I have a 10Mbps connection link which I will like to reduce to 5Mbps on a 6509 switch as indicated in the config below. [code] After applying the service policy on the vlan interface, i got this "match vlan is not supported for this interface". I actually tried the rate limit command but I cant see the effect using the speedtest.
View 2 RepliesI have 1x Cisco 6509 with Sup2 and MSFC2 and it is running on IOS (c6k222-jk9sv-mz.122-17d.SXB11). I have following policy map :
Policy Map VOIP
Class IP PHONE
priority percent 75
and the following command on each interface: service-policy output VOIP those configuration are working fine on SUP2 with MSFC2 but last week I tried to upgrade the SUP2 to SUP32 on the switch and upgrade the IOS to the latest version (s3223-adventerprisek9-mz.122-33.SXJ4) but when I try to put service-policy output VOIP on each physical interface I am getting the following error:
"Priority command is not supported in output direction for this interface" and when I try to add service-policy output VOIP on a V LAN interface I am getting following error:
MQC features are not supported in output direction for this interface. Will I need to change something after upgrading to SUP32..
I have used the following basic configuration to do rate limiting on a vlan interface on a 6509:
access-list 100 permit ip any any
class-map match-all ratelimit
match access-group 100
policy-map ratelimit-10Mb
class ratelimit
police 10000000 428750 conform-action transmit exceed-action drop
[code]....
How do I combine the two correctly to give me a vlan port rate limited at 10Mb up and down, but still setting aside (dynamically) 2Mb for voice?
i have been facing strange issue on FWSM (6509 switch). we have created a vlan inteface for server farm on fwsm and its stop responding automatically and we need to give shut/ no shut command under that interface to back into normal .
View 11 Replies View RelatedI am doing some per-deployment testing with a ASA5585X and noticed that when I feed it a stream of SYN packets on the outside interface the measured traffic rate on the inside interface going out is about 10x the rate of the outside interface going in.
laptop --- ASA --- PC
I send 6k TCP SYN pkt at interface rate from the laptop targeted at PC. No packets are dropped by Ac Ls or policies and can be sniffed at the PC.
Show interface commands show:
sh int inside:
... ...
Traffic Statistics for "inside":
...
1 minute input rate 23 pkt/sec, 1303 bytes/sec
1 minute output rate 4454 pkt/sec, 820757 bytes/sec
sh int outside:
... ...
Traffic Statistics for "outside":
...
1 minute input rate 885 pkt/sec, 70847 bytes/sec
1 minute output rate 7 pkt/sec, 425 bytes/sec
I would expect that if 885 pkt/sec enter the firewall on the outside interface the same amount or less would exit it on the inside...? Why this is not the case? The packet rate is about 5x and the data rate is about 10x greater.
I have a 6509 and a 6506- same IOS version and flavor, same hardware, etc. One supports rate limiting on the VLAN interfaces, the 6509 says "not supported due to hardware". What is the difference here? Im very confused on this since I was under the impression the chassis were the same- just in size.
View 1 Replies View RelatedWe are trying to migrate from 1g to 10G, couldn't find any module on 6509-E which supports 10G on SFP+ ...I can see X2 and Xenpacks .. but not SFP + .what exactly this Xenpack means ?
View 3 Replies View RelatedWe have 6509 VSS with FWSM Module and we have created two context on it, one is INTERNALL CONTEXT othe is EXTERNALL Context? We have spanned various VLANS in switches and FWSM context level. All VLAN Gateways are configured in context level.
Activity description : We had planned migration of these devices into a new Datacenter, it was a planned activity. During migration of devices from one Dc to a new DC we broke the VSS and kept the primary running and removed the secondary switch and migrated this secondary to new DC and powered this device ON in the new DC and checked all the config was very much fine but this device was OFF network as secondary was brought to new DC just to limit the downtime during the primary switch movement.
During the activity ( Primary switch movement )We powered off the Primary switch and mean time before shifting into new Data center We had brought up secondary switch which was already existing in the DC was put live in the network and it was working fine without any issues.
Later we had moved Primary into new data center and tried to put into VSS with the secondary , during this period the secondary device into went into RECOVERY MODE and primary device was not responding and devices went off network and immediatly we removed the VSL link and brought up primary into production network without secondary online in the network ( Without VSS just stand alone switch ) network started working, but bringing up the primary we found that some of the VLANS in the FWSM was deleted and some VLAN had misconfiguration ( example : say original VLAN ip 10.200.112.1 has become 10.300.13.1 ) also some of the access list as well as SVI was deleted making configuration mismatch.
Wanted to know while syncronization b/n primary and secondary switch in VSS if we pull out VSL link would create this type of issues.
Does the FWSM for a 6506/6509 is supported in a VSS environment?Also, does the FWSM work with the 2T supervisor module?
