Cisco Switching/Routing :: 2950 Getting Error Messages In Show Logs
Aug 15, 2011
I m getting below error messages in show logs -
Aug 12 15:30:57.127 IST: %ENVIRONMENT-3-RPS_FAILED: Faulty internal power supply detected
Aug 12 15:31:02.175 IST: %ENVIRONMENT-3-RPS_FAILED: Faulty internal power supply detected
Aug 12 15:31:08.219 IST: %ENVIRONMENT-3-RPS_FAILED: Faulty internal power supply detected
Aug 12 15:31:10.239 IST: %ENVIRONMENT-3-RPS_FAILED: Faulty internal power supply detected
there is no error messages related to PSU in "show env all " log .
here is show version -
------------------ show version ------------------
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA13, RELEASE SOFTWARE (fc2)
Technical Support: [URL]
Copyright (c) 1986-2009 by cisco Systems, Inc.
[Code] ....
We use C2950G switches with IOS 12.1(22)EA12 . Switches are set up to send logs to a server (informationnal level). On this server, we receive many of logs from those switches, but none about interfaces errors (even if interfaces statistics show interfaces errors). On C3548 switches it's work fine.How should I be sure the set up of switches is correct ? Why do I never receive messages as %LINK-4-ERROR:[char] is experiencing errors ?
Is there a way to get more messages out of a 2950 set to syslog? I've turned every logging option I can find to DEBUG, but all I get in my syslog are LinkUp/Down messages and "Configured from console by console". I'd love to see more information such as configuration changes, or even someone attempting to set up DTP on a switchport set to access mode.
I had these error messages on both my Cisco 2851 and on my Cisco Catalyst 6506.
On Cisco 2851: %SYS-SP-3-CPUHOG: Task is running for (2000)msecs, more than (2000)msecs (4/4),process = SEA write CF process. [code]...
And on 6506: Dec 27 15:20:55 MET: %SYS-SP-3-CPUHOG: Task is running for (2000)msecs, more than (2000)msecs (129/129),process = SEA write CF process.[ code]...
I have these IOS versions on my Cisco: Cisco 2851: 15.0(1)M4 Cisco 6506: 12.2(33)SXI
We are getting some error logs on Nexus VDC,as follows:2012 Nov 23 08:49:11 N7K_B-Network_Center_B %$ VDC-3 %$ last message repeated 6 times 2012 Nov 23 08:50:21 N7K_B-Network_Center_B %$ VDC-3 %$ last message repeated 7 times 2012 Nov 23 08:49:11 N7K_B-Network_Center_B %$ VDC-3 %$ last message repeated 6 times2012 Nov 23 08:50:21 N7K_B-Network_Center_B %$ VDC-3 %$ last message repeated 7 times.
We are getting some error logs on Nexus switch 7K.
Loggs: ---------- 2012 Oct 30 22:36:07 SWITCH %CMPPROXY-STANDBY-2-LOG_CMP_UP: Connectivity Management processor(on module 6) is now UP 2012 Oct 30 22:36:40 SWITCH %SYSMGR-2-GSYNC_SNAPSHOT_SRVFAILED: Service "ipqosmgr" on active supervisor failed to sto re its snapshot (error-id 0x40480005). 2012 Oct 30 22:36:40 SWITCH %SYSMGR-2-STANDBY_BOOT_FAILED: Standby supervisor failed to boot up. 2012 Oct 30 22:36:42 SWITCH %PLATFORM-2-MOD_REMOVE: Module 6 removed (Serial number JAF1550ATBR) 2012 Oct 30 22:42:08 SWITCH %BOOTVAR-5-NEIGHBOR_UPDATE_AUTOCOPY: auto-copy supported by neighbor supervisor, starting
I'm having an issue with port-security on a cisco 2950 switch. The port-security is setup to user sticky mac-addresses and was working just fine. Recently when a computer was changed out and I needed to clear the security on the port it wouldn't let me.I would type clear port-security sticky int fa0/## and it would give me an error. The error would be that the sticky command doesn't exist.So I went back and type clear port-security ? and the only option was dynamic. Even if I try to take the port security off the switch it wont let me, it never shows the option for sticky.If I change the maximum number of mac-addresses allow the computer will work, but I can never clear the old addresses out.
I'm getting below msgs in my ZBFW logs on my test router. .Apr 2 23:09:43: %FW-6-DROP_PKT: Dropping icmp session 115.186.192.153:0 10.40.2.100:0 on zone-pair ZP-OUTSIDE-INSIDE class class-default due to DROP action found in policy-map with ip ident 0
The bit I'm curious about is that I am NOT NAT-ting any ICMP. Hence why is the ZBFW even triggering against the LAN IP? It should only activate after NAT according to order of operations (and hence why unlike CBAC you put the inside local IP not the outside global IP).....
