I've got Cisco 7609 with WS-X6708-10GE (8x10Ge)And one port (te9/4) from it have zero bit rate counters, but all the rest of it are very good.I can see traffic if read it by SNMP. [code]
View 1 RepliesOur customer get the problem that the switch count the 5mins input/output rate of connected traffic interface always ZERO.The problem only occur in the module 3,4 and 5 interface, module 2 has no problems.
-------------------------------------------------------------------------------------------------
Catayst 4506E
12.2(52)SG
Chassis Type : WS-C4506-E
Power consumed by backplane : 0 Watts
Mod Ports Card Type Model Serial No.---+-----+--------------------------------------+------------------+-----------1 6 Sup 6-E 10GE (X2), 1000BaseX (SFP) WS-X45-SUP6-E 2 48 10/100/1000BaseT (RJ45) WS-X4548-GB-RJ45 3 48 10/100/1000BaseT (RJ45) WS-X4648-RJ45-E 4 48 10/100/1000BaseT (RJ45) WS-X4648-RJ45-E 5 48 10/100/1000BaseT (RJ45) WS-X4648-RJ45-E
[code]....+
I have an Ethernet Loopback Plug (4 Pairs) made and trying to test the Gigabit Interface on a 3845 Router with a fail result. The interface will show up/up only if I set the interface to 100M/Full Duplex when I plug-in the Ethernet Loopback Plug (4 Pairs). I don't see this Gigabit Interface @ 3845 router has any option to set it to internal or external loopback.
View 2 Replies View RelatedI have a 5510 FW in multi-context mode that is showing a high drop count on the Management interface in the Admin context.
View 1 Replies View RelatedThe top device of my network is cisco router 7609. There are two part subnet of my network, each part use same device type, same running-configs and same network topple: sw6506(to campus)--->sw3560(to buildings)<--->linksys sr324(to offices). IP addresses for manager vlan is 192.168.1.0/24.Suppose we name two part subnet as A and B. the problem is from 7609 I can telnet to every device of part A quickly, but when telnet to each sw3560 of part B,it responses very slowly. And only sw3560 of part B are response slowly, other devices of part B are ok.If I telnet to linksys sr324 first, then from linksys sr324 telnet to the current sw3560, it's ok.I try to capture packets of manage vlan, but there seems no strange things in it.No users of part B report problems, it seems the network is running well. Compare two sw6506s, the only diffirent thing is, there are "overrun" count at each interface in use of part B's sw6506. Each interface traffic is far less than it's capability, but it's "overun" count still increasing at working hours everyday.
View 1 Replies View Relatedi have a Cisco 7609 with ws-6704-10ge, trying to test a cable that is connected to the 10Gig interface , i connected the other end to a 1Gig GBIC interface on WS-X6516-GBIC, now the speed does not match but how to force the 10Gig interface speed to 1Gig, will that ever work? both has LX optics and the cable is SM
View 2 Replies View RelatedI am not able to disable rate limit comand from Cisco 3700 series router. I have tried with no rate limit command in the interface .Command is taking but still the rate limit comman in the interface.
View 2 Replies View RelatedI am looking for the command of rate-limit on a sub-interface in cisco asr 1013.
Cisco IOS Software,
IOS-XE Software (X86_64_LINUX_IOSD-ADVENTERPRISEK9-M),
Version 15.2(2)S, RELEASE SOFTWARE (fc1)
IOS XE Version: 03.06.00.S
If it is possible in Cisco asr 1013. If yes then what are the commands.
I have used the following basic configuration to do rate limiting on a vlan interface on a 6509:
access-list 100 permit ip any any
class-map match-all ratelimit
match access-group 100
policy-map ratelimit-10Mb
class ratelimit
police 10000000 428750 conform-action transmit exceed-action drop
[code]....
How do I combine the two correctly to give me a vlan port rate limited at 10Mb up and down, but still setting aside (dynamically) 2Mb for voice?
How (and is) it possible to rate limit pps on an interface (physical/logical), on a 6509-E?The porpuse is to protect from attacks which lead to very high pps, bypassing traffic rate-limits, and effecting the device's performance
View 2 Replies View RelatedAccording to Cisco's site the WS-X6748-GE-TX is a "10/100/1000" module.URL
View 7 Replies View RelatedI'm using Pix 501 with firmware: Version 6.3(3)I have problem with Pix 501:
+ transfer rate data between interface outside and inside very slow, even between 2 interface inside.
+ I have test file transfer between 2 PC connect via interface inside.
+ Results transfer 1 file 1MB with total time 60s
I don't upgrade software current from 6.3(3) to 6.3(5) via TFTP. It's error Please see attach file.
