I'm planning to implement a VSS system with two 6509 and VS-S720-10G supervisor engines. In technical specifications is said that this card can support up to 1024 VRFs. Is this limit the same when working in VSS?
View 6 RepliesIf two (one 6509A 9/26 with server A located in A end, 6509B with serverB located in B End) which is connected via a 1G link. If there is serverA send 700M file to server B via a 1G link. If I configured below command to 6509A 9/26, can I limit the bandwidth of server on bothincoming and outgoing to 500M?
class-map match-all FROM-SERVERmatch access-group name FROM-SERVER!policy-map FROM-SERVERclass FROM-SERVERpolice 500000000 conform-action transmit exceed-action drop!interface GigabitEthernet9/26service-policy in FROM-SERVER
How is it i can implement the command 'ip multicast rate-limit out group-list <access-list>' but i get the error "ip multicast rate-limit" command is not supported on 6509?
Is it an IOS limitation or a limitation of the switch series and subsequently can't be used at all?
How (and is) it possible to rate limit pps on an interface (physical/logical), on a 6509-E?The porpuse is to protect from attacks which lead to very high pps, bypassing traffic rate-limits, and effecting the device's performance
View 2 Replies View RelatedWe run a workers camp here and we currently have around 2500-3000 people using our 100MB internet pipe. We are upgrading the pipe to 200MB soon but I still would like to limit how much bandwidth everyone is using.
We allow streaming media such as Netflix, youtube, apple TV and of course .So it gets full pretty fast. We have QOS implemented although I wasn't here when it was done so I don't know a lot about it. I would like to limit IPs to a certain amount of bandwidth. [code]
How much is the limit for the creation of PortChanel in a Core Switch 6509 and 6513?Is there a limitation byu hardware?
View 7 Replies View Related I am pretty far out of my comfort zone here but these VS-S720-10G-3C cards were purchased to upgrade our 7609/7606 routers, the spec sheet says they are compatable but I can't find an IOS that "likes" them. I had no problem finding an IOS and using the vss cards in our 6506...
[URL]
we purchase only Cisco Supervisor Engine VS-S720-10G and use it in our old C6509-E chassis.Now the supervisor engine was dead,(means not working and no LED's are ON). How can i claim the RMA from cisco?
We purchase from one of our partner. We send it to them,they are not able to find the Serial number from the Supervisor Engine module (Because lot of serial numbers are on the board). Also the customer through the catoon.
Now how we can know which is exact serial number of sup? How to get RMA from the Cisco on which serial number?
We are upgrading two standalone 6509E chassis to a VSS system with new VS-S720-10G-3C cards. The 6509's have WS-X6748-GE-TX card with DFC3B daughter cards (see below). The compatablity matrix (see below) states that 67xx cards are supported but it goes on to state DFC3C or DFC3CXL cards are needed. So does this mean that the existing WS-X6748-GE-TX cards have to be upgraded or will they be supported?
Core #1Mod Ports Card Type Model Serial No.--- ----- -------------------------------------- ------------------ ----------- 1 48 CEF720 48 port 1000mb SFP WS-X6748-SFP SAL 2 4 CEF720 4 port 10-Gigabit Ethernet WS-X6704-10GE SAD 5 2 Supervisor Engine 720 (Active) WS-SUP720-3B SAL 6 2 Supervisor Engine 720 (Hot) WS-SUP720-3B SAL 7 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX SAL 8 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX SAL
[code]....
I got a new VS-S720-10G it had 122-33.SXH8b on there. I had to downgrade it to 12.2.33.SXI1 to match our other switches. I installed the file I use in all the other switches, s72033-adventerprisek9_wan-mz.122-33.SXI1.bin but the Sup is now is only booting up only to ROMMON mode.
Initializing ATA monitor library...
Self extracting the image... [OK]
Self decompressing the image : #################################################
################################################################################
################################################################ [OK]
%SYSTEM-1-INITFAIL: Network boot is not supported.
System Bootstrap, Version 8.5(4)
Copyright (c) 1994-2009 by cisco Systems, Inc.
Cat6k-Sup720/SP processor with 1048576 Kbytes of main memory
[code]....
How do I get the older version of IOS to load up?
I am about to replace the supervisor engine in our pair of distribution switches in our data center. We currently have a FWSM module installed in each of my distribution switches running 3.1(20) code. The old sup720 are running 8.6(4) and the mfsc are running 12.2(17d)SXB11a. I am wondering about the compatibility of running the FWSM with the same code after installing the new VS-S720 modules. I do not plan on configuring virtual switch yet and did plan on upgrading the FWSM to 4 code train but just not immediately. Will I be able to run my FWSM using the current 3.1(20) code after I install my new VS-S720 running in native mode?
