I am trying to figure out the Flexible Net-flow on Cat 4510R+E Switch running IOS-XE code. My Neflow flow software is manageengine 7.X. I am able to see the netflow interfaces but the traffic itself is not displayed. On the Switch I can see the netflow exporter statistics counter being incremented thereby confirming as being exported.
View 2 RepliesAny major difrrence between Netflow v/s Netflow-Lite?
I am trying to understand if Cisco 4948E can do the same job as Cisco 4500E or not and difference between Netflow v/s Netflow-Lite will work for me to select correct product.
I notice that NAT is not possible Cisco Catalyst 4500e series. Is there any other ways to configure NAT? Currently we have 2x Catalyst 6509 and we're migrating to the 4510e and there's NAT in the 6509s. I was thinking of re-using the 6509s and connect to the 2 new 4510e in a meshed trunking layout with MST (Layer 2) and OSPF/EIGRP (Layer 3) protocols turned on.
View 1 Replies View RelatedWe have a new building, and I told the cable company run OM3 cable from second floor to 1st FL data closet because we have 4510R SupV-10G at each floor.However, the cable company ran a regular fiber cable instead of OM3 mistakenly. My questions, can I still use OM3 patch cable?? Second questions, can I still have the 10Gig performance??
View 3 Replies View RelatedI have a two Cisco 4510R each with two sup V-10GE redundant. The code on these sup modules are 12.2(31r)SG3. I need some assistance in getting this setup worked out. I have all four of the 10GE populated with appropriate optics. I setup a link from one 4510R to the other using these interfaces. From the documentation I found I had to use Tengi1/1 and Tengi2/2 as the redundant pair. I plugged the up link into these ports. The Tengi1/1 (active supervisor) links up and works fine. But when I look at the ports port Tengi2/2 it isn't showing link or active. Now port 2/1 (nothing plugged into it) is showing as active.
Now is the redundancy supposed to be 1/1 and 2/1? If so, the switch is in production, when I move the connection over from 2/2 to 2/1 will it cause a outage? The reason for this is I now have a system with a 10G port and would like to utilize one of the other 10G ports. Is that possible? Or does it have to be a lag/redundant up link to work (say to another switch)?
I'm working on deploying a new 4510R+E for our organization. This is my first experience with a modular switch. I'm trying to enable SSO, however in the redundancy configuration mode, the sso command is not available. Is SSO only available with certain software images / licensing levels? [code]
View 2 Replies View RelatedWe have cisco 4510R+E switch with IOS-XE Software Version 03.01.01.SG RELEASE SOFTWARE (fc1).Our this switch is having two core & one core is always going to about 90% to 98% cpu utilization while other core is showing normal (about 5% to 10%),we check with-This switch is gateway of our LAN.
View 6 Replies View RelatedWe have recently purchased Catalyst 4510R-E with two PoE line cards. When we connected Cisco Wireless APs to Cat4510 PoE ports it did not come up. These WAPs are working fine on other Cisco switch with PoE ports so there is no issue with WAP. We have received two CAT4510 and on both two slots are populated with PoE line cards and on both switches WAPs are not coming up. PC/desktops are working fine on these ports.Is there any configuration required on Cat4510 to enable PoE feature.
View 15 Replies View RelatedWe need to move some line cards around on our 4510. The top slots have a 24Gbps backplane while the lower slots are limited to 6Gbps. Poor planning on our part has left us with installing a 10Gb line card in one of the bottom slots. I'd like to move a couple of the cards up top, to the bottom.
My question is simply will the switch magically preserve the configuration for those cards and change the slot number for me or will I need to reconfigure the interfaces for those cards I move?
We have CORE switch model : Cisco WS-C4510R-E with dual SUP 5 - 2 10GE. [code] Now We want to upgrade this IOS to the upgraded version.
View 3 Replies View RelatedI have a requirement to upgrade some line cards in our 4510R-E chassis to ease some oversubscription due to the 6Gbps limit.