I have an issue where our ASA 5520 is impacting upload (from LAN to internet) speed. We have a 100Mbps SDSL internet link and only see around 45-50 Mbps on the upload when going via the firewall, download is around 90+ Mbps so that is acceptable. I have tested a laptop connected directly to the internet router and that give near on the 100Mbps up and down speeds, but if I put that laptop on the LAN or directly onto the firewall interface I only see 90Mbps down and 45Mbps up. I have check that the interface speeds/duplex on the firewall, switch and laptop are correct and also checked there are no errors on the ports. I also turned off the IPS and that made no difference. In addition I have checked the CPU during download/upload (max): CPU utilization for 5 seconds = 9%; 1 minute: 3%; 5 minutes: 1%
In theory the 5520 should be able to cope with this throughput:
Cisco ASA 5500 Series Model/License: 5520
Maximum firewall throughput (Mbps): 450 Mbps
Maximum firewall connections: 280,000
[Code].....
I am using a Cisco ME 3800 switch with 24 Gig and 2 Tengigabit interface. But after configuring the Tengig int with ip add and negotiation it is no know visible in the switch. Instead TenGig I am seeing two (Gi0/1 and G0/2). Not even showing the Tengig in the running config.
View 3 Replies View RelatedI am doing some per-deployment testing with a ASA5585X and noticed that when I feed it a stream of SYN packets on the outside interface the measured traffic rate on the inside interface going out is about 10x the rate of the outside interface going in.
laptop --- ASA --- PC
I send 6k TCP SYN pkt at interface rate from the laptop targeted at PC. No packets are dropped by Ac Ls or policies and can be sniffed at the PC.
Show interface commands show:
sh int inside:
... ...
Traffic Statistics for "inside":
...
1 minute input rate 23 pkt/sec, 1303 bytes/sec
1 minute output rate 4454 pkt/sec, 820757 bytes/sec
sh int outside:
... ...
Traffic Statistics for "outside":
...
1 minute input rate 885 pkt/sec, 70847 bytes/sec
1 minute output rate 7 pkt/sec, 425 bytes/sec
I would expect that if 885 pkt/sec enter the firewall on the outside interface the same amount or less would exit it on the inside...? Why this is not the case? The packet rate is about 5x and the data rate is about 10x greater.
We have a number of 3845 routers, some running IOS 12.4(22)T2 and earlier and some running 12.4(24)T4. On the ones with 12.4(22)T2 and earlier, gigabit interface g0/1 shows interface down/line protocol down when there is no cable connected to the interface and the interface is not in shutdown state. On the ones with 12.4(24)T4, gigabit interface g0/1 shows interface up/line protocol down when there is no cable connected to the interface and the interface is not in shutdown state. Interestingly in both cases, the "show controller g0/1" command shows " network link is down (NO CARRIER)" when there is no cable attached. It makes sense to us that the interface status would be down/down when there is no cable attached. It does not makes sense to us that the interace would be up/down. Did Cisco at some point change their philosophy on whether an interface should show down/down or up/down when there is no cable attached, or is this a bug?
View 1 Replies View RelatedOn a pair of my CISCO7609-s (engine:sup720-3B IOS Version:12.2(33)SRD4),some interfaces is configured as routing interface but also them are attend MSTP caculation and i really caught BPDU packet go out from these ports. [code]
View 1 Replies View Relatedi'd like to force the speed/duplex of the integrated Gigabit interface on a LAP1042N, managed by a 4402 running software version 7.0.98 but I cannot find the command either by command line or on the GUI.
View 3 Replies View RelatedI have configured Priority Queueing in my Cisco 2911 Router. I have set queue list high, medium, normal and Low. But when I put show interface gi0/2, it is showing the queueing strategy is priority queueing but it is not showing the (size/max/drops) values.
View 1 Replies View RelatedI want to connect 2 ISP links into one Gigabit-interface on my Router 2921, can any one tell me how to do that ? sub-interface creation is not possible on cisco 2921
View 1 Replies View RelatedI have a question about speed negotiation process between interfaces. I have 3650X Sw and 2960S-48port. All ports of two are GigabitEthernet, however the link between them is only 100Mb/s, Full duplex. I try to set the speed 1000 Mb/s manually in the interface then the interface never up. Its status is down/down. I must set back to speed auto. I show interface Gigabit0/24 in Sw 3650-X and figure out that there are many output drop (over 600000). I clear counter then after two days the output drop is over 70000. This link is trunk link between two switches, all ports of access SW are Gigabit and connect to PC. First, I thinks the 3650X is throttled somewhere in output direction of trunk link. But there is another trunk link (Gi0/23) to another 2960S-48port and no output drop number in this interface. This Giga 0/23 speed is 1000 Mb/s (auto speed, auto duplex)
Does any outside things impact the speed negotiation process between 2 interfaces? And output drop number may caused by abnormal speed between two Gigabit interface?
