cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
367
Views
0
Helpful
3
Replies

Many Catalys 3850 switches Auto-reload

seazhangwei
Beginner
Beginner

We are facing Many C3850 switches auto-reload , before reload ,cpu load was high abnormally .

current image is  flash:cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin

121121211119
807627277789
100 *
90 *
80 *
70 *
60 *
50 *
40 *
30 *
20 ************
10 ############
0....5....1....1....2....2....3....3....4....4....5....5....6....6....7.
0 5 0 5 0 5 0 5 0 5 0 5 0
CPU% per hour (last 72 hours)
* = maximum CPU% # = average CPU%

 

 

1 11 4 1 1
637344252532428534321619554633325652352126588244134433422539
100
90
80
70
60
50 *
40 *
30 *
20 ** * *
10 * * * * ** ***** * *** * ***** * *
0....5....1....1....2....2....3....3....4....4....5....5....
0 5 0 5 0 5 0 5 0 5
CPU% per minute (last 60 minutes)
* = maximum CPU% # = average CPU%

 

 

 

 

3 Replies 3

Philip D'Ath
Advisor
Advisor

You should probably move onto a more recent version of code like 3.6.9E.

https://software.cisco.com/download/home/284455425/type/282046477/release/3.6.9E

 

Have you done a "no vstack" on your switches?

 

There is a known vulnerability that allows remote unauthenticated attackers to run commands, and I have seen a couple of cases there this has been used to remotely reboot switches.

Leo Laohoo
VIP Community Legend VIP Community Legend
VIP Community Legend

Post the complete output to the command "sh vstack config".
(I've stumbled upon a thread (non-Cisco) where two users have reported that someone is using the SmartInstall exploit against them.)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers