ello,
I'm investigating an issue with a packet loss on catalyst 9200 Stack. I tried a embeeded packet capture, but have some troubles with it. I took a labor switch and tried different capture parameters on it. The secanrio is:
Firewall(or another network device)-an old catalyst -C3560 - port channel - 9200-24T.
Port channel contain two interfaces on every side. I have jsut configured one vlan and one IP for it on the 9200-24T: Gi1/0/1 and 1/0/2:
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
3 Po3(SU) LACP Gi1/0/1(P) Gi1/0/2(P)
The ip of the 9200-24 in vlan is 10.9.57.140, IP of the switch C3560- 10.9.57.130, Firewall - 10.9.57.10.
I can ping every deice from every device without issues.
After some tests with filters I configured an EPC for interfaces 1/0/1 and 1/0/2 and filter ip any.
seb#sh mon capture CAP parameter
monitor capture CAP interface GigabitEthernet1/0/1 BOTH
monitor capture CAP interface GigabitEthernet1/0/2 BOTH
monitor capture CAP match ipv4 any any
monitor capture CAP buffer size 10
monitor capture CAP limit pps 1000
I collected icmp packets during 10.9.57.10 and 10.9.57.130 sent icmp to the 9200's IP. I can only see the incomming packet on both captures, but no outgoing via interfaces.
seb#sh mon cap CAP buf brie
----------------------------------------------------------------------------
# size timestamp source destination dscp protocol
----------------------------------------------------------------------------
0 68 0.000000 10.9.57.130 -> 10.9.57.140 48 CS6 TCP
1 88 0.515980 10.9.1.1 -> 224.0.0.10 48 CS6 EIGRP
2 68 1.314987 10.9.57.130 -> 10.9.57.140 48 CS6 TCP
3 183 2.650968 10.9.58.24 -> 239.255.255.250 0 BE UDP
4 106 3.844018 10.9.57.10 -> 10.9.57.140 0 BE ICMP
5 100 4.467979 10.9.58.24 -> 10.9.58.255 0 BE UDP
6 100 4.559969 10.9.58.24 -> 10.9.58.255 0 BE UDP
7 106 4.853005 10.9.57.10 -> 10.9.57.140 0 BE ICMP
8 88 4.996003 10.9.1.1 -> 224.0.0.10 48 CS6 EIGRP
9 100 5.227986 10.9.58.24 -> 10.9.58.255 0 BE UDP
10 68 5.314987 10.9.57.130 -> 10.9.57.140 48 CS6 TCP
11 100 5.320983 10.9.58.24 -> 10.9.58.255 0 BE UDP
12 100 5.992005 10.9.58.24 -> 10.9.58.255 0 BE UDP
13 100 6.085995 10.9.58.24 -> 10.9.58.255 0 BE UDP
14 68 6.314987 10.9.57.130 -> 10.9.57.140 48 CS6 TCP
15 126 7.639967 10.9.59.110 -> 239.0.0.100 0 BE UDP
16 122 8.737969 10.9.57.130 -> 10.9.57.140 0 BE ICMP
17 122 8.739968 10.9.57.130 -> 10.9.57.140 0 BE ICMP
18 88 9.544970 10.9.1.1 -> 224.0.0.10 48 CS6 EIGRP
19 68 10.314987 10.9.57.130 -> 10.9.57.140 48 CS6 TCP
I also added interfaces po3 and vlan 57, but still cannot see any output
What setting will allow me to check, if the icmp replies are sent out from the interfaces 1/0/1 and 1/0/2 back to the source? Is it possible in my scenario?
Thanks.
Best Regards,
Sergej
