I am runing 802.1x and MAB authentication of devices connected to a 3560 switch (in test). When I run 'terminal monitor' I am getting alot of authentication fail-msg. Is it possible to get the switch not to show them? I have to do some debugging on SNMP and DHCP to be able to figure out why I get these msg, but since the switch is blasting out so many auth-msg it is hard to see the debug messages. [code]
View 3 RepliesWhat would cause debug output to not show on a remote session via telnet connection where you've enabled terminal monitor?
The reason I ask is I was working with a client and we were debugging WCCP. I ran the debug ip wccp packets and events commands, then entered terminal monitor. After this, we saw nothing. We should have at least seen particular WCCP-related packets because we saw the necessary cluster view was established which can't be done without the exchange of these packets.
Can having syslog (logging) configured cause the issue? Did I use the command incorrectly?
I have 5 linux and 3 Microsoft 2008 Servers, each connected to 2 Cisco 3560 Switches. The 2 Cisco 3560 switches are connected to 2 different Cisco 515e Pix. Is it possible that if i enable Port SPAN in any of the switchport and send a copy of traffic to any of the windows 2008 server, will i be able to monitor the bandwidth of the servers (Here I am only looking for traffic going from servers to PIX and then to internet, also vice versa).
Also will wireshark be able to differentiate specify the bandwidth of each servers seperately ?
I have a 2611XM that I am using as a terminal server for my lab setup. Async is using octal cables. It works great with routers of all different models, but when I connect a switch of any model, it does not work. The connectivity LEDs don't even light (they do for the routers). The switches in question are 3750s and 3560s.
I have tried straight through from the octal cable to the console port of the switch, as well as a rollover with a converter, no luck. This does seem to be independent of configuration on the console port - even before the console port of the routers were properly configured, I at least had indication of physical connectivity.
I have a switch(6500) with 2 vlans(2 SUBNETS) and from the other side of my network i have 2 terminal servers.
I want to have a VIP in my 6500 switch which i have the 2 vlans and when the first vlan(network) try to connect to the VIP
my switch will forward to first terminal.When the second vlan try to connect to VIP the switch will forward to second terminal.
I'd like the switch to decide in wich terminal server will forwared the packet based on source network.
I am not sure how i can do this???I use VIP with SLB???I use NAT???PBR?
I plug both the monitors to another VCD it works fine and if I've tested the VGA cables on both monitors and that is good as well. I was assuming it might be a monitor format issue so I tried to access the Monitor format option from the KBD5000 but it does not give me an option to change the format, I just have three buttons when I click on the Monitor Icon
View 1 Replies View RelatedI have 100+ 3750's that are running various IOS, some stacked and some not, and all seem to have the same problem.If I attempt to paste a configuration into the terminal session I get booted after about 10 to 15 lines. This happens when using SSH and Telnet. Telnet will go a little further before I'm booted. After I'm booted it sometimes takes a minute before I can log back into the switch. Any issues pasting configs into a 3750 via a VTY session?
View 4 Replies View RelatedI have a set-up with multiple C2960 and C3750 switches. All these devices are being managed remotely. So basically I login to C2901, which is used as a Terminal Server, and reverse SSH to the console of each device. That's - I have assigned an IP to each port of the terminal server so that I can SSH directly to the desired device through via the mapped IP.
Now, recently I had to restart couple of switches - one C2960 and C3750. I initiated the reboot via console connection remotely. I could see the device logs for some time and then the logs stopped and there was no reaction from the console irrespective of any command I tried to enter.
I tried resetting the line on the terminal server, but that didn't work.
Now when I try to SSH the IP mapped to console of that particular device - i dont get any login prompt and there is no effect on device after giving any command. Although i can see the logs on the console session - but cant do anything.
I have a second way of connecting the device via inband- management, and checked the device config found it correct. It is same as other devices which are working correctly.
