Im wondering if the Adaptive Security Services Module has some of the same function as a ASA 5500.Can we configure a IPSec VPN tunnel, SSL VPN tunnel or IPS on a C6500 with ASA-SM or do we need a specific line card for those tasks?
View 1 RepliesI am trying to filter ARP answer arriving on a C6500 trunk port, for a specific vlan.Filtering conditions are:
- packet arrive from vlan ID x on the trunk (on only for this vlan ID)
- source MAC address = xx:xx:xx:xx:xx:xx
Thae aim is that the C6500 with never enter into its CAM table this MAC address.I looked at several methos like service policy or vlan filter, but no solution for the moment.
Im looking for MIB for monitoring 6500 line card from availability prespective;
View 1 Replies View RelatedI see differrent voltage in line card ws-6704. Iam afraid of something went wrong with my 6500 switch. two 6500 switch is redundant.
View 3 Replies View Related[code]...
Primary clock is CSC 1 Board State is Waiting to retry download after persistent failures (RTRY WAIT) Insertion time: 00:00:16 (13:54:07 ago)
We bought a Cisco line card WS-X4648-RJ45-E for Cisco 4507 R-E. Later on I found that this module is not working with the chassis becuase supervisor engine 4 we are using. Supervisor Engine 6 is required for WS-X4648-RJ45-E. Now I want to go for WS-X4548-RJ45. Is it possible to return the line card? Is there any possible way to exchange?
View 6 Replies View RelatedI urgently want to replace a faulty line card WS-X6748-SFP with a new one. The switch concern is a 5609-V-E operating in Virtual Switching System mode.How long do you suggest the down time will be?
View 1 Replies View RelatedCisco Catalyst 6509 Chassis.We have moved a line card from slot 8 to slot 6, but config remains for the line card in slot 8 and nothing is seen in slot 6.
We are running on IOS Verison 12.2 (33SXH2A) i.e. VSS.Blade model number is WS-X6748.
when replacing a line card on a 6500, i gather there is no config stored on the card, its all held on the sup, so when i put in another card the config will be the same?
View 2 Replies View RelatedI am trying to configure traffic policing on a 7609 with ES20 line card - however it doesn't appear to be working. The customer is randomly getting DoS attacked, and the policy doesn't appear to be dropping any exceed/violate traffic.This is an egress policy on a sub-interface.
View 5 Replies View RelatedI have 4506 chassis whose sup engine is WS-X45-SUP6L-E and recently brought line card WS-X4648-RJ45E. When i inserted very same line card on chassis is not support.
View 3 Replies View Relateddirect me to a document detailing the order that line cards are supposed to boot in a 6500? I'm noticing random boot sequences in some of my chassis,?Note: We currently run Sup720 3CXL for the most part.
View 6 Replies View RelatedThe WS-X68xx series line card has a fabric of 40Gbps and a 16 Port 10GE has a 4:1 oversubscription rate. The WS-X6908-10G has a fabric speed of 80Gbps and has a 1:1 oversubscription rate.
If I mixed the 68xx and 69xx series line card, do I get 80Gbps for the 6900x and 40gbps for the 68xx line card? Or would the 69xx series line card be downgraded to 40Gbps?
From my understanding, the 68xx series has a DFC card and thus the fabric speed operates independently.
We currently have a WS-C6506 chassis with a line-card WS-X6408A-GBIC. Currently we need to replace the chassis by a Ws-6504-E and also the line-card. My question is: What must buy line-card and meets the same specifications of WS-X6408A-GBIC?.
View 4 Replies View RelatedWe are planning to replace a few line cards in the existing 6509-E chassis. The sup installed is a VS-S720-10G-3C but the line cards are legacy. As a result we are not able to enable the VSS functionality. We are looking to replace the existing line cards with the following:
1. 1 x WS-X6716-10G-3C
2. 1 x WS-X6724-SFP
3. 4 x WS-X6724-GE-TX
What are the requirements in terms of IOS and Roman.