If I have to upgrade the FWSM then I need to know if I have to upgrade the module in each distribution switch at the same time? Furthermore I do not believe that the FWSM 4 code is supported in hybrid mode, which means that I will have to convert to native before upgrading to FWSM 4 before I install the VS-S720 in one of my distribution switches. Currently the FWSM modules are in active/standby mode in different chassis.
I had planned to install the VS-S720 module in one of my distribution switch and do the other installation a week later. I would rather not have to convert to native and upgrade the FWSM modules in both distribution switches during the first switch upgrade.
cnDS02> (enable) sh mod
Mod Slot Ports Module-Type Model Sub Status
--- ---- ----- ------------------------- ------------------- --- --------
1 1 16 1000BaseX Ethernet WS-X6516A-GBIC no ok
2 .... Please refer to Detail Note. cnDS02> (enable) sh mod
[code]....
We have 7 interfaces with rj45 connections.. all around 100Mbit per connection .. most likely in the future we will need a couple more interfaces.. i was thinking it would be better to take a WS-X6516-GE-TX card then a FE card as for example a WS-X6148-RJ-45 .Now we want to implement a 7606 with a SUP720-3BXL with 1GB dram for the RP(MSFC3)... so enough memory to support the 2x a FULL BGP table to two peers.
Q : Does the SUP720-3BXL work well with two peers sending the FULL BGP table ?
Q : And does that also work with a WS-X6516-GE-TX connected to the two peers sending the FULL BGP table ? .. or is it better to take a 6724 linecard with a DFC3-BXL so that the 6724 will lookup routes locally instead a 6516 will have the S720- perform the routing ? I know that adding the DFC's increases the bandwidth of the chassis significantly (40gbps per slot most 6700 linecards ,and 20gbps for the 6724 which is 1:2 oversubscribed )
Q: Or is it better to connect the two peers to the two SFP interfaces on the SUP720 , and connect the small routers and customer networks to the 6516 linecard?
I need those two stencils.I have checked here [URL] but:
- the one for the C6509-E is not there
- the one for the supervisor does not work properly (misaligned anchor points).
I'm trying to configure a egress netflow in a 6500 (VSS) with VS-S720-10G supervisor. I foud some old posts and understood that netflow wasn't supported on 6500 but i found a new document and it seems that netflow is supported in Supervisor Engine 2T:[URL] Does the netflow still not supported in VS-S720-10G? It's weird because the command is supported:
#sh run int vlan 4
Building configuration...
Current configuration : 353 bytes
!
interface Vlan4
ip address X.X.X.X 255.255.0.0
[cod]....
What key sequence to go into ROMMON mode from the console port for VSS system with 2 VS-S720-10G?
View 3 Replies View RelatedI have catalyst 6500s with two VS-S720-10Gs, one is in Active and one is in Hot state. Both Sup cards have two 10G uplink ports. How does the traffic forwarding works in this case on the uplink ports? Do these uplink ports actively forward traffic or it is only the uplinks ports on Active that forward traffic? I see CDP neighbors on both Active and Hot SUPs uplinks ports - it indicates that packets are flowing on both cards.
I want all uplink ports on both SUPs to actively forward traffic. Does it work? What is the config for this?
I am planning to buy a router for my hotel and I would like to know is it possible to limit the bandwidth limit to the guests? And the admin computer can utilize the maximum speed? it it possible to create a login page paper when some one enters my wifi connection?
View 7 Replies View Relatedneed to know the OSPF best design. I have a customer currently running their OSPF only in two area. Area 0 is provider reside and area 1 reside 700 hundred over of router including HQ router and remote branch router connecting to metro-E 10Mbps networks. Is this design have any weakness? Area 1 about 800 hundred router reside in, the HQ model is cisco router 7200 and remote end is cisco router 1841.Let's say they want a solution, for 3G remote router connect back to the HQ using Lease line with a fixed IP. Using DMVPN and OSPF communicating back to HQ. What should we aware when designing and implementing for the OSPF best practice. They have 700 hundred over remote branch need to terminate back to their HQ. I read cisco recommend an area should not be more than 50 router and per-area no more than 28 area.
View 4 Replies View RelatedI currently have a couple of 6509 chassis (router/switches) with the following hardware blades:
x3 48 ports
x1 NAM
x2 Sup720
Running 12.2(18)SXF3
I am keeping the four Sup720 modules and have purchased new versions of the others blades including two new 6509-E chassis?Can I take my stand-by Sup720 out of the production machine and insert it into the new chassis?
