Cisco WAN :: 6509E / Configure BGP With 4 ISP?
Jul 8, 2012
I have Switch 6509E wich is the core of the network, and we have 4 llink form 4 ISPs, all the link will work at the same time?how can I confiugure the BGP , as I know if I configure bgp it will work with one ISP as an active link,if that link goes down it will automatically begin to work with other ISP. My question is that how can configure the network so that,some vlans work with one ISP, some vlans with the others and so on.If configure it with route map I will have to track every time to change the confiration if the links goes down, but I do not want to track it, Can I do anything with BGP to implement this task?The core of the network is Switch 6509E, intervlan routing is implemented on it, no dynamic routing is enabled.The firewall module installed on it the implementing the NAT processes.
View 7 Replies
ADVERTISEMENT
Jun 1, 2013
I am having two 6509E working in VSS and both are working fine. But the configuration register of command "remote command switch show boot" is 0x8000 which is different from that of RP (0x2102) .Now i want to change the value of configuration regsiter of SP to 0x2102.
View 1 Replies
View Related
Sep 20, 2012
I multi homed to dual ISPs using a single 6509e. Currently, I am only receiving a default from wash ISP and marking one with a higher local pref. most of my traffic flow is inbound, so this config meets my need. The issue I have: if either ISP has has an outage upstream from my directly connected peer, my router does not detect that and continues to send traffic out thru that provider only to be black holed. My 6509 will only support 256k routes, so full route tables isn't an option. I could receive partials from each ISP. Is there any other method to detecting this upstream ISP issue and then adjusting my local pref on my default to use the alternate provider path?
View 3 Replies
View Related
Aug 16, 2011
We want to provide an end to encryption service using an ACE02 in a CAT 6509E. This is covered in the ACE config guide so should be OK. The issue is that we want to include traffic inspection using an IDSM2 so we need to seperate the decrypt and encryption stages and send cleartext traffic to the IDMS2. The Security and Virtualization in the Data Center pdf page 18/19 suggests that it might be possible. The design depicted there though is only doing SSL termination, then sending the clear text onto a WAF, and onto IPS but it does say end-to-end encryption is also possible.So in essence what we want to do is have traffic from clients destined for the server farm decrypted by the ACE and sent to the IDS. We then want the traffic to return from the IDS to the ACE to be encrypted and sent onto the server farm.
View 1 Replies
View Related
Apr 30, 2012
I have a new 6509E with 2 sup 2T cards. The 10GE ports on both sup cards will connect to 2 5548s. Can i connect the management interface on the new 6509E to the old 6509 until i free up space to bring the line cards over?
View 2 Replies
View Related
Mar 4, 2013
I multi homed to dual ISPs using a single 6509e. Currently, I am only receiving a default from wash ISP and marking one with a higher local pref. most of my traffic flow is inbound, so this config meets my need. The issue I have: if either ISP has has an outage upstream from my directly connected peer, my router does not detect that and continues to send traffic out thru that provider only to be black holed. My 6509 will only support 256k routes, so full route tables isn't an option. I could receive partials from each ISP. Is there any other method to detecting this upstream ISP issue and then adjusting my local pref on my default to use the alternate provider path?
View 3 Replies
View Related
Jul 16, 2012
We have configured BGP on Cisco Switch 6509E, firewall module on the switch is making nat for all users,but users is not going to internet yet, I do not know hot to configure 6509E to give internet access to users.If I route default route to FWSM,then BGP will not work? If I route default route what is the meaning of BGP then?
I do not want to write static route because BGP should work (4 ISPs redundancy)
How to let users to go out to the internet throug BGP, but nat is being done on the firewall module on 6509, routing is beiing done on 6509,to to configure it?
View 4 Replies
View Related
Mar 5, 2012
simple question regarding WAN transit uplinks on a 6509E ad BGP. The Hardware configuration is:
Cisco 6509-E Chassis with enhanced Fan
WS-SUP720-3BXL
WS-X6748-GE-TX
Dual power supply and 1 G flash for Engine
I'm currently using both 1 gig uplinks on the SUP for my two carrier transit uplinks (BGP). I would like to add a third carrier transit uplink into my BGP. Can I utilize the 6748 for access to the SUP720 routing to expand my transit carrier uplinks? Any thoughts on options without having to go to a 10gig SUP720?