View 1 Replies View RelatedI have a heck of a time finding this kind of information on the cisco site...Is the WS-SUP720-BASE line card a fully supported module in the 6509-E chassis?
View 4 Replies View RelatedI recently ran an upgrade on my 6509-E's and when the first switch came back up, 3 of the 10/100 switches that were in the chassis did not power on. After further investigation, these models are not supported by this latest IOS version. The module # is : WS-X6248-RJ-45
We have one WS-X6348-RJ-45 and since it was a few weeks ago I did this I can't remember for sure but I believe this one came up.
Where can I found the information regarding this being unsupported but I know it is out there and any page that showed me that this was unsupported with the latest stable IOS of 12.(33).
In addition to this question, I have approval to purchase some newer gigabit switches that will be supported by this new IOS version and hopefully at least the next few over the next few years. Which specific gig models are currently and hopefully should be supported for the next few years? I don't need PoE or anything spectacular, just regular switches that are attached to either servers or virtual hosts. I've been looking at the lists of what is out there and it seems like there are hundreds of different models and it is becoming difficult to determine what is what.
Can a 2504 wlc use a vlan ids of 190X? I have found that it supports 512 vlans but I have not found any restrictions in the id used.Vlan id 190X is distributed by the isp (they have the ASAs in their central site) so if it is not supported I must prepare a vlan transfer between switches.
View 4 Replies View RelatedService policy output command is not supporting on Vlan interface of Cisco 2900 Router.I am having one HWic 4ESW Card and configured VLAN interface. But Service policy output command is not supporting.Same config is supporting in the Cisco 2800 Router.
View 13 Replies View Relatedi'm going mad on following problem. I'm trying to get 2 networks seeing each other while one of the network is a non VLAN network and the other one is a VLAN network.They should use the same interface so i added VLAN e0/0.122 to the interface e0/0.Send a ping from my asa to both gw-IP's made me happy at first. In second in figured out that i cannot reach any client in the other network. For testing purpose i created an permit acl to any/any for both networks, but the packets still get dropped by the default implicit rule. (deny any/anyMaybe i'm to stupid for this
View 10 Replies View RelatedI have a Cisco 1921 Router, a Cisco Catalyst 2960 and a Cisco Catalyst 2970 and I want the router to be able to assign ip-addresses by what VLAN a device is active on.
VLAN1: 10.0.0.0/24
VLAN2: 10.0.1.0/24
The router is connected to the Catalyst 2960 and there on to the Catalyst 2970 so the VLAN1 and VLAN2 is active on the to switches and the Router.is it possible?
I recently upgraded my 5520 to 9.0.1 IOS. Today I tried to apply a capture to my inside interface referencing a simple ACL and I get this error.
ERROR: Capture doesn't support access-list <capin> containing mixed policies
I also created a capture for the outside interface with a similar ACL and it worked just fine. I can't seem to find anything on the web that gives me a clue to resolving the error above.
Used to access the FTP server using "My computer" as some reason we cannot use the IE explorer to direct access...However, under the Windows 8 enviornment, it just prompt out "No Such Interface Supported" and cannot direct open the file... but only can copy/copy to folder etc...
View 1 Replies View RelatedI was searching a lot , but I couldn't find any good example, how to configure DHCP server for our wireless clients on Cisco Autonomous AP. I'm looking for example how to configure Dot 11 radios and BVI interfaces.
I have no problem to configure DHCP server on BVI 1 and VLAN 1 ( native VLAN ) interfaces, but there is a problem with other BVI's and VLANs. Maybe this feature isn't supported? Maybe DHCP server feature is supported to work just with default BVI and native VLAN?
my office is looking in ordering a HWIC-1FE to supply our cisco 1841 router with a second ISP connection. i wanted to find out if this card support load balancing and fail over? not sure if fail over is the right terminology so ill explain, i need it so that if one ISP connection goes down (as it does often) it fails over to the second ISP.
View 3 Replies View Related We acquired recentlty a new Cisco 6509 with Sup-2T supervisor card
My question is the following : we have a management subnet on a Copper-based switch; we manage all equipments through this network. I planned to configure the management interface on the 6509 to connect this switch & monitor the VSS through it However, since it is a CMP interface, most of the actions (SNMP, IOS upgrade.. won't be possible through this link) Moreover, I don't think LMS would be able to get the configuration through it (except by configuring a script running "attach" command & show run
Is there something I miss or must I add another interface of the Catalyst to this network (the problem being that I have no copper line card)
I have a 6509 with SUP2 w/msfc2 at home, I am currently have dsl for internet with static IP addresses. Due to AT&T not wanting to support faster speeds in my area, I have to look at another option. All of these will be dynamic IP addresses, cable, uverse, etc.