I currently have a couple of 6509 chassis (router/switches) with the following hardware blades:
x3 48 ports
x1 NAM
x2 Sup720
Running 12.2(18)SXF3.I am keeping the four Sup720 modules and have purchased new versions of the others blades including two new 6509-E chassis. Can I take my stand-by Sup720 out of the production machine and insert it into the new chassis?
I am using ASA 5505 cisco firewall as a transparent firewall. I have assigned ethernet 0/0 as outside interface and ethernet0/1-7 as inside interface. There are 3 departments in office. So, i connected ethernet 0/1 to Dept A, ethernet 0/2 to Dept B and ethernet 0/3 to Dept C. Now, I want to limit bandwidth to each department, e.g, 1 Mbps download/upload to Dept A, 512 kbps download/upload to Dept B and 512 kbps download/upload to Dept C. So, how can i do this in ASA 5505.?
View 1 Replies View Relatedwhat would be the best method to limit some users/workstations from accesing the internet on a vlan that has access to the internet?
I was thinking of just creating a whole new VLAN for those few workstations that doesnt access the internet or using ACLs on the ASA.
I need to limit to some AD groups, authentication with ACS 5.3.For example, i need that only users os somedomain.com/users/test1 are authenticatet via ACS --> ADS.
View 1 Replies View RelatedI have a 3845 Router with three connected interfaces, one to my WAN, one to my LAN and another to my wifi zone. I want to limit the amount of WAN bandwidth the WIFI zone can take to say a max of one third and not restrict WAN bandwidth from the LAN at all.
View 7 Replies View RelatedI have cisco 7600 core router in ISP , i want to put the bandwidth limit on it for outgoing traffic (for internet) on a subnet because i am using Bluecoat and i want to test my bluecoat.On this subnet i have no limit for bluecoat but after the bluecoat i want to limit it. On 7600 cisco router i have not rate limit command so how it can be possible for a perticular subnet ?
View 1 Replies View RelatedI have just set up a 881W appliance for a satellite office. At this time, we don't need a site to site vpn. However, I have EZVpn configured on it and working great so that I can connect from our main office for admin purposes. How can I setup up a firewall rule/policy in order for only our main office IP to connect to Ezvpn? I don't want to allow access to the VPN from any other IP other than our IP at our main office.
View 2 Replies View RelatedWhen we configure a SG 300-10 switch in layer 3 mode to do so some static routing, I would like to know the ARP table limit (association between IP address and MAC address) ? The documention talks about MAC (association between MAC and port) table limit, routing entries limit ... what about ARP limit ?
View 1 Replies View RelatedWhat would be the equivalent of the below static translation below which limit the connection to 100 and embroynic to 50 in ASA 8.3 above.
View 1 Replies View RelatedI have two vlan interfaces, how to limit bandwidth on them ?I need than speed on each will be direrent.
View 1 Replies View Relatedi want to understand ASA 5520 ACL limitation as max ACEs . in FWSM case is following link "rule limits" section. [URL] but in ASA case, I cant find this information. where is this limitation in CCO?
View 9 Replies View RelatedI am trying to replace a 1751 IPSec VPN that connects a single LAN behind the 1751 to ~45 remote networks behind a single peer. There are a small number of workstations (~50) and low throughput (< 1MBps) across this VPN, the biggest trouble is the number of remote networks needed.
I have tried to connect an ASA5505 Security Plus in place of the 1751 and am able to get Phase 1 and Phase 2 up, except I don't get all of my ipsec sa's and can only pass traffic to some of the remote networks. Does the 25 IPSec limit apply to multiple sa's one one peer, I've only ever seen it spoken of as a 25 peer limit?
Few days ago in my wireless infrastrucer i deploy Cisco ACS 5.0 with Active directory integration. My wireless users are login through web authentication process. The authentication process is passed by AD & its working fine. But i want to do a work on my ACS 5.0 that a user cannot login simultaneously multiple device at a time.
View 21 Replies View RelatedVLAN ===> FE 0/1 {With subinterfaces - ALL INSIDE LAN INTERFACES} ==> ROUTER ===> BVI 0/1 {WAN Interface - OUTSIDE}
i am doing NAT for my clients in LAN to WAN - Static NAT i want one of my client who is excessing some service with his Public IP to get a specific amount of bandwidth ... as right now he is hogging all the bandwidth .i have 1841 router.