device: MSFC2(C6MSFC2-BOOT-M), Version 2.1(8a)EX.
A_Root(config)#interface Vlan 15
A_Root(config-if)#ip route-cache flow
Q: When I do 'show ip cache flow', only 1 packet per IP is printed(see attached file).
I have an HP OfficeJet J4500 that works fine with shareport on my Win7 x64 computer. the XP and Win2000 ones both have the same "partial page then lockup" problem. when this happens, the only way to disconnect shareport is to reboot the router. It shows connected to the same computer even if I reboot that computer. I started with V1?? from the install disk then tried 3 and finally 4 with no improvement. I have read several posts about this or similar problems. This is the primary reason I switched routers and bought the D-Link DIR-655, for the print server feature...
View 3 Replies View RelatedWhat the message below means? It's from our WS-C4506-E log running Version 03.01.01.SG.
Dec 20 16:27:26.182: (Suppressed 851 times)Dup Packet Fail for Sw PortDec 20 2011 16:27:28.068 UTC: %LINK-3-UPDOWN: Interface GigabitEthernet4/22, changed state to upDec 20 2011 16:27:29.070 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet4/22, changed state to upDec 20 2011 16:29:13.738 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet4/22, changed state to downDec 20 2011 16:29:14.738 UTC: %LINK-3-UPDOWN: Interface GigabitEthernet4/22, changed state to downDec 20 16:42:37.173: (Suppressed 162 times)Dup Packet Fail for Sw PortDec 20 2011 16:42:39.071 UTC: %LINK-3-[Code]....
I operate between c6509-E, what did you flooding? its just packet capture gi1/3 but i dont know it and is it attack?also same seq no switch gots it?what is problem?
View 2 Replies View RelatedMy workstation(10.0.0.250) directly connected to 6509_1 switch. 6509_1 is gateway with ip 10.0.0.5/22. Sometimes routing stop working, but after 3-5 minutes all back to normal.When issue occur i can't ssh to 6509_1, but i connect to second 6509_2 (10.0.0.6) and i can ssh to 6509_1 from it.Then form 6509_1 i try to ping my workstation Wireshark on my workstation show that packet arrive. My workstation reply on it, but switch not accept it.How it possible? As I say after sometime all go back to normal without any changes. [code]
View 2 Replies View RelatedWe have a site were we have a 887 cisco hsiung a GRE tunnel
When pinging anything froom the tunnel source to the tunnel dest on the local lan we get a 50% packet loss
ping
Protocol [ip]:
Target IP address: 10.9.93.22
[Code].....
replicated the setup exatly in our lab and it works 100% with exactly the same config.
I am running (cat4500-ENTSERVICES-M), Version 12.2(53)SG2 on the switch. I have a scenario where I have 3 end user equipments connected to a Cisco 4948 L3 switch. At the switch end port 1/46, 1/47, 1/48 are the terminating points for these 3 devices . I have added these three ports to VLAN140 (switch port access vlan140 on the gig interfaces).
The device connected to 1/46 is the one I'm testing some signalling features on. My requirement is to have intermittent packet drop on this interface so that my signalling associations would go down now and then. I'm trying to simulate a real-time network congestion/latency/packet drop in a simple manner.
I do not want to shut/no shut the 1/46 intf to cause this. Some way to achieve intermittent packet drop on this gig1/46 intf ?
I have a cisco 3560E switch setup with LACP, when using LACP i receive alot of packet loss / output drops
When a ping from the server behind LACP:
--- google.com ping statistics ---
44 packets transmitted, 39 received, 11% packet loss, time 42990ms
what would cause this packet loss with lacp?
some output from the switch:
Port-channel12 is up, line protocol is up (connected)
Hardware is EtherChannel, address is d0d0.fd58.7390 (bia d0d0.fd58.7390)
Description: LACP-PORT
[Code]....
