Cisco Switching/Routing :: To Mirror Port Only Http Get Packet On 4948 Or 6500
Feb 7, 2012How to mirror port only http get packet on 4948 or 6500 ?
View 4 RepliesHow to mirror port only http get packet on 4948 or 6500 ?
View 4 RepliesI need to connect a 6500 switch with a 4948 switch using 10G optics. On 6500, line card used is WS-X6704-10GE and I am aware that WS-X6704-10GE is a xenpak and 4948 ports are X2. What is the way to make the connection between xenpak and X2 work?
View 3 Replies View Relatedcisco WS-C6509-E Core switch with IOS "s72033-ipservicesk9_wan-mz.122-18.SXF11"
i have 2 question
Q.1 i want to upgrade this switch what is the latest IOS ver. supported by this module ?
Q.2 i need to enable http server on this switch when i run this comman it's accsebt but i cant get http work
we have a 6509 with ios 12.2.33SXJ
we have 2 WS-X6516-GE-TX, WS-X6516A-GBIC, and a WS-X6748-GE-TX with a WS-F6700-CFC daughtercard
our sup is a WS-SUP720-3B
we are experiencing packet loss for everything connected in the WS-X6748-GE-TX blade, right now we dont have any production device in that blade due to the packet loss we are experiencing.
this switch was running hybrid before it is now running native ios, however I can't recall if we didn't have that packet loss before. do i need to update a firmware of the card or daughtercard (if this is possible, can't say i've done it before).
I have an Cisco 6500 CS and there is a Cisco Unified Communication Manger Server connected directly to the Core Switch.I tried to change duplex and speed ( fix and auto ) for both sides, but the same problem.
View 9 Replies View RelatedOn the supervisor card of a cisco 6500 series, according to the following link, [URL] it only has 2 uplink ports on the card. Would I be correct in assuming that I only have those to ports that I can configure IP addresses on?
The cisco that is being devlivere is coming with a 48 port switch and 24 port fibre switch. Could I change any of those ports into a router port and configure IP addresses on those?
The supervisor card is a ws-sup-720-3b the 48 port switch is a ws-x6748-ge-tx the 24 port fibre switch is ws-x6724-sfp
I need getting access to my http server. I have a host name that I configured to point to my IPS IP address. Port 80 is enabled on my server, but I can't seem to get access it from my web address [code]
View 5 Replies View RelatedI have always done my port monitoring (SPAN) on Cisco layer 3 switches with no issues. This time I am trying to do this on a Cisco 2901 router:
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
System image file is "flash0:c2900-universalk9-mz.SPA.151-4.M2.bin
I need to have the source port gig0/0 and destination port gig0/1. There is something about the gig port enumeration (slot/port#) that makes the command rejected. It is self explanatory:
#sh ip int brie
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES NVRAM administratively down down
GigabitEthernet0/0 xxx.xxx.xxx.xxx YES NVRAM up up
GigabitEthernet0/1 unassigned YES NVRAM up up
Serial0/0/0:0 unassigned YES unset up up
[code]....
It doesn't matter what slot or port number I use, it is always rejected. The command is rejected for Both destination and source gig interfaces. I tried a wide variety of slot/port numbers. To my best understanding the complete port names are: GigabitEthernet0/0 and GigabitEthernet0/1, so why does it think there has to be another digit after 0/0 or 0/1? Does it have anything to do with the Embedded-Service-Engine0/0 being administratively down?
our C3750 like the one described here [URL]
We have the port on the switch set like this:
switchport port-security maximum 25
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
In case a device connected to the port is inactive for more than 2 minues ( aging time ) the first frame/packet the device generates arrives to the port on the switch, but the switch does not forward it to the appropriate port ( discards it or whatever ).
So far I tested on
1 30 WS-C3750E-24PD 15.0(2)SE2 C3750E-IPBASEK9-M
2 30 WS-C3750E-24PD 15.0(2)SE2 C3750E-IPBASEK9-M
3 52 WS-C3750G-48PS 15.0(2)SE2 C3750-IPBASEK9-M
[Code].....
When we remove port security from the port, it works perfectly fine, as expected.
It seems this is not HW or IOS version related. It seems it is not a stack synchronization issue, it does not matter if a device is connected to the first or other stack member. I tested on C3560 too, here there are no problems, so seems it is 3750 related.
We have a NETAPP nas box having two interfaces connecting to two fex's on 5ks. The 5ks are inturn connected to nexus 7k boxes. We have a 100mbps man link (LAN Extension). The netapp's two nics are grouped together to form a teaming type of environment. SNAPMirror replication is very poor at the rate 10mbps though the WAN speed is 100mbps and also the wan link is utilized only about 60mbps. What could be the problem. We tried removing storm unicast control 10 but with no effect.