View 4 Replies
View Related
Jan 31, 2011
I've got a problem with a core 6509E and the multicast.A client has a system with cams for the physical security and they are connected to a vlan with this config:
interface VlanXip address 172.20.167.1 255.255.255.128ip helper-address 172.20.32.7ip pim version 1ip pim sparse-modeendThe thing is that we know that one server that shows the cams at the security office is flooding the network and the CPU CORE is over 95% always:
CPU utilization for five seconds: 99%/39%; one minute: 99%; five minutes: 99%
263 644650276 567873287 1135 51.99% 55.06% 55.35% 0 IP Input
[Code] ....
View 1 Replies
View Related
Dec 9, 2012
I have a couple of 6509-E combined in a VSS system. I need to upgrade them to support 8 (or 16 at max) 10G uplinks. I already used the two built-in VS-S720-10G fiber connectors for VSL links. Which Ethernet modules do you suggest to use? are there any related upgrades that I have to do?
supervisor used: VS-S720-10G
Chassis: WS-C6509-E
View 2 Replies
View Related
Oct 23, 2011
I have a Cisco Aironet c where it is configured as an AP. I use a Pocket PC to access the AP, but after a period of use, the Pocket PC loses communication with the AP for a short period of time and the application that is utilized in the pocket closes. After a few seconds it automatically connects. Searching the logs of the AP found the following warning: "Packet to client 0017.2302.8a5e Reached max retries, removing the client", but this is not always alert appears.
View 0 Replies
View Related
Aug 7, 2012
I want to migrate a Cat 6503-E VSS to Cat 6509E VSS. We plan to use the same supervisor that we have on the Cat6503E, for minimizing the configuration change on the Doing this, the vss link will need to be changed, due to the fact that the supervisor slot will change with the Cat 6509, slot 5 instead of 1.
Question: is there a way to just change the vsl-link interface on a existing VSS ?
View 3 Replies
View Related
Jul 15, 2012
I have 2 Cat 6509-E switches in VSS configuration with 2 ACE modules. One in each Cat6k.
The ACE modules are running the following:
Software
loader: Version 12.2[120]
system: Version A2(3.2a) [build 3.0(0)A2(3.2a)]
We have only 2 contexts, the Admin and another one that we redirect traffic to WAAS equipment. The ANM soft running is only used for stats about the ACEs. It is version 5.2.
Since last week, the standby ACE module reboots on it own. It rebooted between 10 and 15 times until we had to leave the module PwrDown due to the constant reboots.
I tried to find any bug in the soft but I could not find anything related to that.
View 7 Replies
View Related
Feb 12, 2013
in our environment we have a 6509E as a core switch which is connected to five 3750G installed in remote sites and are layer 3 routes. the routing protocol is ospf. i am just wondering if we could possbily create a vlan in the core switch and extended it to the remote site throug layer 3 connection. The reason we are thinking to do this we want to have a server redundancy if one of the server goes in the core site we can just turn on the server which is in the same vlan in the remote site so that we can limit the downtime .
View 4 Replies
View Related
Jul 4, 2012
i am searching for the right SNMP-OID to poll the values of the CPU-load from a VSS (6509E)here a OID for VSS-Switch1 and a other OID for VSS-Switch2 values like cli-command "sh proc cpu" of the supervisor-module in slot 5.
View 1 Replies
View Related
Mar 26, 2012
I'm currently experiencing some problems with LMS 3.1 where inventory collection fails on cat6500 switches running 12.2(33)SXI1, Sup720.
I have changed the SNMP timeout to 30 seconds.
View 3 Replies
View Related
Mar 11, 2013
we have installed and implemented a FWSM on cisco catalyst 6509E and defined two virtual contexts.one of contexts work as datacenter firewall. initially it is configured to allow all traffic to datacenter VLAN. (permit any any) on test, it worked fine, except for one problem: all web services had degradation in performance, all server-client (non web) services worked very fine. additionally all https servies worked well.
Users connect to the web server bypassing the proxy, web services are expected to act just like other ones.
View 1 Replies
View Related
Oct 1, 2012
I have a pair of Core VSS 6509E SUP 2T. Two different LANs, two diff. Subnets. larger LAN has been connected to the VSS pair usng normal SVI and Post-Channles (has lots of closets 3750 stacks) and no problem. Second LAN, two closets, stacked and connected to each other via Port channel and trunk + SVI interfaces. Now, I have SVI interfaces for both LANs on teh VSS pair and that is causing traffic from one LAN to jump over to the other VLAN and rightly so because the VSS pair see both subnets as directly connected subnets. I was wondring if I delete the SVI for the second LAN and only keep the L2 VLAN this will be resolved> The reason for the second LAN to connect to the VSs pair is only that It has to go through the VSS pair to get to the WAN router (both LANs will go out through this Same WAN router) but WAN router is not my concern at this time. I need to isolate these two LANs/subnets traffic so no one VLAM traffic jumps over the other.I have also thought about VRF but at this point I am not sure if teh 3750 stacks supports VRF and if it does how to implement VRF on the second and samller LAN to just allow it go through the VSS pair in order to get to the WAn router.