I can see drops on the 6509 Queue for interface gi1/6 , qos is disabled globaly with qos disabled all packets are in one Queue using best effort my question is if I can see drops using the sh queueing int Gi1/6 command why I am not seeing any drops when I run the Sh int (interface number ) command. [code]
View 7 Replies View Relatedwe have a 6509 with ios 12.2.33SXJ
we have 2 WS-X6516-GE-TX, WS-X6516A-GBIC, and a WS-X6748-GE-TX with a WS-F6700-CFC daughtercard
our sup is a WS-SUP720-3B
we are experiencing packet loss for everything connected in the WS-X6748-GE-TX blade, right now we dont have any production device in that blade due to the packet loss we are experiencing.
this switch was running hybrid before it is now running native ios, however I can't recall if we didn't have that packet loss before. do i need to update a firmware of the card or daughtercard (if this is possible, can't say i've done it before).
I have one server which run some application for wireless user. this server forward multicast packet to wireless user. server and wlc physically connect to cisco 3750 switch.i want the server forward the multicast packet to wireless users.server access vlan 4.wlc controller have 2 vlan: 90 and 110.and wireless user some of vlan 90 and some of vlan 110.i enable igmp snooping on wireless controller. and enable globally command but it is not working.which additional configuration i need on cisco switch.
Switch(config)# ip igmp snooping
This log message is produced Catalyst4507R+E.The device is inserted SUP-7 with 3.1.0SG Image.With this log message, the device produced duplication packet of multicast. Dec 2 16:40:00.276: (Suppressed 269 times)Dup Packet Fail for Sw Port
View 1 Replies View RelatedWe are facing issue related to STP.I am getting MAC FLAP error on Cisco 4510 switch. The effect on network is intermittent Pkt drops in the network. When I checked the specific Ip address I am getting the same with two different. [code] Vlan is created on CORE switch and assign priority 0 than CORE switch should be the Root. but instead Root port is becoming the port where server is connected. Server at last connected to CORE switch via HP switch via other Vlan to CORE switch and creating a loop as shown in Diag. [code] The Priority of Vlan 102 is changed and Root port has been changed due to that. The Bridge ID is the same as CORE switch.
View 7 Replies View RelatedWe have Cisco IP phones behind a 2600 series router:Most of the time when the PBX receives a packet from the phone, the source IP of the packet is set to the public IP of the router (1.2.3.4) as expected. However, once in a while, we get packets (at the PBX) with the source IP set to the private IP of the phone (10.0.0.12).The router is configured by our provider, and they can't give us any explanation for this behaviour. Is it safe to assume that PAT is not configured properly at the router?
View 2 Replies View RelatedI have a video feed coming into my 3570. It comes in at 5 minute input rate 18777000 bits/sec, 1695 packets/sec. However, the uplink to the router is much different, 5 minute output rate 130000 bits/sec, 28 packets/sec. I am in a lab and about ready to go into testing phase for a project when we discovered this problem, as this video feed is not veiwable on the other end.
Below is the config and capture from the switch.
BLOSSw1#sh int g1/0/6GigabitEthernet1/0/6 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is a44c.112f.3506 (bia a44c.112f.3506) MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec, reliability 255/255, txload 1/255, rxload 4/255 Encapsulation ARPA, loopback not set Keepalive not set Full-duplex, 1000Mb/s, link type is auto, media type is 10/100/1000BaseTX SFP input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:00, output hang never Last clearing of "show interface" counters 15:16:25 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute
[code]....
In my cisco 3845 router I can see output packet drop in some of the interfaces.I suspect that router is processing packet beyond its mix throughput limit. Moreover when i run show int fax/y switching command I can see packet drop by RP process.
View 11 Replies View RelatedI have Cisco 3560x layer 3, but there is one problem with MAC ACL. Here is sample scenario:
I have two V LANS 2 & 3. There is one device (D1) on V LAN 2 and three (D2,D3,D4) devices on V LAN 3. D1 can talk only to D2 and D3. D4 can talk only to D2 and D3. D1 and D4 cannot talk at all. I got the IP access list all set, but I was asked to get the MAC ACL on it. The problem is that as soon as packet is routed, its MAC addresses will change, correct? Is there way of preventing device with same IP but different MAC from talking to device it should not to, keeping in mind that the packet will be routed?