Both C3750 and C2960 are behaving exactly same - can see logs on console but see effect of even pressing enter - not getting login prompt as well.
is it possible, to use a Catalyst Switch (in my case a 3560E) as a source for a console session to another Catalyst? In principle to use it as a console terminal server.
View 1 Replies View RelatedSo I have read about proper procedure involving the connection between a console cable and Hyper-terminal. I have also tried plugging into a network port to obtain an IP Address but nothing seems to work. When powering on the switch I see that it lights up, hear fans spin and assume it has booted properly. I'm using Hyperterminal on Windows Xp Pro SP3 and I've also tried minicom in Fedora.
And just FYI Hyperterminal was set to the proper:
Bits per second: 38400
Data bits: 8
Parity: None
Stop Bits: 1
Flow Control: None
i have 3560 switch located in warehouse environments . i need to monitor the temperate of this switch . i am looking for OID value that serves this purpose .
kindly provide me how to look for all OID that give me real time status for FAN .. CPU UTILIZATION ...TEMPERATURE ...OR ANY MAJOR EVENT THAT CAN DISRUPT MY PRODUCT IN .
Which trap we need to enable to monitor FEX module on 5K.If FEX goes down due to link failure/power down we do not receive any trap on SNMP server. Ethernet1/5 is where Fex module in connected on 5K
Some sample log
2013 Jan 4 12:11:32switch1 %FEX-5-FEX_PORT_STATUS_NOTI: Uplink-ID 1 of Fex 103 that is connected with Ethernet1/5 changed
its status from Connecting to Active
2013 Jan 4 12:11:32switch1 %ETH_PORT_CHANNEL-5-PORT_UP: port-channel103: Ethernet1/5 is up
2013 Jan 4 12:11:32switch1 %ETH_PORT_CHANNEL-5-FOP_CHANGED: port-channel103: first operational port changed from none to E
thernet1/5
[code]....
I ran into a problem a few weeks ago and am still trying to figure out why either the 3560 switch or our Cacti syslog server did not alert us when one of our ports was experiencing heavy CRC and Input errors.
I had upgraded the IOS to 12.2(55)SE6 and rebooted the switch. About a week later, someone was troubleshooting why print jobs were having problems printing to a high speed printer. When I looked at the interface it showed a few thousand CRC and Input errors. I cleared the counters and had them print again and watched as the CRC and Input errors went up. When I did a "show log" there were no error messages. Looking at our Cacti Syslog there were also no errors present for the past 6 months.
We found that the device on the port was set to auto speed and duplex and the switch port was at 100/Full. Once we got them to match the problem was resolved, but we were left wondering why we never got any alerts.
We also have some 3548 and 3550 model switches that Cacti picks up %LINK-4-ERROR for any ports that show CRC and Input errors. I did some research and it appears that the 3560 switches do not have the LINK facility code. I believe it has been replaced with a PHY link code but I'm not sure. We do have some "%PHY-4-EXCESSIVE_ERRORS: Excessive FCS, data, or idle word errors found" but they are all for 3750 switches. I could not find any 3560 that had alerted for that error or the LINK error.
I also tripped port security on the 3560 switch just to make sure that it was reporting correctly to Cacti and that alert did show up.
My question is how do I get a 3560 switch to alert in the logging buffer for CRC/Input/FCS errors? Also, how I can generate CRC and Input errors on purpose for testing? I tried mismatching the speed/duplex/Auto and only got collissions, no CRC or Input errors.
i am trying to monitor some UPS equipment,for that i am using a cisco 2960 switch and when the UPS is down it sends a L1 loop.when the switch detects the loop the int in which the UPS is conected to will get a link and go up.now my problem is this, as you probeblly know the switch has a protocol which protects it from getting loops and cuasing all kinds of problems.i need to remove this protocol and allow the switch to get L1 loops?
P.si have tryed to use UDLD, KEEPALIVE, BPDU guard, down-when-looped and errdisable commands with no success?
