EPC on 3560 running 15.0(2)SE7 - If I had hair I'd pull it out!
I'm having a "Falling Down" moment with EPC. Here's my config and CLI output (see below). As you can see, traffic is ingress on Fa0/45 ('show interface' counters are incrementing). I'm allegedly capturing packets ingress on Fa0/45. However, the packet counter is not incrementing on my buffer associated with the Fa0/45 capture. I'm pretty confident that this is CEF-switched traffic. What am I doing wrong? This is driving me nuts. The only EPC I've been able to get working on this switch has been a process-switched capture. What I'm trying to do is capture traffic traversing the switch from a workstation (connected on Fa0/45) to a router (connected on Fa0/1) in that one direction (WKSTN -> Fa0/45 -> Fa0/1 -> Router). The EPC I created on the router is working BTW. Is this a case of EPC not working as advertised on the switch?
switch#show monitor cap point all Status Information for Capture Point c_fa0/45 IPv4 CEF Switch Path: IPv4 CEF , Capture Buffer: b_fa0/45 Status : Active
Configuration: monitor capture point ip cef c_fa0/45 FastEthernet0/45 in
Status Information for Capture Point c_fa0/1 IPv4 CEF Switch Path: IPv4 CEF , Capture Buffer: b_fa0/1 Status : Active
Configuration: monitor capture point ip cef c_fa0/1 FastEthernet0/1 out
switch#show monitor capture buffer all parameters Capture buffer b_fa0/1 (linear buffer) Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 0 Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0 Associated Capture Points: Name : c_fa0/1, Status : Active Configuration: monitor capture buffer b_fa0/1 monitor capture point associate c_fa0/1 b_fa0/1 Capture buffer b_fa0/45 (linear buffer) Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 0 Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0 Associated Capture Points: Name : c_fa0/45, Status : Active Configuration: monitor capture buffer b_fa0/45 monitor capture point associate c_fa0/45 b_fa0/45
I think I might have an answer to my own question. There's no cef switching or process switching going on because the traffic is forwarded at layer 2 (fa0/45 is an access port and fa0/1 is a trunk port). Does EPC only work on packets that are routed?
You have an extra week of fun! Capture the Flag has been extended through July 17. Register using the links below.
As a part of Cisco Live US auxiliary programs, we invite you to learn new technologies and obtain hands-on experience in a...
Hi,I'm trying to setup a cellular connection on my Cisco 1111 router.The interface is UP and it gets a private IPv4 and a public IPv6 address.If I try to send something on IPv4 through the cellular interface it works fine.But there seems to be an issue wi...
For an offline or printed copy of this document, simply choose ⋮ Options > Printer Friendly Page. You may then Print, Print to PDF or copy and paste to any other document format you like.
Is your WAN ready for a multicloud transformation?
Network Insider Live Webinar
Tuesday, July 21, 2020 10:00 am Pacific Time (San Francisco, GMT-08:00)
This webinar will show how convergence between SD-WAN and Security is emerging as important new SASE a...