View 13 Replies
View Related
Oct 27, 2011
I have a 6509E switch with dual 6Kw power supply that is logging "Power supply 1 input has changed. Power capacity adjusted to 2671.20W" then will bounce back to normal at random times from 1sec to 10sec. Is there a command to check what each input level of the power supply to try to identify possibly which source is causing the problem? The power supply input lights remains green while this is occuring.
View 3 Replies
View Related
Feb 27, 2013
Trying to find documentation on the proper procedure for installing a second sup720 into our 6509-E chassis for sup redundancy. I have found documents that tout how 'cool' and 'awesome' NSF/SSO, and all that is, but haven't found any docs on installing a second sup720 into a chassis that is currently in production and is only running one sup720. In all the years that this chassis has been out, there must me a documented procedure out here to explain this.I have been through the following pages, and have found nothing to this effect.
View 1 Replies
View Related
Jul 2, 2012
upgrade experience with the 6509E on what IOS version to use. This is a new install, so I want the most current version that supports SSH and works with dual supervisors.
Here is some information:
WS-C5609-E with 983008K/65536K bytes of memory
Current version 12.2(18)SXF17b
Slot 5 Supervisor 720 (Active)
Slot 6 Supervisor 720 (Hot)
Just need a strong base code, no advanced services. Let me know if you any additional information.
View 2 Replies
View Related
Jan 22, 2012
I'm doing some L2 cleanups across mutliple 6509E environments and I've found something consistent that I can't find in documentation. On all my pairs of 6509s where I have FWSMs bundled (6509-A has FWSM-1 is Slot 1 and 6509-B has FWSM-2 in Slot 1) I also have a port channel 305. Obviously when I do a "show run" or "show int desc" I don't see anything in slot one. It's a service module. But the port channel is referencing ports 1/1-6. And it's all in service/up. I was about to delete this as I thought it was some leftover config (TEST 6509s) until I went and saw the same things on our PROD 6509s. Is it cosmetic? Necessary? Can I delete it as part of my audit cleanup? Don't want to mess with it even in TEST without some information. Nothing on google that's clear and I can't find anything on CCO.
#################################################################################
6509-1#sho etherch 305 summ
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
[code]....
View 1 Replies
View Related
Dec 29, 2011
Looking at the specs for WS-X6704-10GE, it shows the port buffers at 16M per port. This doesn't seem like very much for a 10G port. Is this upgradable or related to how much RAM is in the blade?
View 4 Replies
View Related
Feb 6, 2012
We are experiencing with high CPU input due to ARP input between 20:30 and 22:30 every day At this time we have a lot of backup operations. When I look the netflow report, I can't see anything anormal.
We are changing our backup server's NIC card from 1gig to 10Gig. The backup operation's traffic is high (approx 2Gbps level) but 6509 has to be handle this size of traffic.
We are using two 6509E in VSS mode and our image version is s72033-adventerprisek9_wan-mz.122-33.SXJ.bin
20:00
show ip arp summary
--------------
2588 IP ARP entries, with 166 of them incomplete
[Code].....
View 16 Replies
View Related
Nov 7, 2012
I have to upgrade two Cisco Catalyst 6509E from Catos to IOS. I would want to know the requirements hardware or software for upgrading. Which are the recommended images I must download? From cat6000-sup32pfc3k9.8-4-5 to the latest stable version of IOS, is it recomended to pass to another previously version before?
I have viewed the following links,[URL]but, it doesn`t mention anything about that. The image below is the result of the "show version" command of one of our Cisco Catalyst.
WS-C6509-E Software, Version NmpSW: 8.4(5)
Copyright (c) 1995-2005 by Cisco Systems
NMP S/W compiled on Aug 3 2005, 13:13:36
[code]....
View 2 Replies
View Related
Nov 28, 2012
Have spa module on 6509E experience that error:
!
sh log | b crash
SLOT 3: Aug 18 12:52:10 CST: %CARDMGR-2-ESF_DEV_ERROR: An error has occurred on
Ingress ESF Engine: Control Store Parity Error
SLOT 3: Aug 18 12:52:10 CST: %ESF_CRASHINFO-2-WRITING_CRASHINFO: Writing crashin
fo to disk0:crashinfo.esf_20110818-175210
[Code]....