I need to be able to enable dhcp on the wan interface so I can connect directly into one of the gig ports (either on SUP2 or 6316) or on a 10/100 port on a 6348.
I have the following image installed s222-adventerprisek9_wan-mz.122-18.SXF13.bin, according to Cisco's feature tool, it is supported.
I have tried "ip address dhcp" on the interfaces but they will only accept "ip address x.x.x.x", I looked at "ip dhcp" as well and only get the option for "relay".
I would hate to have to put something else in the mix to handle the dhcp portion. I may be keeping the adsl for my mail server traffic and backup in case of an outage on the new provider. So I need to be able to track if a link is up.
Currently we do not have multicat routing enabled on either of our 2x Sup720-10G 6509 Switches. We have no intention of doing so either. I am looking for clarification on how mutlicasting operates within a Vlan.
IOS: s72033-ipservicesk9_wan-mz.122-33.SXH2a.bin
Our Vlan has IGMP snooping enabled. Here is the output.
6509Switch#sh ip igmp inter vlan 25
Vlan25 is up, line protocol is up
Internet address is 10.1.1.254/24
IGMP is disabled on interface
we do not want to disable IGMP due to this one concern that I can't find documented. If we disable IGMP snooping on the vlan, what happens to multicast packets with a TTL > 1. Do they get flooded to the entire switch and all Vlans? Or does it stay within the Vlan?
Are there any solution to connect VLAN 1002 configured in non-cisco switch to connect to Catalyst 6509?
View 2 Replies View RelatedWe backup the running config on the 6509 does it also backup the vlan.dat as well?I tried command dir/all and just dir but did not see the vlan.dat listed
View 6 Replies View RelatedI have a Cisco 6509 connected (gig3/17) to a Cisco 3560 G switch (Gig 0/28). The 3560 switch Gig 0/26)is connected to a distribution switch on another network. The ip address on my 6500 is 10.120.11.244 255.255.252.0 and the ip address on my 3560 is 10.120.11.211. The ip address given to me by the other network is 10.162.20.10 255.255.255.252. How do I configure the new vlan in this situation and the ip address given to me.
View 4 Replies View RelatedDisable wrr-queue cos-map on 6509 interface?.I have the following config on one of the interfaces that i would like to remove:
[code]...
I am trying to determine a problem with flapping interface on a router not showing up in log buffer if Cisco IOS. I've included the config on the switch that pertains to the logging and can't seem to figure what is going on. The SNMP trap is being sent to our Central Management trap server and that is reporting the interface flapping but the flap doesn't show up in the log messages.
hstir1#sh int desc | inc 8/33
Gi8/33 up up
hstir1#sh int desc | inc 8/33
Gi8/33 down down
[code].....
I have just started to discover the power of EEM and am already monitoring config changes on our switches with EEM.I would like to be notified of any interface going up and possibly down. on our 6509's and 3750's This is just to be aware of anyone patching anything in.
View 1 Replies View RelatedI was wondering if an interface numbering scheme is available for the 6509-E switch equipped with SUP-2T and includes 16Port X 10GE DFC4, 48 x 1GE SFP and RJ 45 line cards. Would like to understand:
How the slots are addressed
Interface Addressing
On board SUP-2T 10G and 1G port addressing
After a abrupt power cylce of 6509 switch, vlan configuration got missing. Switch has not crashed.
View 4 Replies View RelatedI need to create a DMZ Vlan. Core switch is a 6509. FW is an ASA5520. Need to create a VLAN for DMZ purposes for outside facing servers. NAT is used on ASA.
View 7 Replies View Relatedwe have an heterogeneous network with Cisco devices (6509-E, 3750G and 3560) and Alcatel 6850 devices. We have to enable a PTP Wifi line as a backup for the fiber line between two buildings. For this purpose, we have connected a wifi device to GigabitEthernet 0/47 of SWIHGJ1 and configured it as: [code]
View 2 Replies View RelatedWe have a pair Cisco 6509 switch in which 2 * 48 Port 1G line cards and 1 * 16 Port 10G line Card, FWSM and Sup 720 are installed.We have Cisco UCS and HP Blade servers.Cisco UCS servers are connected to Cisco 6509 switch using Fabric Interconnect, and HP Servers are directly connected to core switches.Recently the team made many changes in the network. Upgraded the IOS in Cisco 6509 switch, Configured Port profiling , MAC Pinning , HBA Cards to UCS / Nexus 1000V Infrastructure. After this change they lost the connectivity to UCS and HP Serers. Every tower is checking at their end.
The Network Team has reverted back the core switch with old IOS , but still the problem persisit.I could only see the following error log in the core switch. There are two port-channels one between core 1 and core 2. The other is between core switch and FWSM module. [code]