SFPs not working

[db1]

Hi All, I have a really bizarre problem.

On one site we have a Cisco WS-C3750X-48P stack with C3KX-NM-10G modules and some SFP modules. Some are from Cisco (SFP-10G-SR) some are 3rd party. We are running software 15.2(4)E5. Everything works fine.

One another site we just installed C3KX-NM-10G modules and got some refurbished SFP-10G-SR from Cisco. I managed to add them to My Devices, so the serial numbers are known, and they show up as refurbished modules.

However, when I insert those modules into the WS-C3750X-48P stack (running 15.2(2)E8 this time) I get the following error:

1334: 001373: 000067: Aug 21 06:12:20: %GBIC_SECURITY_CRYPT-4-ID_MISMATCH: Identification check failed for GBIC in port Gi2/1/1 (DBSGSW-02-2)

And the modules are not visible when I do show inv, or even show inv raw

Same thing happens on Cisco 3650 with 16.3.6 software:

272: *Aug 21 07:02:13.549: %PLATFORM_PM-6-MODULE_INSERTED: SFP module inserted with interface name Te1/1/1
273: *Aug 21 07:02:13.549: %GBIC_SECURITY_CRYPT-4-ID_MISMATCH: Identification check failed for GBIC in port 49
274: *Aug 21 07:02:17.596: %PLATFORM_PM-6-MODULE_INSERTED: SFP module inserted with interface name Te1/1/2
275: *Aug 21 07:02:17.597: %GBIC_SECURITY_CRYPT-4-ID_MISMATCH: Identification check failed for GBIC in port 50

But in this case I can at least see them under "show inv".

Do you guys have any idea what is happening here?

Thanks

Jakub

[db1]

Got more information about the module:

DBSGSW-03#show idprom interface tenGigabitEthernet 1/1/1

General SFP Information
-----------------------------------------------
Identifier            :   SFP/SFP+
Ext.Identifier        :   SFP function is defined by two-wire interface ID only
Connector             :   LC connector
Transceiver
 10GE Comp code       :   Unknown
 SONET Comp code      :   OC 48 short reach
 GE Comp code         :   Unknown
 Link length          :   Unknown
 Technology           :   Unknown
 Media                :   Single Mode
 Speed                :   Unknown
Encoding              :   64B/66B
BR_Nominal            :   10300 Mbps
Length(9um)-km        :   GBIC does not support single mode fibre
Length(9um)           :   GBIC does not support single mode fibre
Length(50um)          :   80 m
Length(62.5um)        :   20 m
Length(Copper)        :   GBIC does not support 50 micron multi mode OM4 fibre
Vendor Name           :   CISCO-LUMENTUM
Vendor Part Number    :   PLRXPL-SC-S43-CS
Vendor Revision       :   0x32 0x20 0x20 0x20
Vendor Serial Number  :   JUR2051G0MJ
Wavelength            :   850 nm
CC_BASE               :   0xDB
-----------------------------------------------

Extended ID Fields
-----------------------------------------------
Options               :   0x00 0x1A
BR, max               :   0x00
BR, min               :   0x00
Date code             :   161214
Diag monitoring       :   Implemented
Internally calibrated :   Yes
Exeternally calibrated:   No
Rx.Power measurement  :   Avg.Power
Address Change        :   Not Required
CC_EXT                :   0x4B
-----------------------------------------------

Other Information
-----------------------------------------------
Chk for link status   : 00
Flow control Receive  : Off
Flow control Send     : Off
Administrative Speed  : 10000
Administrative Duplex : full
Operational Speed     : auto
Operational Duplex    : auto
-----------------------------------------------

SEEPROM contents (hex):
 0x00: 03 04 07 10 00 00 00 00 00 00 00 06 67 00 00 00
 0x10: 08 02 00 1E 43 49 53 43 4F 2D 4C 55 4D 45 4E 54
 0x20: 55 4D 20 20 00 00 01 9C 50 4C 52 58 50 4C 2D 53
 0x30: 43 2D 53 34 33 2D 43 53 32 20 20 20 03 52 00 DB
 0x40: 00 1A 00 00 4A 55 52 32 30 35 31 47 30 4D 4A 20
 0x50: 20 20 20 20 31 36 31 32 31 34 20 20 68 F0 03 4B
 0x60: 00 00 08 6B 7F 47 CC 94 6C F3 8E 8F 76 41 F2 96
 0x70: 5A F3 FB 00 00 00 00 00 00 00 00 00 DD 43 6B 60
-----------------------------------------------

[nazimkha]

I believe the SFPs are SFP-10G-SR (Short Range to be used with multimode fiber) and not sure if the have inserted SMF fiber as per your output

Media : Single Mode
Speed : Unknown
Encoding : 64B/66B
BR_Nominal : 10300 Mbps
Length(9um)-km : GBIC does not support single mode fibre
Length(9um) : GBIC does not support single mode fibre

[Georg Pauwen]

Hello,

you might be hitting the bug below. No fix has been released, workaround suggestion is to shut/no shut the port(s).

%GBIC_SECURITY_CRYPT-4-ID_MISMATCH: after reload
CSCuy89858
Description
Symptom:
After reloading the switch some SFP+ ports go into err-disabled. It is not predictable which one goes into this state. Sometimes a shut /no shut works as workaround, sometimes not. We have seen this issue with the C3850-24XS and on the C3850-48P on the 4x1G uplink module.
In our C3850-24XS switches we have seen this issue with 10GE LR and SR SFPs.

NAME: "Te2/0/23", DESCR: "SFP-10GBase-LR"
PID: SFP-10G-LR , VID: V02 , SN: ^C^D

error message that you got:
===========================

*Mar 9 07:47:21.010: %PLATFORM_PM-6-MODULE_INSERTED: SFP module inserted with interface name Te2/0/23
*Mar 9 07:47:21.010: %GBIC_SECURITY_CRYPT-4-ID_MISMATCH: Identification check failed for GBIC in port Te2/0/23
*Mar 9 07:47:21.010: Warning: SFP gbic-security check fail

*Mar 9 07:47:21.010: %PM-4-ERR_DISABLE: gbic-invalid error detected on Te2/0/23, putting Te2/0/23 in err-disable state

Conditions:
After reloading the switch some SFP+ ports go into err-disabled.

Workaround:
shut/no shut works some time.

Further Problem Description:

[db1 · Accepted solution]

Just wanted to update with a solution, in case someone finds this topic in future.

The solution was actually very silly... I was configuring the switch remotely, asking my colleague to insert the modules. I asked him to insert them in slots 1 and 3 on the C3KX-NM-10G module, and they should be inserted in slots 2 and 4....

[jebedoya511]

Hi,

I have the similar issuse..

At the moment I have the C3KX-NM-10G  module on WS-C3560X-48T-S device.

The ports G2/Te1 and G4/Te2 are working the SFP 10G correctly, but i need to use the another two ports for to connect the fiber.

When I have inserted the SFP 1G or 10G on ports G1 and G3, the switch does not recognize the SFP...

show inventory command show me two SFP 10G

Any advice on it?

Thanks

[jebedoya511]

Hi,

I have the similar issuse.. 

At the moment I have the C3KX-NM-10G  module on WS-C3560X-48T-S device.

The ports G2/Te1 and G4/Te2 are working the SFP 10G correctly, but i need to use the another two ports for to connect the fiber.

When I have inserted the SFP 1G or 10G on ports G1 and G3, the switch does not recognize the SFP...

show inventory command show me two SFP 10G

Any advice on it?

Thanks