgraded a few 2960 switches to 15.0(1)SE, and while they are working fine, I did notice a strange syslog message upon boot-up that wasn't previously there. [code] I did some cursory searching via google but nothing useful presented itself.
View 7 Replies View RelatedQuery is, Can i send my syslog messages to SNMP sever? if so, what command needs to be enabled on nexus 7k?
View 3 Replies View Relatedwe've been using IOS for a long time, but are relatively new to NX-OS. We've got a central syslog server that all our devices log to. No matter what we do, we can't get our Nexus switches to log there. Here's my current attempt:
Nexus 7009, NX-OS 6.0(1)
# sh logging server
Logging server: enabled
{redacted}
server severity: debugging
server facility: local7
server VRF: default
[code].....
The default VRF is working. I see log entries in the logfile, but nothing arrives at the syslog server. It's not a config issue on the server, because tcpdump shows that no packets arrive from the IP for loopback 0.
I'm looking to configure a syslog server for all of my cisco device logging. I've had a look at CNA and can't find any options to define a syslog server for my switches.
What's the best way to define a syslog server and the severity of the notifications? Also, i'm looking to clear all previous Syste mmessages fon my devices?
I have installed a switch (3560) that was from another site and changed all it's config and hostname etc and it is now live, however the syslog messages still see the old hostname, what could be causing this?
View 3 Replies View RelatedI have a pair of 3750E-24PD-S stacked together, it seems after stacked together the stacked switch always flood the console screen with these messages which are not true: [code] Switch-2 is the stack member, Switch-1 is the stack master. The RPS fan failed refers to RPS2300 or the internal power supply of 3750E? Even when I turned on the RPS2300 the stacked switch still display the messages. Also I have two RPS2300 serving stack master and stack member respectively both RPS2300 were switched off why the messages only refer to Switch-2 and not Switch-1? [code]
View 1 Replies View RelatedI have configured my 2951 router to send logs to my Kiwi syslog server like below.
#logging 10.20.20.52
But I am not receiving any logs from my router, the same has configured on my asa5520 and its sending logs.
I want to leak default internet route to CE VRF as common service.Since we having two ASBR, can I point next hop to PE itself instead of either of the ASBR?I tried to point NH to loopback of the PE itself but it failed.
View 6 Replies View RelatedAdd the ability to send syslog events to multiple syslog servers in the SA500 Series routers. I know the functionality is currently in the RV220W because we utilized it. It would be great if you could configure the syslog servers by event type as well. For example, being able to send the kernel events to syslog server A, and all other events to syslog server B.
View 0 Replies View RelatedRecently i have upgraded the IOS of ASA5550 (in HA mode) to 8.4.2 from 8.0.5, after OS upgrade we found that the syslog from thses firewalls are not getting captured/transfered to centralised syslog server. The server is reachable from the firewalls.
View 3 Replies View RelatedI would like to define a general policy for our company to set the log buffer ("logging buffered xxx"). Currently, most of our configs use the default value of 4096, which does not store much of the history. I'd like to see more, when logged onto a router. We are using different router platforms (from old 1700 up to 39xx oder 72xx) Can you give me any hints, how large the buffer can be set on a platform? Which checks should I do to determine, how large I can set the buffer?
Here's an example of a Cisco 1720 router:
Cisco1720#sh mem
Head Total(b) Used(b) Free(b) Lowest(b) Largest(b)
Processor 81AECE9C 17803244 5548816 12254428 12010916 11815908
I/O 2B43000 4968448 1560416 3408032 3374144 3396668
Cisco says: "Total = the total amount of memory available after the system image loads and builds its data structures."So, in this example, the total bytes are 17803244, which is ~ 16.9 Mbyte. So, if I allocate 64000 bytes, my total buffer will decrease to ~16,3 Mbyte.
I my calculation above is correct, I see no problem in defining a standard value of "logging buffered 64000" for every router platform - even under high load conditions. Since 64 kbytes is a very small value compared to the total usable memory of a Cisco 1720, newer platforms should not have any problems either.
i have a cisco 2691 and i would like to install NME-16ES-1G-P to set up a Voice Lab environment.Is it possible to have 802.3af PoE support for 2691 using the NME-16ES-1G-P updating the AC power supply? Or does any other solution exist to have 802.3af support on 2691?
View 5 Replies View Related