View 1 Replies
View Related
Nov 2, 2011
we are seeing network latency problems and our cpu on the 6509e is spiking and have a above average % for the past week or so. When we do see these spikes it seems that snmp and apr input is high
CPU utilization for five seconds: 75%/53%; one minute: 17%; five minutes: 14%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 9 1636168 95505 17131 4.19% 0.36% 0.34% 0 Check heaps =======>
12 478096 1011864 472 3.07% 0.12% 0.12% 0 ARP Input =====> 52 30420 436000 69 0.07% 0.07% 0.07% 0 Per-Second Jobs
53 317496 7789 40762 0.87% 0.10% 0.06% 0 Per-minute Jobs
220 55380 87807 630 0.07% 0.06% 0.07% 0 Compute load avg
[code]....
we recently upgraded our 3560 switches to the new 12.2-55 ios version but have not upgraded our 6509 because its ios is on 12.2(33)SXJ1. Not sure if this is related or not but it seems that after we upgraded to the later ios that the latency started.over the last 24 hours the spike is several times an hour and at least one a day that it hits the 90 - 100 % mark.is there a way that we can limit what snmp view but would not effect functionality or network?
View 2 Replies
View Related
Oct 18, 2012
Are there any physical characteristic differences between the 6509 and 6509-E chassis?
View 4 Replies
View Related
Sep 9, 2012
Environment:
1. Core switch - Catalyst 6509e
vlans configured:
a. vlan 50 (wired clients)
[Code]....
here's the problem, wireless clients connected to WLAN guest keep getting DHCP leases from WLAN local 10.0.50.10 (scope 10.0.70.101 to 200)
View 11 Replies
View Related
Apr 9, 2013
Q: If i m going to do a Bonjour Gateway deployment, do i still need the vlan select feature on the wism's or is enabling multicast enough?
Details of the Q:
I m working with WISM s and WISM2;s, 1130 and 3602 ap;s. Cores are 6509-E's.
i m going to implement a Bonjour gateway (which is an Aerohive ap, no wifi enabled, its just a Bonjour gateway)
This ap is connected with a trunk port (to a 6509-E) and has the wifi client vlans on the trunk as allowed vlans. It also has an allowed vlan for AppleTV;s which will be wired devices.
The Aerohive gateway gets an ip address in every wifi subnet, so far so good.
I was thinking that if i enable multicast :
- globally on the wisms, with mcast-mcast distribution
- on the SVI's for the wifi client vlans
- on te SVI's of the vlans for cisco aps
- on the SVI for AppleTV
- SVI for wism management
- SVI for the Bonjour gateway
then do i still need vlan select? Maybe a stupid question, but i m not sure how to interpret some things in this document.
View 4 Replies
View Related
Apr 27, 2012
On my 6509-E, all the modules show this:
Region F1: INVALID
Region F2: INVALID
Currently running ROMMON from S (Gold) region
Is this alright? Is the Gold region like a default region where ROMMON is always installed. And are F1 and F2 just storage partitions that are available to hold backup copies of the ROMMON? From what I read, it sounds like I can copy ROMMON images to F1 and F2, either the same version as the Gold region or different versions. Is that correct? Why would I want to copy different ROMMON versions to F1 and F2?
View 3 Replies
View Related
May 22, 2012
What is the cause of having a huge number ( 875349) of total output drops on one of my gigabit utp port gi 2/12 which is connected to Cisco 1841 fa0/0 router by mean of cat5e cable.I did change the cable from cat5e to cat 6 and tried to increase hold queue to 4096 and to tweak wrr queue bandwidth
View 4 Replies
View Related
Sep 11, 2012
I have two Core 6509E SUP2T configued as VSS and has two 48 ports fiber blades. I have two 3750s, I have two gig on each 3750 port-channle to po1 and connected to both the core, one link to each core.Now, I was asked ot add two more links on each 3750 switch to make it a total of 4 gigs on each 3750s (all 4 gig ports/uplinks will be in used an dtwo links to core one an dtwo links to core 2).when i added two additional links on 3750s and bundled them to po1, I created another port channel on core and bundeled the additional two gigs on each core to accomodate for the two additional links (ports on core switches are not consequtives).
adding these two additional ports makes the 3750 switches flap between managemnet vlan and po1.now, i am not sure if I must have added the two additional links on the core to teh current port-channel or core!? I have created another port-channel on core to accomodate for this currently!?
View 26 Replies
View Related