At the moment my plan is to upgrade three cards from WS-X4548-GB-RJ45 to X4648 to get the 24Gbps per card.
Supervisors are 6-E
1. Is this a viable plan?
2. If so can the cards be hot-swapped?
3. Would the new cards retain the existing interface settings of the previous cards?
4. Any gotchas to look out for?
We have one switch 4510R which could have total 300 cisco GE color phone connected. That means 300x15.4=4620W. Considering the 89% effiency for the PoE line cards, that means each line card needs 5191W input power from chasis power supply. Based on the 6000W power supply specs, only up to 4800W is allocated for PoE purpose. But we need 5191W from power supply which redundant mode can't offer. We don't want to go with combined mode. So should we add external power shelf to add more power?Another question will be how much power we need from utility or UPS. For example, the efficency of cisco power supply is 75% and we use two 6000W power supplies in redudant mode. Then we need 8000W. The voltage is 220V. Then the AMP we need is 36.4A from UPS or utility power.
View 2 Replies View RelatedWe have a problem of igh CPU Utilization in Cisco 4510R-with dual SUP V-10G modules.
Cisco 4510R switch is the CORE switch and have 30 no's of VLans. It was running PVST/PVST+ previously. But Now we have migrated to MST. But after upgradation the CPU utilization reached alomst 98%.
We have some 4510R+E with dual sup 7e that have experienced problems recently. One of the sup 7e's crashed with a "critical software exception":
#show verCisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.01.01.SG RELEASE SOFTWARE (fc1)
<snip>
ROM: 15.0(1r)SG1
<snip> Last reload reason: Critical software exception, check bootflash:crashinfo_iosd
So I thought I'd upgrade to IOS-XE 3.2.0SG to hopefully resolve the issue. I was reading the software release notes and it says:
If you are upgrading to 3.2.0SG, you must upgrade your ROMMON to 15.0(1r)SG2.If they have dual supervisors, first upgrade your software to 3.2.0SG, then upgrade your ROMMON to15.0(1r)SG2 to avoid the resets uplinks issue (CSCtj54375).
And from the ROMMON release notes it says:
Download the cat4500+e-promupgrade-150_1r_SG2 program from Cisco.com, and place it on a TFTPserver in a directory that is accessible from the switch that is upgraded.The cat4500+e-promupgrade-150_1r_SG2 program is available on Cisco.com at the same location from which Catalyst 4500 system images are downloaded.
So I have several questions:
The only promupgrade file I can find is cat4500-e-ios-promupgrade-150-1r-SG2 (which doesn't appear to be the same as cat4500+e-promupgrade-150_1r_SG2 ). Where the correct file is?Since I have dual supervisors, it says I should upgrade the software, then the ROMMON. If I can do that (run the new software with the old ROMMON) why am I bothering to upgrade the ROMMON in the first place? (update, ok, I see the new ROMMON gives me enhanced crash info and will allow future upgrades without bringing down both supervisors at the same time).When these were ordered/installed, the licenses were all mixed up (I wasn't involved with that ). So the MDFs have dual sup 7e with ipbase and the IDFs have single sup 7e with enterprise services. Obviously, we want the enterprise services in the MDF so we can run OSPF and the ipbase in the IDF. But, OSPF seems to be running just fine in the MDF on ipbase. Are the licenses not enforced on these platforms? The release notes for 3.2.0 say ipbase doesn't support OSPF. So if I upgrade the MDF switches, will OSPF suddenly stop working?
The IP Base image does not support enhanced routing features such as Nonstop Forwarding (NSF) , BGP, Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), Intermediate System-to-Intermediate System (IS-IS), Virtual Routing Forwarding (VRF-lite) and policy-based routing (PBR).