The current IOS is: Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2(33)SXI2a, RELEASE SOFTWARE (fc2)
And the ROM Version is: ROM: System Bootstrap, Version 12.2(17r)SX7, RELEASE SOFTWARE (fc1)
Do I need an upgrade?
Is it possible to use a 10GE interface on a sup720 and an interface from a 671610GE line card and create a port channel. I haven't found specific documentation on CCO stating you can. I have found the QOS queuing is differnet between the sup and line card.
View 1 Replies View RelatedCisco announced EOL for ws-x6148A-GE-45AF line card and proposed WS-X6148E-GE-45AT. However this card seems not to be supported by the SUP2T-10G supervisor. Which alternative card should I take for this EOL line card, or can I use the proposed line card (use extra daughter card DFC4)?
I'm looking for an alternative line card for the 650x-E chassis with Supervisor 2T iso 6148-GE-45AF
On a number of 6500 chassis it appears that linecard 3 did exist at somepoint, but was removed.Problem is that when issuing the 'show int desc' or 'show ip int brie' the ports for the still appear, and indeed same with 'show run' and 'show conf'.
View 1 Replies View RelatedI need to pull a WS-X4712-SFP+E line card from an online 4507 chassis, can this be done, or does it need to be offline?
View 2 Replies View RelatedI've 4500 Core Switch with 4507R chassis, Sup V-10GE(WS-X4516-10GE) along with 2 WS-X4306-GB line Cards, but now I require a line card for 14 more fiber up links and I cannot go with 3 of 4306 as there are only 2 slots left. I've checked and found that E series line cards does not work with Sup V Engine.
As per the link below, I found that "WS-X4448-GB-SFP" is compatible..
[ URL]
I am writing with regard to a high memory utilization that we have on a pair of line card WS-X6748-GE-TX and WS-X6724-SFP for a VSS 6500. I am enclosing a little part of the "show tech"of this VSS 6500 where is possible to see the high memory utilization of the line cards 1/1, 1/2, 2/1, and 2/2, in despite of having some ports in state connected. In addition of this, the IOS installed on VSS 6500 is s72033-ipservicesk9_wan-vz.122-33.SXI6.bin for checking if there are some bugs affecting the behaviour of the Switch for this case.
System Resources
PFC operating mode: PFC3C
Supervisor redundancy mode: administratively sso, operationally sso
Switching resources: Sw/Mod Part number Series CEF mode
1/1 WS-X6748-GE-TX CEF720 CEF
1/2 WS-X6724-SFP CEF720 CEF
[code]....
Does Nexus 7K support Multiple VDCs sharing ports on a single line card. One of our cisco parnter engineers stated that cisco doenst recommend using same line card for multiple VDCs.The second VDC (Non-Default VDC) will be used four our Outside, and DMZ Segment, and to phyiscally segregate our Firewall from our Internal/Inside Core Switch without using a physical DMZ Switch.I know Cisco used the Nexus in this way in their PCI DSS 2.0 Compliance Document. Module is N7K-M148GT-11L
Mod Ports Module-Type Model Status
--- ----- -------------------------------- ------------------ ------------
1 48 10/100/1000 Mbps Ethernet XL Mod N7K-M148GT-11L
Mod Ports Module-Type Model Status
--- ----- -------------------------------- ------------------ ------------
1 48 10/100/1000 Mbps Ethernet XL Mod N7K-M148GT-11L
Cisco 2500 series access servers show line usage with the "show line" command:
View 2 Replies View RelatedI use a router RV082 with load balancing. My problem is when I try to access a specific site, I get the error message that my IP address changes and I can not use 2 ip address. I want to specify an ip range to always use the same WAN port.
View 2 Replies View RelatedASA 5520 running 8.0.4
ASDM v.6.1
Need assistance understanding how in ASDM/Configuration/Site-to-Site VPN/Connection Profiles/ "Any Entry" I can specify that I only want to offer an IKE Proposal of pre-share-aes-256-sha?
The IKE Proposal field has a number of possible options including: pre-share-aes-256-md5, pre-share-3des-md5, pre-share-aes-256-sha, pre-share-aes-192-sha, pre-share-3des-md5, pre-share-aes-sha and pre-share-3des-sha.