I have a Cisco 2960S stack and I'd like to tune the timers so that packet loss is minimal if a switch fails.
View 9 Replies View Relatedi have issues logging into one of our core switches.its a 6509 switch but i cannot log in remotely.when i try to console in on the console port, i cannot log in instead i get the above error message.I haven't rebooted yet but would it solve the problem as this switch is a production switch.
View 6 Replies View RelatedHow to mirror port only http get packet on 4948 or 6500 ?
View 4 Replies View RelatedI have a Cisco 2960S stack and I'd like to tune the timers so that packet loss is minimal if a switch fails.To simulate a failed switch I have reloaded it while running a continuous ping to a management address on the stack's SVI: [code] As I see the same results when a ping is directed through the single switch (switched), and through the firewall (routed), I'm inclined to think that this is due to the stack failover timers on the Catalyst 2960S.Is it possible to change the stack failover timers (i.e hold down, failover etc), to speed up the failover process?
View 1 Replies View RelatedI have always done my port monitoring (SPAN) on Cisco layer 3 switches with no issues. This time I am trying to do this on a Cisco 2901 router:
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
System image file is "flash0:c2900-universalk9-mz.SPA.151-4.M2.bin
I need to have the source port gig0/0 and destination port gig0/1. There is something about the gig port enumeration (slot/port#) that makes the command rejected. It is self explanatory:
#sh ip int brie
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES NVRAM administratively down down
GigabitEthernet0/0 xxx.xxx.xxx.xxx YES NVRAM up up
GigabitEthernet0/1 unassigned YES NVRAM up up
Serial0/0/0:0 unassigned YES unset up up
[code]....
It doesn't matter what slot or port number I use, it is always rejected. The command is rejected for Both destination and source gig interfaces. I tried a wide variety of slot/port numbers. To my best understanding the complete port names are: GigabitEthernet0/0 and GigabitEthernet0/1, so why does it think there has to be another digit after 0/0 or 0/1? Does it have anything to do with the Embedded-Service-Engine0/0 being administratively down?
Most of the 4500 Switches in our network are giving the similar error for so many ports
%C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 1 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on p t Gi2/6 in vlan 100
Its impossible to do a wireshark packet tracing for all the ports.
our C3750 like the one described here [URL]
We have the port on the switch set like this:
switchport port-security maximum 25
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
In case a device connected to the port is inactive for more than 2 minues ( aging time ) the first frame/packet the device generates arrives to the port on the switch, but the switch does not forward it to the appropriate port ( discards it or whatever ).
So far I tested on
1 30 WS-C3750E-24PD 15.0(2)SE2 C3750E-IPBASEK9-M
2 30 WS-C3750E-24PD 15.0(2)SE2 C3750E-IPBASEK9-M
3 52 WS-C3750G-48PS 15.0(2)SE2 C3750-IPBASEK9-M
[Code].....
When we remove port security from the port, it works perfectly fine, as expected.
It seems this is not HW or IOS version related. It seems it is not a stack synchronization issue, it does not matter if a device is connected to the first or other stack member. I tested on C3560 too, here there are no problems, so seems it is 3750 related.
I have two 2960-s switches with GLC-FE-100FX fibre modules in and I am seeing packet loss over the link that is connected to the modules. When the interface is shutdown and brought back up it always comes up in half duplex even thought it is set to full in the config. I've seen other posts where you have to use the command no duplex then full duplex to get it to come up int full duplex. This does appear to work when I do a show int it says its full duplex however I'm stil seeing 20 - 40% packet loss on the link which suggests to me there is still a speed/duplex issue. The device at the other end is a Cisco 7200 which is set to 100Full. If I plug a Cisco 2811 into the fibre link I get zero packet loss which suggests its a problem with the switch.
I have changed the modules and fibre cables which makes no difference. As I stated at the start I have two 2960's both are showing exactly the same issue. Details of the switch are below the SFP are cisco branded:
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 28 WS-C2960S-24TS-L 12.2(55)SE5 C2960S-UNIVERSALK9-M
interface GigabitEthernet1/0/25
switchport trunk allowed vlan 380,382,384,386
switchport mode trunk
duplex full(code)
Issue I am having with a Cisco 4507? Below is the error i am receiving.