I have cisco 4510R L3 switch with installed 2 Sup on slot 5 and 6. the current active Sup is in Slot5 i want to make active Sup6 in slot 6 which is currently standby sup in chassis. Is there any way to make standby Sup to ACTIVE without reloading any of the Supervisor. however there is two way as per my understanding -
1. we can reload the active Sup so that standby Sup will take charge. - (redundancy reload shelf)
2. we can focefully switchover the state of Sup's by (redundancy forcefully swithover) but in above both cases reload will be performed by one of the supervisor. which i don't want.
I came across an interesting issue and thought I would see if anyone else has encountered it before contacting TAC.I have two Cisco Catalyst WS-4510R-E switches with a single Supervisor V module in each chassis. Both Sup cards are now running 12.2(54) SG1; ipbasek9 firmware; yes, I plan to move both switches to 15 code but that's another story. Anyways, prior to the upgrade the one switch was running 12.2 (33) code; I suspect the code was never upgraded; running ipbase non - K9 code. The other switch was running 12.2(44) with K9 prior to upgrade to 12.2(54).
View 2 Replies View RelatedI have two Cisco Catalyst WS-4510R-E switches with a single Supervisor V module in each chassis. Both Sup cards are now running 12.2(54) SG1; ipbasek9 firmware; yes, I plan to move both switches to 15 code but that's another story. Anyways, prior to the upgrade the one switch was running 12.2 (33) code; I suspect the code was never upgraded; running ipbase non - K9 code. The other switch was running 12.2(44) with K9 prior to upgrade to 12.2(54). With the background set, one switch reports the following:SwitchA (config)#r?radius-server redundancy regexp represourc rmon route-map router.
View 4 Replies View RelatedI have a 4510R-E chassis with SUP7-E running IOS XE version 3.01.01.SG. I am unable to create a port-channel and apply auto-qos for VOIP.If I configure auto-qos on the physical interfaces, I get this message when I try adding them to the port channel:
"The attached policymap is not suitable for member either due to non-queuing actions or due to type of classmap filters."
Auto-qos is not an available command in the port-channel interface configuration, but if I try adding the service policies that were created by auto-qos to the port channel manually, it lets me apply the input policy but on the output policy I get this message:
"A service-policy with queuing actions can be attached in output direction only on physical ports."
With the input policy applied to the port-channel interface, I tried addign the output policy to the physical ports and I got this message:
"A service-policy with non-queuing actions should be attached to the port-channel associated with this physical port."
Is there a way to get the auot-qos policies applied to the port-channel properly?
I have a SR520 just deployed at a remote site with Internet Access.
Working Environment:
Remote sites have SR520 with IPSEC VPN back to HQ and netflow v.5 works through the VPN back to our PRTG server.
Non-Working:
I cannot get Netflow data to our PRTG with this first SR520 implemented with Zone Base Security. I am not able to get my netflow traffic out. VPN is up and running. Internet is a dialer0 interface. I have a Kron job that does the copy run to tftp backup daily to the same PRTG server and it works fine.
Both my source interface and address on the TFTP command and the netflow commands are the same interfaces (VLAN75) and IP. The Destination ip is the same too (through the VPN tunnel).
Snipped:
flow exporter prtg
destination x.x.x.x
source Vlan75
[Code]....