I am able to pick a specific IPSec Proposal w/o issue but when I attempt to do the same for the IKE Proposal, and click OK the choice does not "stick" but rather returns to the entire list as defined above.
Is it possible to enable an absolute value rate limit using QOS on a HP ProCurve 5406 switch for a particular IP range on a specific port? Is there a way to configure our HP 5406 with an absolute rate limit on "WAN" port for that server's IP range? I would like to limit it to only being capable of sending 1Mbps worth of traffic over the head end at once.Everything in the documentation points towards priority queues, which as far as I can tell, isn't really what I want.Baring accomplishing this goal using rate limiting is there a better way to prevent our services from accidentally saturating this connection?i thimkong about somthing like that:
class ipv4 rate-limit-port-A1
match ip 10.136.0.0/16 any
exit
policy qos port-a1-ratelimit
class servers-to-be-slowed action rate-limit kbps 1000
exit
interface A1 service-policy port-a1-ratelimit inI'm not sure about this.
I have a Router 2801 with the run conf :
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.63
ip dhcp excluded-address 192.168.1.192 192.168.1.254
!
[code]....
I want to assign a specific IP to a specifig host by MAC .. for example i want the ip 192.168.1.10 to be assign to the host "client1" by mac.I've been creating a new dhcp pool static:
!
ip dhcp pool static
host 192.168.1.10 255.255.255.0
hardware-address xxxx.xxxx.xxxx
client-name client1
!
but the "client1" is still taking other ip.
I have lets say a /24 directly connected via a vlan on a C6500 in the network.I'm trying to migrate some servers/devices away from it , however I need to move parts of it away bit by bit ( For example a /32 or a /30 that make up the /24 )Ive tried a direct ip route x.x.x.x 255.255.255.255 y.y.y.y and even a ip route x.x.x.x 255.255.255.255 y.y.y.y 1
Yet it still prefers the directly connected range ( as I pretty much expected. )
Is there any way I get it to prefer a static route over a directly connected?
We are wanting to use local database users to authenticate our SSH connections to our 6500 cores.
We have added the usernames and password into the 6500 using
username anameduser password astrongpassword or username anameduser secret astrongpassword
We where expecting the commands to be the same as other iOS devices example C3750 we would add.
Line vty 0 4 login local
And this would allow us to use the local user database to authenticate our ssh sessions.
The login local commands are not availbe on the 6500s and we have not found any documentation on how to impliment a local database for this purpose except in a CatOS 6500.
I've been running into an issue with Cisco CSM for a number of years, but always found a way around it. Im attempting to get to the bottom of this to find out once and for all, if this is infact a limitation of the device, or a config issue/work around is possible.
Here is my situation. My CSM's are configured in bridging mode. Traffic works great, traffic bridges across vlans correctly. Everything works and have many instances of smilar configurations running in production. Every once and a while, a client requests that a "real" server (ie LWCMW-021)
cannot ping its VIP address (10.95.88.68). I am assuming this is related to the NAT Server, but not 100% sure. Clients have requested this functionality for some type of application based purpose, but Im unaware if CSM in bridging mode can provide this or not.
real LWCMW-021
address 10.95.88.59
inservice
!
real LWCMW-022
[Code]....
It seem that ACE10 not support 12.2(33)SXJ1 IOS running on C6500. The box cannot detect the ACE module when power up. Currently the ACE10 running on system A2(30).
My challenge i have the ASA SM that compulsary to run on 12.2 (33) SXJ1 version. How to let these 2 module can running on the same C6500 box?
I have a wireless system and I am setting up the player but cannot connect because of the gateway ping problem.I called my server and was told that my average ping rate is 1292 and have no hope of getting connected.
View 7 Replies View RelatedI'm going to start the evaluation of implementing the virtualization of our campus LAN using MPLS.We'll get many inter-VLAN routing domains per VRF on the same LAN infrastructure.The LAN infrastructure is based on C6500 implementing VSS.Do you have experience with this kind of setup?Any known/faced issue that might prevent the setup of MPLS on VSS enabled C6500?
View 4 Replies View Related