Both regular IP traffic and ICMP traffic are passing through the source port. C6509 provides the option of filtering vlan traffic during monitoring. But I don't have vlan traffic.
qa-c6509-c(config)#monitor session 1 filter ? vlan SPAN filter VLAN
So I applied an access-list which only allows icmp traffic to be sent out of the monitoring port. But it does not work.
on 7600 SUP720 3B.I have port channel and there are two ports on that port channel. is it possible to apply this command? does it work?
View 1 Replies View Relatedi have just set up a monitor session with a 3750 stack .Simple enough task you would think.But i only seem to be seeing broadcast packets !!Now there is definitely unicast traffic being used on the host i am monitoring.I have done the basic commands
-monitor session 1 dest int fas 5/0/24
-monitor session 1 src int fas 5/0/34
I would like to ask about 3750 stacking and some Cat6 stuff...
1) How do we monitor 3750 stacking port in LMS?
2) Let say if I stack 3 switches, middle switch should be Master. Uplink should be at Top and Bottom. Is best practice?
3) Can we mixed 3750G and 3750X and what is result internal BW - fallback to 32Gps?
4) is there any Qos difference between WS-X6816-10G-2T and WS-X6816-10G-2TXL?
5) is there any Qos difference between MSFC5 PFC4 and MSFC5 PFC4XL?
6) What is main difference between PFC4 and PFC4XL in Sup2T?
7) Pls share more about Central and Distributed Switching in Sup2T and which card support Distributed DFCXL?
I was previously using SDM for our Cisco 2811, and this past week installed CISCO Configuration Professional so I could have access to a bandwidth/traffic monitor.
I have successfully started the monitoring service and monitored traffic from within CCP, but it appears that if I turn off the computer I am using to monitor the traffic, it stops collecting data until I start CCP and the monitor up again.
Is there a way (maybe with IOS console commands) that I can have the monitor always running, so I can pull up, say, a week's worth of info at any time? Leaving the computer on all the time is not an option, and currently I have only a few days of data, then a big empty chunk, and then what I have collected since I started it back up today.
I tried to clear monitor session on 6500 and keep on getting the following error:
%Another session parameters or permit-list is being configured %Please wait for another configuration to complete.
how i can go about clearing the monitor session.
I tried to clear monitor session on 6500 and keep on getting the following error:
%Another session parameters or permit-list is being configured %Please wait for another configuration to complete.
how i can go about clearing the monitor session.
I have 2950 switch booting through MOnitor Mode.Analyzed there is no Cisco IOS image in flash.
View 1 Replies View Relatedrsbd7k01-p-vdca(config)# monitor session 2
rsbd7k01-p-vdca(config-monitor)# source vlan ?
<1-3967>
rsbd7k01-p-vdca(config-monitor)# source vlan 1 - 3967
ERROR: vlan 33-3967: Number of source vlans exceeds maximum
rsbd7k01-p-vdca(config-monitor)#
Does one can use a Vacl to monitor network traffic on a nexus 3064 much like you can on the 6500s? If so, any performance tradeoffs or caveats to be aware of ?
View 2 Replies View RelatedI have a switch 4948, with version 12.2.31.sga4 ( I dont found bug about monitor session) and we try to made port mirroring with a monitor session from a VLAN and port belong at this VLAN have traffic input and output, but in the destination port, I always see it output traffic..
Global command
Red-127#sh run | in moni
monitor session 1 source vlan 1127
[Code].....
Cisco 3560 does not support "set ip next-hop verify-availabilty". I need this command in my config. "set ip next-hop" do not do the same job.
View 8 Replies View RelatedThe last few days I've been exploring options in getting rid of some old routers accross a wan connections. I have a cat 3560 to play with and I thought I would try and use the no switchport command test out routing with switch. I've got some type of route issue and I tried a few things which I thought would fix the issue but had no effect. I'll post the config and a few commands so you can see what the basic setup is.