If the ICMP was directed at the WAN interface (not the 10.40.2.100 internal IP) then it is allowed, but morever even if blocked it should be logged against my WAN IP (which is publicly routable not a 10.x internal).
I have configured a vlan interface on a 3750 switch. there is aprox 4Mb active traffic flowing through the interface, but when I do a "show interface vlan (vlanid)" the output show zero bits in and zero bits out. Its a typical L3 config with one IP on the vllan interface acting as the gateway for the VLAN devices. Is this a normal behaviur ? and if so is there any way to get the traffic in/out stats. The end PC/devices are connected to this switch via an L2 TRUNK and I dont have access to the L2 switch on which the actual devices connect. so cant get the real time stats of those interfaces.
Facing issue with 2960G switch , where its do not display "logging trap informational " in show running and show startup .where its showing all other levels from 0 to 5 and 7 after configuration and save commands. [code] after config getting saved , it do not shows in show runn or in show startup while for all other levels it do show the config lines .I tried the same on 12.55.SE release also but its same results . Is this a limitaion of this platform, is there any doc explaining the same for reference. [code]
I am constantly getting a few errors in my ASA 5510 and 5505 from the same IP. The IP of my NMS server, which has also stopped recieving SNMP data from these two VPNs.
Syslog Id: 713048 Error process payload: Payload ID: 1 Syslog ID: 713902 Removing peer from peer table failed. No Match. Syslog ID: 713903 Error: Unable to remove PeertblEntry
I have tried to configure ACL to let traffic through. SNMP traffic to be more precise, but since I am fairly new to cisco firewalls and SNMP in general this has proven very difficult.
Our building used to have a very old server that basically just served as a place for teachers to store files and not much else. We have just changed ISPs and decided that we no longer needed the server at all. I disconnected the server from the network and replaced the old ISP's modem with the new ISP's modem. At first, everything seemed OK. My computer and several other teachers' connected to the Internet with no problem. However, some of the computers in the building could not connect. We get error messages with "limited or no connectivity." Part of me thought that perhaps the connections themselves are bad. However, when I take my laptop to classrooms with trouble connecting - mine connects easily using their cables. If I move their computers to my room, their laptops still won't connect. I have put my computer side-by-side with another one to make sure the settings were the same (auto-detect IP, DNS, etc.) and can't find differences. This problems is affecting our Windows 7, Vista, and XP computers the same.
Yesterday after booting my comp up I wanted to get on the internet but for the first time in years with my set up it just wouldn't connect, never done this before, we have a wireless O2 box upstairs which my son has a ethernet directly from the wireless router into his comp and my other son has a notebook (same as mine) and both of them were online but mine just wouldn't connect although I had nothing to say anything was wrong, o2 told me that if the other computers were online then it must be something on my comp that is causing the trouble ? but what could it be ? after three hours offline I rebooted and it was fine and got onto the internet no trouble, this morning it again wouldn't let me online and then bingo it just came on again at 4pm very strange to me
I have a new redundant network with two cores C1 and C2 and five access switches A1 to A5. They are all Cisco SG300 switches. I have noticed there are too many STP messages emanating from one host which has a MAC address which cannot be traced on the network. In the redundant network, I made C1 the root bridge by giving it a priority of 4096 and C2 has been given a priority of 8192 so that it is the secondary root bridge in the network. I have left all other STP settings to default on the rest of the switches in the network.
The problem is that one host is advertising a RST root bridge all the time. Now it has a mac address which is different from the mac address of the root bridge itself and i cannot trace this mac address on the network. Look at the snapshot of Wireshark output in the attach.The source MAC address which is the host advertising all the time is 1c:df:0f:34:db and the root bridge is 1c:df:0f:bb:34:c4.
Why would the root bridge be resetted all the time?I've also noticed that one port in a LAG configuration on one of the access switches is flapping up and down all the time.I tried to troubleshoot this problem. It is not the cable. It would be something else. What could cause this flapping of the port?Could it be related to STP?
On the other Core switch C2 I can see a LAG status switching between forwarding and blocking all the time. What could make the LAG status to flap from forwarding to blocking and back all the time like this?
We started getting the below syslog messages from one of our ASA5520 which was recently upgraded to 8.4(2). Any bugs on 8.4(2) that cause this or its simply the RAM failure?
%ASA-3-105010: (Primary) Failover message block alloc failed %ASA-3-321007: System is low on free memory blocks of size 1550 (0 CNT out of 18709 MAX)
About three(3) months ago, I attempted to set up a wired network between a laptop running w-7 and a desktop with w-xp, sp3. Shortly afterwards, I started getting blue screens with error messages and codes about device confilcts. After disconecting the laptop, I still have the problem sometimes. I looked into the system, and found twenty-seven(27) items with yellow exclamation marks on them. Should I delete them or just disable them?
