12-09-2010 07:24 AM - edited 03-04-2019 10:44 AM
First off I am a systems engineer guy, not Cisco although I can get around and do what I need to do in a switch. We are working on taking a port off of a switch and connecting it to a mux (TAC 900). Port is trunked to another switch in another geographic location. From wht I am being told from the engineer who handles the transmission end of things he said once our segment is physically connected the mux will crash. He supplied the error code to the vendor and they said it is crashing because of a jumbo packet in excess of 1536 bytes. Soon it will be a moot point as the hardware will be
upgraded but we need tis running NOW.
I put Wireshark on that segment and I created a capture filter that says: len >1510 . I do get hits on packets of 1514 bytes but I am noticing this elsewhere also, so I am thinking this is not abnormal. I also get the following messages:
TCP [ACKed Lost Segment] [TCP segment of a reassembled PDU]
Also note I am a Wireshark newbie. So It's like a needle in a haystack to me. What SHOULD I be looking for? I have no idea what protocol to check the transmission guy just says the mux gives him an error code, that's it.
BTW the 1514 length bytes seem to be coming from a domain controller on another segment. Also the MTU is set to 1500 on the switches.
REALLY NEED HELP ASAP! :-)
- AR
12-09-2010 07:57 AM
Hi Alan,
When the mtu is set to 1500 throughout your network, there is little risk of generating frames with a size in excess of 1536 bytes.
The payload is 1500 bytes, that is your ip header and data. Ethernet adds 14 bytes to that plus an extra four at the end. The latter contain the CRC checksum which is needed to error-check the frame. So the entire frame is then 1518 bytes long. This is true for a standard IEEE ethernet frame.
When you are using a trunk (dot1Q) this adds an extra four byte tag to the frame. Note that this makes the frame larger than the IEEE specification.
Should you be utilizing QinQ, there will be another four bytes added to that.
When you do the math, it adds up to 1518 +4 + 4 = 1526. Still within a 10-byte safety margin from where the mux will crash.
It is also true that Cisco switches will forward giants, frames with a size in excess of 1518 bytes.
The reason for this is mainly the requirement to support dot1Q but as you have seen, it is not likely that a dot1Q tagged frame will become too large.
In the way you presented the case, I cannot see any risk of giants being sent to the mux.
The biggest risk is the transmission guy got his numbers wrong and the critical value is < 1522.
regards,
Leo
12-09-2010 10:38 AM
Yes thank you for the explanations. I was not necessarily trying to blame the switch just trying to understand. As mentioned the mux's
will be replaced but they are on order and we REALLY need to get it resolved with what we have right now. Can't wait. Transmission/satellite guy suggested maybe a router in between to break up the packets but we have no routers available. Linksys?
Bottom line is this HAS to work somehow. We will be getting a TAC call in to Cisco.
Switch is Cisco Catalyst 4506
IOS is 12.2
Switchport trunk encapsulation isl
Switchport trunk allowed vlan 10,20,30
Switchport mode trunk
...Alan
12-09-2010 10:58 AM
Why are you using ISL encapsulation? That is causing the issue, as it uses a lengthy trunking header
Configure regular dot1Q encapsulation and you will have no problems.
12-09-2010 08:31 AM
As Leo correctly indicated in more words than me, I think you will find that the "mux" is at fault and must be fixed or replaced. The switch is not doing anything wrong.
12-09-2010 12:08 PM
Thank you! Well I am not a Cisco guy for one. Second this was set up by someone else and I was not involved. But I will do some reading up as I intend to study Cisco stuf REAL soon. Maybe CCNA.
...Alan
12-09-2010 01:11 PM
You are welcome, please remember to rate useful posts clicking on the stars below.
NB: carring VLAN (bridged traffic) over satellite is not a very good idea. You should use a router instead.
12-09-2010 12:14 PM
Is this supported on my switch?
Cisco Catalyst 4500 running 12.2 IOS, 4506 super
??
12-09-2010 01:05 PM
NM found the command to tell me capabilities. Set it, we'll see. Coworker needs to set up the other switch.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide