Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About adamclarkuk_2
10-09-2017
Stats
Member since
08-07-2008
393
Posts
385
Helpful
39
Solutions
Created by
adamclarkuk_2
in Switching
in Switching
01-18-2012
07:05 AM
01-18-2012
07:05 AM
Hi I'm not 100% sure but from what I can tell, you might be in luck. Create an ACL but with the details you need, ( ie standard or extended, my example uses standard ) access-list 1 permit any Create your class and attach your ACL class-map test match access-group 1 Create your policy-map and attach your class policy-map test class test police cir (value you want in bits) apply the policy map to your SVI interface vlan 20 service-policy input test You can monitor that the policer is doing as expected using the command show policy-map interface vlan20 Job done, good luck
... View more
Created by
adamclarkuk_2
in Switching
in Switching
01-18-2012
06:36 AM
01-18-2012
06:36 AM
Hi Jomo Not all QoS features operate when the link is saturated. The enhanced etherswitch module for the 2900 does support policing, see below. Without knowing the part number for the module you have installed, I cannot say if your module supports policing. Policing Note To use policy maps, the enhanced EtherSwitch service module must be running the LAN Base image – Traffic-policing policies on the enhanced EtherSwitch service module port for managing how much of the port bandwidth should be allocated to a specific traffic flow – In Cisco IOS Release 12.2(25)SED and later, iIf you configure multiple class maps for a hierarchical policy map, each class map can be associated with its own port-level (second-level) policy map. Each second-level policy map can have a different policer. – Aggregate policing for policing traffic flows in aggregate to restrict specific applications or traffic flows to metered, predefined rates This would allow you the limit traffic using an ACL then apply the policy-map the the SVI interface for VLAN 20.
... View more
01-18-2012
06:01 AM
Hi Jason QoS is always important when dealing with VoIP, but as you only control the flow as traffic leaves your switch at home and then at the remote end, you will always be "fighting" the internet for bandwidth/priority if your ADSL line is a home user setup. The QoS on your local switch will help guarentee/prioritize the traffic that leaves your home network, but after that, it's a free for all untill it hits your remote end. If the 2900 is the XL, then you will have scheduling capabilities, see below for more details. In summary, yes, apply the QoS at your end and the remote end, this my help the "quality" of the call, but you also need to factor in the Codecs you are using and that you are using VPN protocols to get to your remote end. 2900 XL QoS The Catalyst 2900 XLswitches with 8 MB of DRAM provide QoS based on IEEE 802.1p Class of Service (CoS) values. They support input classification and output scheduling. The Catalyst 3524-PWR XL and 3548 XL switches also support the port-based input re-classification feature. The original Catalyst 2900 XL with 4 MB DRAM and WS-X2914-XL and WS-X2922-XL modules do not support any QoS features.
... View more
01-18-2012
05:44 AM
Hi Willard I concur with rettuc and have put together some outputs of what to expect. R1 is the configured primary, R2 secondary and R3 tertiary. Note that that the state of R3 is listen until a failover occurs. Pre failover R1# interface FastEthernet0/0 ip address 192.168.1.2 255.255.255.0 standby 10 ip 192.168.1.1 standby 10 priority 250 standby 10 preempt end R1#show standby FastEthernet0/0 - Group 10 State is Active 1 state change, last state change 00:03:33 Virtual IP address is 192.168.1.1 Active virtual MAC address is 0000.0c07.ac0a Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 2.704 secs Preemption enabled Active router is local Standby router is 192.168.1.3, priority 200 (expires in 9.560 sec) Priority 250 (configured 250) Group name is "hsrp-Fa0/0-10" (default) R2# interface FastEthernet0/0 ip address 192.168.1.3 255.255.255.0 standby 10 ip 192.168.1.1 standby 10 priority 200 standby 10 preempt end FastEthernet0/0 - Group 10 State is Standby Virtual IP address is 192.168.1.1 Active virtual MAC address is 0000.0c07.ac0a Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 1.988 secs Preemption enabled Active router is 192.168.1.2, priority 250 (expires in 9.156 sec) Standby router is local Priority 200 (configured 200) Group name is "hsrp-Fa0/0-10" (default) R3# interface FastEthernet0/0 ip address 192.168.1.4 255.255.255.0 standby 10 ip 192.168.1.1 standby 10 priority 150 standby 10 preempt end FastEthernet0/0 - Group 10 State is Listen Virtual IP address is 192.168.1.1 Active virtual MAC address is 0000.0c07.ac0a Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 3 sec, hold time 10 sec Preemption enabled Active router is 192.168.1.2, priority 250 (expires in 8.360 sec) Standby router is 192.168.1.3, priority 200 (expires in 8.196 sec) Priority 150 (configured 150) Group name is "hsrp-Fa0/0-10" (default) Post Failover R1# FastEthernet0/0 - Group 10 State is Init (interface down) 1 state change, last state change 00:07:21 Virtual IP address is 192.168.1.1 Active virtual MAC address is unknown Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 3 sec, hold time 10 sec Preemption enabled Active router is unknown Standby router is unknown Priority 250 (configured 250) Group name is "hsrp-Fa0/0-10" (default) R2# FastEthernet0/0 - Group 10 State is Active 1 state change, last state change 00:00:44 Virtual IP address is 192.168.1.1 Active virtual MAC address is 0000.0c07.ac0a Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 0.236 secs Preemption enabled Active router is local Standby router is 192.168.1.4, priority 150 (expires in 8.228 sec) Priority 200 (configured 200) Group name is "hsrp-Fa0/0-10" (default) R3# FastEthernet0/0 - Group 10 State is Standby Virtual IP address is 192.168.1.1 Active virtual MAC address is 0000.0c07.ac0a Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 0.068 secs Preemption enabled Active router is 192.168.1.3, priority 200 (expires in 9.092 sec) Standby router is local Priority 150 (configured 150) Group name is "hsrp-Fa0/0-10" (default)
... View more
Created by
adamclarkuk_2
in Switching
in Switching
11-16-2010
04:41 AM
11-16-2010
04:41 AM
Hi Giuesppe This is not an Internet facing device so the prefix limitation is not a concen. Do you know a way to have the module function without a reboot?