View 1 Replies View Relatedi have several cisco 6500 switches, and user switched connected to them.in my example i have a global service vlan, where some access ports are directly connected on the 6500, and this vlan is also allowed on the trunks to the access switch.
now i am connected with ma laptop on a access switch, where my port is in the same vlan. when i do a show mac address-table on my access port, i can see my own mac-address, nothing else.when i start wireshark to see the traffic, all i should see is traffic from or to my MAC, or broadcasts/multicasts.
But i can see other unicast traffic with different source/destination mac than mine.It seem slike these packets get broadcasted over the whole VLAN, but its no broadcast MAC nor IP.
I have a pair of 6500's setup with VSS and there is currently only one link between then. However one end of the link is on Po10 and the other end is on Po25. If I move the Po25 over to Po10, will things break? It seems to be working fine now. I'm about to add a second link and I'm concerned about the current configuration. It makes more sense to me to have both ends of the same link on the same port-channel ID. I've seen documentation which states otherwise however.
interface Port-channel10
no switchport
no ip address
[Code]....
can i have 4 links from an ESX server to 6500 , each link represents a trunk link carries each the same 2 VLAN , 100 and 101 , keep port-channel out of the picture , does it work well?
View 12 Replies View RelatedI have a Cisco 6500 series switch with VS-C6509E-S720-10G ,I have two redundant supervisors between two chassis on the LAN with no add-on line cards ?
I need to know if I can use the redundant supervisor 10 Gb uplinks to form a layer-2 Port channel between the two 6500 switches as i do not want to use want to keep the port idle additionally I need more bandwidth between the two switches for my server farm?
I have 2 cisco 6500 in a VSS configuration , All of my Lan access switches are Stack switches and every Stack is connected to the VSS in a Port-channel so basically this is a loop free environment with no blocked ports .As a best practice I left STP in the Background (mstp)which enhanced cisco features to STP should I configure on the Aggregator (6500-VSS) and on the Access switches ?
Because of my topology I dont see the need in configuring most features like Uplink Fast and Backbone Fast but I have configured Loop Guard in addition to UDLD on the 6500 Aggregation Switches (on the port-channels).On the access ports I have configured portfast , bpduguard and guard root (seems a little pointless to configure the two...)
1.should I Leave UDLD on and get rid of LoopGuard and configure Guard root instead ? since LoopGuard cannot be configured with Guard Root.
2.should I configure GuardRoot on access ports if I already have BpduGuard on them ?
3.Is there anything I need to configure on the physicall interface or is everything configured on the port-channel since STP reguards port- channel as a single interface ?
We are facing issue with mac address learnt from different port-channels, Connectivity is like 6500 as core running VSS and 4500 access switches are connected to Core and WLC is also connected to Core.WLC to 6500 PO 60 , 4500 to 6500 PO 32.
View 1 Replies View RelatedI need adding a vlan to the trunks bundled in port channel. I know how to add v lans to a port channel with Cisco IOS but with CAT OS.
I have 2 ports bundled to form ether channel in switch which is running CAT OS. There are already few v lans allowed in the trunk of each interface. now I need to add one more v lan.
For Example:-
v lan 135 needs to be added in addition to the existing v lans.
clear trunk1/2 1-112,115,117-134,136-4094
set trunk 1/2 on dot1q 113-114,116,135
and similarly on the 2nd interface
so if I add vlan135 to the trunk one after another will it cause any service disruption?
I has a issue about etherchannel beetwen 02 Catalyst 6500 switch, i need your comment about it. if you had any similar experience:
1.- On Catalyst Switch 6500-1: I configured interface port-channel 4 and associated it to G6/29 and G6/30 interface Port-channel4description IUU1_Gn1_HLIMSGSN01_Port_channel_6_29_6_30switchportswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 406,408switchport mode trunkswitchport nonegotiatelogging event link-statusload-interval 30mls qos vlan-basedmls qos trust dscp!
2.- On Catalyst Switch 6500-2: I configured interface port-channel 4 and associated it to G6/29 and G6/30
interface Port-channel4
description IUU2_Gn2_HLIMSGSN01_Port_channel_6_29_6_30
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 407,409
[code]....
and i see output "show interface Po4A" up up on switch-1, "show interface Po4B" up up on switch-2
5.- In the show running-config not appear configured Po4A and Po4B. it only show on outputs
6.- Po4A and Po4 was not configured on neither switches, my question is why appear Po4A and Po4B on switch-1 and switch-2 respectively? and why Po4 appear in down down.
7.- I solved this issue by shutdown and not shutdown to the interfaces on both routers, currently all is OK.
Configured Layer 3 portchannel from 6500VSS enabled switch to two different 6500 standalone switch. Configured first ip on VSS switch, second ip on standalone switch1 and third IP on standalone switch2. My question is
1. Will the portchannel be up?
2. If port channel is up, will I able to ping the connected IP's.
I have a 6500 switch and i recently removed a module (line card) from the switch. The problem is that the port configurations of the removed module still exhists in running configuration. I was not aware of the right procedure,[URL] however, i would like to know whether it resolves if i reboot the switch.