Is there a way to turn off 802.1x authentication messages to the console of a 3750 switch? The issue we have is that we like to monitor the terminal when remotely configuring our switches. However, every time a computer authenticates to the network we get messages and sometimes quite a few depending on the situation.
i have currently a 2504 WLC and some 1602i AP's.Basically so far i have configured the WLC as per the guidelines on the startup and now i want to join the AP's (which i haven't managed to do yet) and the setup the wireless network.I can get the AP to join and pickup an ip address and that is it. It comes up with different error messages from the WLC, and through hyper terminal, none of which i understand but the main jist is the following:
*spamApTask4: Feb 19 15:05:56.171: #CAPWAP-3-DECODE_ERR: capwap_ac_sm.c:3844 Error decoding Join request from AP 6c:20:56:0e:23:e0 AND 0Tue Feb 19 15:06:19 2013AP with MAC 6c:20:56:0e:23:e0 (AIR-CAP1602I-E-K9 ) is unknown. AND
We are using almost 10 Nexus 5k in our DC currently we are getting same error logs in all Nexus 5k." ntpd[4746]: ntp:time reset +0.279670 s " ,Is it major error or just for reset time?
While working at a client site today, I was troubleshooting some ICMP connectivity for a network we have created.I turned on 'debug ip icmp" on the 3550 switch int he middle, and was inundated with the following debug output:
Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5 Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5 Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5 Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5
[code]....
This output fires several times a second, and based on how often it is firing, I am curious if it may be a culprit with respect to the fact that the client has indicated that they have some slow internet.Should the next step be to look at the workstation at 172.16.1.5?
Is there any way to change the port that is used for syslog messages on a Cisco 9500 switch?By default this is set to UDP port 514.There doesn't seem to be a command to change the port.
Setting up NTP. Currently the source for NTP within our network is our core 6500.Currently the NTP source for the 6500 are internet based NTP Servers. I would like to configure the 6500 to respond to NTP messages as the NTP Master. However will the 6500's source remain as the internet based NTP Servers?? In other words if the 6500is configured to be NTP Master, where would it get it's time from?
I have a situation in which I want to log a specific message (informational - 6 level), but don't want to enable informational logging and get all the messages that come with it. Is there a feature in IOS, 3560 12.2(25r)SEE4, similar to the 'logging lists' feature on the ASA that allows you to specify logs that you want to capture without having to change your logging level? I didn't want to have to write an EEM applet for this, but if that's the only way, I'd consider it.
I am getting the below messages on my Cisco 6500 series switches every 1min. The IOS version is 12.2(33)SXI6 & with SUP32-GE-3B
%ILPOWER-7-DETECT: Interface Fa1/1: Power Device detected: Cisco PD %ILPOWER-7-DETECT: Interface Fa1/1: Power Device detected: Cisco PD %ILPOWER-7-DETECT: Interface Fa1/1: Power Device detected: Cisco PD
These messages are I am recieving on few ports only not on all port having IP Phone connected. I tried changing the phone to some other model but that also did not resolved my problem. Also I tried powering on the phone using power adapter but the issue still persist.
Client are not facing any issues due to this error, but still I would like know what can be the issue which is generating these logs.
I have a remote 3G Cisco router (Cisco 819) that occastionally drops it's EzyVPN and the local guys just reboot the device so when I log on and check the logs it is empty. My syslog server shows very little, can I keep the logs locally or up the logging to the syslog server?
I am having some issues on my network and i think i have narrowed them down to a single switch.
On this switch the following logs can be seen 2147482407 05-May-2012 15:40:54 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.135 destination 10.0.5.172 ACCEPTED 2147482431 05-May-2012 09:03:31 Warning %STP-W-PORTSTATUS: g13: STP status Forwarding 2147482432 05-May-2012 09:03:01 Informational %LINK-I-Up: g13 [code]......
All other switches are OK and do not show anything in their logs. I am trying to figure out what could be going wrong. Spanning tree is enabled on all switches. The switch tihs is happening on, ends in the ip 172 and is where all building cables connect to. They also connect to 174. I have attached an image of the infrastructure so you can visually see what i mean.
I have a WLC 5508 and several 1142 access points. The APs are not showing up in the WLC. When i console into the APs, im getting the following errors,
*Dec 26 23:04:28.035: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 65.125.15.212:5246 *Dec 26 23:04:28.074: %CAPWAP-5-CHANGED: CAPWAP changed state to
[Code]....
Ive tried resetting the WLC, reloading the APs. I even factory defaulted one of the APs and still getting the same message.Ive verified that the WLC is set to accept MICs and SSCs.