I have a 370 with C3KX-NM-10G module & i want to enable NetFlow on it did the specified configs
Step 1 Flexible NetFlow Flow Recordsflow record miketestmatch datalink source-vlan-idmatch datalink dot1q prioritymatch datalink mac source-addressmatch datalink mac destination-addressmatch ipv4 versionmatch ipv4 tosmatch ipv4 ttlmatch ipv4 protocolmatch ipv4 source addressmatch ipv4 destination addressmatch transport source-portmatch transport destination-portmatch interface input physical snmpcollect interface output snmpcollect counter flowscollect counter bytescollect counter packetscollect timestamp sys-uptime firstcollect timestamp sys-uptime last flow record miketestegressmatch datalink destination-vlan-id match datalink dot1q priority match datalink mac source-address match datalink mac destination-address match ipv4 version match ipv4 tos match ipv4 ttl match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface output physical snmp collect interface input snmp collect counter flows collect counter bytes collect counter packets collect timestamp sys-uptime first collect timestamp sys-uptime last Step 2 Flexible NetFlow Flow ExporterFlow exporter export-to-samplicatorDestination 10.1.1.8source Vlan1Transport udp 2055option interface-table timeout 60 Step 3 Flexible NetFlow Flow Monitors# Tie the Flow Monitor to the Flow Recordflow monitor mikektestrecord miketestexporter export-to-samplicatorcache timeout active 60flow monitor mikektestegressrecord miketestegressexporter export-to-samplicatorcache timeout active 60
& Applied it to g1/1/1 but without any luck , if netflow works on the
TenGigabitEthernet1/1/1 &
TenGigabitEthernet1/1/2
Only i have four switches stacked and nothing plugged to the
C3KX-NM-10G module
router 7200 (12.2(33)SRE1)
two interfaces with traffic going through, placed in a Data-VRF
Another physical interface and loopback interface in the global routing-table.
ip flow ingress on all physical interfaces configured
It was running for at least a year: I was getting netflow packets on my analyzer from the box. Since a couple of weeks I get no netflow-packets anymore.debug ip flow export tells me "IPFLOW: Sending export pak to ... port 2055"
But the packet is not leaving the box. By setting up an ip sla monitor udp-echo I simulated some traffic (udp/2055) which is leaving the box.
[code]...
I have 4506 with below sup, my requirement is to enable netfolw , but as i came to know that it is not supported in this sup, is there any additional option which can be explored to get the netflow working without replacing sup.
Card Type Model
-------------------------------------------------------------+-----------------------
Sup 6-E 10GE (X2), 1000BaseX (SFP) WS-X45-SUP6-E
Ive tried to configure NetFlow on layer 2 without success. I configured the recondmonitorexporter like the configuration guide said. but still i dont receive any netflow traffic. I checked the firewall on the VM and it looks fine.
i have done the command under the ethernet interface :" layer2-switch flow monitor TEST input" - for layer2 input.
Net flow on the Nexus 5596upI can't seem to find any information on the Nexus 5596 support of net flow. On Nexus 5596UP support of net flow ?
View 4 Replies View RelatedIf a Supervisor 6-E will support NetFlow on a Catalyst 4507R-E?If not, what are my options for NetFlow on a 4507R-E?
View 7 Replies View RelatedTo enable netflow export on ASR1001, do i need the firewall feaure license or not ?Docs are not really clear, NBAR requires FW license, but i am unsure about Netflow?
View 1 Replies View RelatedI am trying to use the following commands on the switch but it is not supported:
ip route-cache flow
ip flow-export destination
Attached is the output for show version and show module commands from the switch.
It is possible to configure the IOS NetFlow 122-58.SE2 in a Catalyst 3560?
View 5 Replies View RelatedI need to know if Cisco Switch 2960 support Netflow. If it doesn't, how do I configure the switch to enable Netflow?
View 3 Replies View RelatedI have a 3750E stackable swtch and I need to configure neflow on it. Are there any IOS versions that support netflow on the 3750E? Is there any possible to configure netflow on a 3750E? I do not see any netflow commands available on the switch?
View 2 Replies View RelatedWe have Cisco Catalyst 6509-V-E VSS Switch with Sup2T und IOS Version 15.0(1)SY2. We are gettin input netflow information from the gi2/3/7 but not output ... I am not sure why it does not work.
View 1 Replies View RelatedHow to get a summary of netflow statistics on NX-OS? On IOS you could do sh ip cache flow which would show what I need? Can't find a similar command on the Nexus Platform.
View 4 Replies View RelatedI have problems in exporting translations of NAT from my router through NetFlow v9 ASR1006, to my server nfdump, any opensource or licensed software (collector) that I recommend.
ip nat log translations flow-export v9 udp destination 10.1.1.15 1181