Feb 14 10:06:09 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 508 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
Feb 14 18:44:06 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 119 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
Feb 15 00:51:06 EST: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 366 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Po10 in vlan 112
[Code]...
We have a number of 6509s which generally have dhcp relay agents configured on the SVIs. The dhcp servers are centralised. Recently we've had one or two faults with misconfigured or faulty devices (blade server chassis and also printers) generating high volumes of dhcp discover packets and causing high cpu on the relevant 6500. I would like to rate limit these discover packets, which are layer 2 broadcasts. Storm control can't discriminate between different types of broadcasts and on a gig link would need to be set down at about 1% to have much effect on the problem. I've looked at CoPP and also mls hardware rate-limiting but as I understand it, these two features don't control broadcast traffic. I also looked at dhcp snooping but if an interface receives a high level of dhcp discover broadcasts, e.g. over 100pps, I don't want it to go error-disabled (as this would knock down the whole edge switch), just to drop the excess packets.
View 2 Replies View RelatedI have been searching the message boards and wasn't having much luck. I am running some monitoring sessions on my 6509 and on the VLAN I am monitoring, I am experiencing a really large packet loss. If we hook up a laptop to the destination port and run wireshark we are seeing between 80% and 90% packet loss. I dont see the packet loss on the show port command, but I do on the show int vlan command.
The config is as follows:
Session 2
---------
Type : Local Session
Source VLANs :
RX Only : 500
[Code].....
I was doing some reading on Egress vs Ingress and I am wondering if the Egress SPAN replication state could be causing the packet loss that we are seeing or does the ingress & learn command override that?
i have made a topology in packet tracer related to etherchannel configuration.i am using 2 3560 switches and 1 2950 switch. Now what i want is to bundle up the redundant links between these 3 switches. The links fa0/1-3 between 2950_1 and 3560_1 switches have been bundled up but when i try to bundle the links fa0/4-6 of 3560_1 to fa0/4-6 of 3560_2 it wont work. i am using channel-group 1 mode desirable between the 3560 switches. secondly if i want to assign ip to port channels then it has to be of same subnet between 2 3560 switches right and it must be same between 2950_1 and 3560_1. But these 2 subnets should be different from one another.
View 3 Replies View RelatedI am using Packet Tracer to simulate Cisco networking.As the existing IOS of the 3560 and 2960 switch are in older version which has no new feature in new IOS, how to upgarde the IOS of Cisco switch at Packet Tracer?
View 5 Replies View RelatedMy network Infrastructure consists of 2 core switches(cisco 3950, 24 port) and 3 access switches (cisco 2960G, 48port). No distribution layer.Both Core switches are connected to the BVI of a VPN router.PVST is running in all switches. The STP results are all good. We have 3 VLAN's in the LAN an IP routing is enables in the core switch. The network diagram is attached.
The issue we are facing is that , we get intermittent packet drops while pinging towards the access switches, and there is always a higher latency towards these assess switches.These issues are present even with no other users using the LAN. But these issues are not present while pinging towards the GW.
I guess, it is because of this, we have issues the accessing file server in the LAN. How do we go ahead with the troubleshooting. Will upgrading the IOS resolve this.The present version details is..
WS-C2960G-48TC-L 12.2(44)SE6 C2960-LANBASEK9-M
I have made some test and i noticed that qos input policy does not classify the icmp packet based on their dscp.The "match dscp ef" or "match precedence 5" is not working only the "match protocol icmp" shows hits.
We need to classify the different icmp packets based on dscp ( TOS ) for measurement purpose.CISCO 7200, 12.4.25d and 12.4.20T have a same behavior.
I have an Cisco 6500 CS and there is a Cisco Unified Communication Manger Server connected directly to the Core Switch.I tried to change duplex and speed ( fix and auto ) for both sides, but the same problem.
View 9 Replies View Related