View 1 Replies View Relatedcurrent topology is build from 4 6500 switches connected in a ring topology. Using Port channel (2x 10Gbit) links to connect left side top and bottom 6500's (DC1), 10 G bit link to connect right side 6500's (DC2) In between a 1 G bit link is used to connect top 6500's (DC1-DC2) and the same for bottom 6500's (DC1-DC2).
Path costs are 5 and 6 so the T5/4 from bottom right is blocking. Bandwidth demands are increasing, so thinking about adding extra 1 G bit links to the existing ones and create ether channels. Path costs here are 4 and 5, so T5/4 from bottom right is still blocking, but when the bottom 2 G bit port-channel is loosing one 1 G bit link the path costs of both directions become equal. So I am worried that STP will not re converge and leave me with a congested 1 G bit link. I cannot test this setup in a lab, are there any options for STP to re-converge here?
I have a switch layer 6500 series connected to a firewall, the port configuration between them is layer 2, in another words I do not configure an IP address in the Cisco switch port to conected it in the firewall, but when a apply a policy on firewall it lose communication with others vlans, just the vlan that is connected between the switch and firewall works, attachment the design. I think that is necessary to configure the connection between the firewall and switch as layer 3 ( a port with IP address in the switch), but I would like to know why? The switch is configured with about 10 vlan and it is a inter vlan routing, a default route is configured in the switch where the gateway is the firewall.
View 5 Replies View RelatedI just aquired a DGS-1224T and can't figure out how to port mirror all ports. Any utility for download? Web interface is limited on port mirror. possibly an additional utility? Manual looks much different than web interface, makes me think they have a configuration utility but I can't find a download link.
View 5 Replies View RelatedOn a 3750 you can do a show platform port-asic stats drop command. Is there a corresponding command for 6500 chassis?
View 7 Replies View RelatedWe have a web server running Joomla.There is a plugin to the website which downloads an iCal file from the internet via a URL. The site gives an error when retrieving this file. I can pull the file down manually via a browser, or doing a wget from the command line. However, the plugin fails. [code]I'm sure there's a packet being dropped in here somewhere, but from which side? Why on earth this would work fine through a browser or wget, but not via the PHP code which executes this GET?
View 3 Replies View RelatedWe have a ME6524 running as a MPLS P router. We want to mirror a port to capture a specific traffic stream (to a probe). As the port is an MPLS LDP port will this work, will both the VACL and SPAN work with MPLS tagged packets, or does the mirror and VACL work after the labels have been removed..?
View 1 Replies View RelatedIs there any way to Mirror a CISCO C3750 Switch Port Taffic to a remote Host IP Address?I know Port Mirror (SPAN/RSPAN) can copy one Interface Packet to another Interface. But I am looking for a way to miror Switch Port Packets to a remote Host (having Public IP Address and running Wirehark). Is it possible?
View 9 Replies View RelatedI'm searching for a managed switch that allows me to not only mirror a port/ports, but also to still use the destination port for the mirrors as a link to the internet/the rest of the network. Aside from this, I still need the VLAN functionality of good switches, and ideally PoE provided, too.
I have seen the majority of the features of this in the NETGEAR GS108E (http:url...), but this doesn't provide PoE to the ports and also requires Windows to log into.Is this a feature of many switches? I can think of many snooping applications where it would be incredibly useful.
I cannot boot IOS, when i reload this switch it go to ROMMON. I try to uploand IOS but it still has problem. i think i may wrong some point during i did uploand.
This is problem
Switch#sh bootvar
BOOT variable = cat4500-entservicesk9-mz.150-2.SG3.bin,1;bootflash:cat4500-entservicesk9-mz.150-2.SG3.bin,1;bootflash:cat4500-entservicesk9-
[Code].....
My cisco 4948 switch is generating the below error,how do i troubleshoot this error.
*Mar 13 00:09:33.451: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 14 times)Packet received with invalid source MAC addre ss (00:00:00:00:00:00) on port Gi1/37 in vlan 1Gi1/37- to this port another 2950 switch is connected by trunk link.and to this switch end host is connected i.e.thin client
MAC Support: 16000
Backplane: 18Gbps
Forward: 28Gbps
VLAN's: 4000 (q-in-q support)
Jumbo Frame Supported
Supported 8000 static routing
!Supporting Stack!
Cisco 4948 supporting stackable? which product do you recommend to these criteria?
I am updating the iOS for a 4948 the bootflash is empty so all i can get into is the rommon. There is no option for x-modem. How can I put the iOS onto this device? [code]
View 2 Replies View RelatedWe had to transport one of our 4948 10 GE to another Data Centre and when we got it there and tried to power up its System Status LED was red and we cannot even get console to the device.
We can try to see if the switch is completely dead and needs replacing or is there something we can do to get it back up and running again?