I am trying to configure a loop back interface like so: [URL], on the following device:
C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(50)SE, RELEASE SOFTWARE (fc1on port gig0/1 which is using a 1000Base-SX adapter. This is for troubleshooting purposes and it does not appear to be a feasible option. Is there another way to accomplish in the IOS?
I have configured a vlan interface on a 3750 switch. there is aprox 4Mb active traffic flowing through the interface, but when I do a "show interface vlan (vlanid)" the output show zero bits in and zero bits out. Its a typical L3 config with one IP on the vllan interface acting as the gateway for the VLAN devices. Is this a normal behaviur ? and if so is there any way to get the traffic in/out stats. The end PC/devices are connected to this switch via an L2 TRUNK and I dont have access to the L2 switch on which the actual devices connect. so cant get the real time stats of those interfaces.
View 2 Replies View RelatedI'm running an Optiplex 330 with the Broadcom NetXtreme 57xx Gigabit ethernet card.
The computer is running Windows 7, 64bit, but there do not appear to be any drivers for that OS.I tried selecting Vista 64bit, but there were no drivers. The Vista 32bit doesn't work.
Then I went to Broadcom and found these drivers: [URL] the W764bit drivers didn't change the fact i'm still on a 100Mbit card (as seen on Local Area Connection Status screen and the Device manager)
In previous LMS versions the DCR could hold more devices then the licenses of the other other applications permitted and using the "user defined fields" we have used it as a general device repository for some customers, pushing only the supported cisco devices to the various applications.In LMS 4 cisco has removed all allocation possebilities from the various applications and replaced it by an all or nothing type of allocation.Does this now mean that any entry in the DCR is automatically counted as a used device license?
View 1 Replies View RelatedASA v 8.2What does the ACL hit count count ? I always thought that the acl hitcount counted the numbers of packets hitting that line in the ACL, however that is not the case. if I setup a icmp permit rule then that will only increment 1 even if I send 4 packets that hits the line. udp and tcp seems to do the same. is there some way I can make the ACL actually count the packets that hits ? where can I learn more about this ?
View 4 Replies View RelatedAny method to determine the maximum number of concurrently used SSL VPN licenses (sessions) on an ASA5540 over a period of time? For instance, over a week, the MAXIMUM number of concurrent users that were utilizing SSL licenses on the box. We are trying to determine current license capacity of the device.
We are running 8.2(5) on the ASA itself, and have 6.47 ASDM deployed.
I have several working VPNs between ASAs 8.4 and 8.3The way this was set up is with cryptomaps that match whole subnets and ACL on the outside interface to permit from/to the RFC 1918 addresses.I notice that the hit count is zero on these rules and so I wonder if they are actually necessary or doing anything.If they are not where can an acl be applied to restrict the VPN traffic? Outbound on the inside interface?
View 1 Replies View Relatedwe are running WCS 7.0.164.3 and wonder whether is there any reporting option availabel that can give us daily report on Top 50 or Top 100 APs by client count.
I know that I can look at the client tab under WCS home page and see the top 5 APs by client count on real time.In our environment we have around 700 APs and would like to know by having this kind of report which APs are mostly hit ?
I have a recent new install of Cisco Works and all is working fine. My issue is with a feature that doesn't seem to be present. When I create a report to ccheck on sys logs the report returns all sys log whether they are repetitive or not. Is there a way to have a same sys log error come back with a number of ocurences?
the feature doesn't show up when I create a custom report?
We have configured our ASA5540 in active-standby failover.We are observing that current active session count is twice of session count before configuring HA. Earlier average active session was 50000 and now after HA it is around 100000. Failover configuration of both firewall are as follows
failover
failover lan unit primary
failover lan interface FOLan GigabitEthernet1/0
failover polltime unit 15 holdtime 45
failover replication http
failover link StateLink GigabitEthernet1/1
failover interface ip FOLan 10.3.3.1 255.255.255.0 standby 10.3.3.2
[code]....
We have a ASA 5510 (v8.2.2 with ASDM 6..4.7, 256Mb mem) with a license for 250 VPN Peers. The machine has currently one site-to-site VPN active. I've added a remote-access IPSec VPN for some users but when connecting from the remote site the connection is dropped and the ASA reports %ASA-4-713239 Tunnel Rejected : The maximum tunnel count allowed has been reached.
I've searched for info relating to this message but I found none. Before I plan a restart (it's up for 222 days), is there something I could do on CLI to fix this ?
" Galileo interrupt: PC10 retry count expired "This error keeps flooding in terminal window so it is impossible to even try to work via consol.With google search, closest thing ive come up to is that this is a faulty with the CPU cache, and that no workaround is available, thus this unit is pretty much destroyed.I am just long-shooting here and wonders if anyone here knows anything more about this before i throw the card in the trash-bin?
View 4 Replies View Related