some log message abnormal in 4510

[wfqk]

Hi, Please see the below log message of switch 4510. It looks like some configuration change, but we are not sure if it has changed. Why we got this message. thanks

121136: May 16 16:21:49 ET: Interface:GigabitEthernet2/46 speed changed to 10000 kbps. Policymap: AutoQos-VoIP-Output-Policy is updated
121136: May 16 16:21:50 ET: Interface:GigabitEthernet2/46 speed changed to 1000000 kbps. Policymap: AutoQos-VoIP-Output-Policy is updated

[Giuseppe Larosa · Accepted solution]

Hello,

from the log messages we can say that the speed on interface Fas2/46 has changed to 10 Mbps for 1 second and then it has gone back to 1000 Mbps,

You have autoQoS configured and the log message tells that autoQoS has reacted to the changes in speed by updating the policy map applied to the interface two times.

So the first question is have you got AutoQoS for VOIP enabled on the switch?

If yes these messages could be seen as normal.

Hope to help

Giuseppe

[wfqk]

Thank you so much for your reply!

auto qos was enabled long time ago. Can we say someone tried to make the change on configuration at the port at that time point? Looks like the answer is yes

[Giuseppe Larosa]

Hello,

so autoQoS is enabled this is good news.

no human being changed the configuration it was autoQoS for VOIP that did it as the messages say.

Because when the speed changes the interface bandwidth changes and this triggers autoQoS to update the configuration.

Hope to help

Giuseppe

[wfqk]

Hi, This speed change caused the action of AutoQos for Voip. Why the speed changed? it was changed by human being?

[Giuseppe Larosa]

Hello,

the two messages are at distance of only one second

I don't think someone did a manual change. It is too fast also I think that the interface should have gone down when changing the speed if the other side does not agree on the speed.

If you use AAA servers and you perform accounting of commands you can check if someone did something on the switch at that time.

If this is an isolated event you should be fine. If becomes recurring it may be a sign of a problem in cabling or in the interface port itself.

Hope to help

Giuseppe

[wfqk]

I totally agree with your analysis. Thank you very much!