Here we can see in the arp that it knows about both 10.7.1.2 (PC unable to ping 10.3.3.254) as well as 10.3.3.254 (ASA).I tried adding in a ip route of 10.7.0.0 255.255.0.0 10.3.3.110 as well as 10.3.3.254. Neither produced the results I wanted allowing 10.7.1.2 (PC) to ping the ASA (10.3.3.254). [code]
I have an environment of 3 X 3560G of which I have 1st switch-CORE(f0/10) connecting to the VPN router(CE) interface-f0/0. Remaining 2 Cisco 3560's(Access) are connected to Gi0/1 and Gi0/2 on the 1st switch-CORE via gi0/1 . On all three switches I have created multiple VLANs and assigned ports to these VLAN. The switch to switch connection is trunk allowing all VLANs created on all these 3 switches. Now the issue is how I am going to have all these VLANs routed through single interface on the routeri-e f0/0, as all these subnets will communicating to remote site over VPN. What should be default gateway on the 2 Access switches and the CORE switch, also what static route should be on router to reach all subnets(VLANs) created on these 3 switches.
I have read inter-VLAN routing i-e creating sub interfaces on router but dont want to proceed with that and looking for any other way to have my VLANs talk on all three switches and then are accessible to remote site ove VPN?
I have tried to make policy based routing on Cisco 3560. I use ipservices ios (SW version 12.2.(50)SE3 and SW-IMAGE C3560-IPSERVICESK9-M) For below configuration there is no problem and pbr is working.
“Access-list 100 permit ip host 1.1.1.1 host 2.2.2.2
Access-list 101 permit ip host 1.1.1.1 host 3.3.3.3
Route-map pbr1 permit 10
Match ip address 100
Set ip next-hop verify-availability 1.1.1.2 1 track 11
interface fasthethernet 0/1
ip policy route-map pbr1”
But when i add another sequence to the "pbr1" with another sequence number like that.
“Route-map pbr1 permit 11
Match ip address 101
Set ip next-hop verify-availability 1.1.1.3 1 track 12”
pbr is not working. Switch gives message "PLATFORM_PBR-3-UNSUPPORTTED_RMP:Route-map pbr1 not supported for Policy Based Routing”"ip policy route-map pbr1" command not shown in the running config. And "show ip policy" output is blank.Configuration guide says you have insert many sequence to the route-map with the same name. And also this command is not in the unsupported command list.
I am trying to get my workstation to talk to a workstation on a different sub-net through a Cisco 3560 switch. The switch is running the following IOS version: [code]
My primary network is 172.16.0.0 and I am trying to connect to a device on a 192.168.111.0 sub-net. [code]
What would be the best way to get the two workstations talking via the switch?
I implemented access list on cisco 3560 switch but it never works. I want to block access from network B to Network A and allow from Ato B
Network A. 10.0.12.0/24
Network B 10.0.24.0/24
The configuration is
interface Vlan1
description Data VLAN
[Code].....
We recently purchased Cisco 3560X Layer3 Switch. We need to perform simple Inter VLAN routing. We have configured VLAN1 (name-server_vlan) and VLAN2 (name- user_vlan). We have also assigned the Ports and IP address to both the VLANs. After assiging this if we plug Laptop A into VLAN1 then it doesnt communicates with Laptop B (btw, Laptop A is able to Ping VLAN2 Gateway ) in VLAN2 but on the other hand Laptop B is able to communicate with Laptop A and ping everything i.e. Gateway of VLAN1.
View 17 Replies View RelatedI have cisco 2651. It contains two FastEthernet interfaces: Fa0/0, Fa0/1.Fa0/1 has an ip address. Fa0/0 hasn't an ip address.I need to create monitor session from source Fa0/1 to destination Fa0/0. Then i want to connect my notebook to Fa0/0 to analyze some traffic from port Fa0/1
View 2 Replies View Related