... View more
Created by
adamclarkuk_2
in Switching
in Switching
11-16-2010
01:18 AM
11-16-2010
01:18 AM
Thanks for the reply but i'm not sure that is the case as the module is up and the interfaces are configurable, it is only the DFC that has not been powered up?
... View more
Created by
adamclarkuk_2
in Switching
in Switching
11-15-2010
06:57 AM
11-15-2010
06:57 AM
Hi All I have installed a WS-X6708-10GE module into a 6509 chassis running a WS-SUP720-3BXL supervisor. As per the cisco documentation, if I install this line card without powering down the switch, the DFC card will not be powered up (OIR is not supported between 3BXL SUP and 3C DFC card). As far as I can tell, this will only limit the use of DFC with the module and it will revert to CFC mode to switch frames, is this correct? Thanks in advance.
... View more
Labels:
03-03-2010
03:16 AM
Hi Kevin I appreciate that VACL's are not just a replacement for SPAN sessions, but are definitely a lot better than monitor sessions for data capture, in fact Cisco recommend using them instead of monitor sessions these days. I will try to simplify my situation to get my need across. VLAN 100 1 server in this vlan An etherchannel between the switches carrying vlan 100 An SVI as the default gateway for the server on the switch with HSRP configured. I have a 2 switches with a server using a teamed setup, a NIC on each switch. I have a VACL configured on each switch that captures the traffic for VLAN 100 and forwards it onto a flow analyzer. Unfortuntely the software cannot cope with duplicate packets being recieved, which happens sometimes. To mitigate this, I wanted to remove the trunk port from the VACL, (but not hte trunk ;-) ) configuration so only the server interface on each switch will have the traffic captured and forwarded on. Like I said, I dont think this is possible but wanted confirmation. If not, I will have to go back to the dreaded monitor sessions :-s Regards Adam VACL config mac access-list extended VACL-TEST-MAC permit any any ip access-list extended VACL-TEST-IP permit ip any any vlan access-map TEST 10 match ip address VACL-TEST-IP action forward capture vlan access-map TEST 20 match mac address VACL-TEST-MAC action forward capture Interface connected to the analyzer interface GigabitEthernetx/x description an switchport switchport capture switchport capture allowed vlan 100 speed 1000 duplex full end
... View more
03-03-2010
01:53 AM
Hi All I have just moved away from SPAN to VACL's due to the more granular nature of VACL's, but am missing one major filtering feature that SPAN gave me. I have 20 interfaces in the VLAN that I am capturing, but I do not want to include the traffic from the trunk link. Is there a way to stop capturing the traffic if it was recieved from the trunk within the VACL? From my digging around CCO, I dont think it is possible, but I have faith in the skills and experience of the Netpro guys/girls. Thnaks in advance
... View more
Labels:
02-16-2010
06:51 AM
Hi All I have an FWSM pair (stateful failover configured as active/standby) running 3.1(4) and need to upgrade to 3.2(13). As always, the powers that be want no down time if possible but I am not sure that the modules can continue to talk failover if the major.minor numbers are different. Is it possible to upgrade the standby side to 3.2(13), then failover to this module then do the other side or will the code level differences break the failover comms and cause an active/active situation? Thanks in advance.
... View more
Labels:
11-16-2009
02:29 PM
Hi VSS does not yet support multiple SUP engines in a single chassis as of yet. The word from Cisco is that it could possibly need a whole new SUP design to make this feature work. Saying that, a properly configured VSS setup will give you more than enough redundancy.
... View more
Created by
adamclarkuk_2
in Switching
in Switching
11-16-2009
07:40 AM
11-16-2009
07:40 AM
Hi Juan use policing instead, here is a sample config:- class-map match-all matchany match any policy-map police:100mbps class match-all police cir 100000000 interface x/x service-policy output police:100mbps
... View more
Created by
adamclarkuk_2
in Switching
in Switching
11-16-2009
05:50 AM
11-16-2009
05:50 AM
Hi Naidu Speed tests always produce intresting conversation. I have tested the 3560 using dedicated throughput testers which use the RFC 2544 throughput testing model and the results came back as what you would expect to see, but what you expect is the question that needs answering. I agree that you are seeing poor throughput and would expect to see hight, could you tell me how you are testing this? The file size doesn't not make a difference, but the frame/packet size does. For instance, at Gig speed, using packet sizes of 64<= bytes, you will see around 550M at layer 3 and around 970M ay Layer 2. when the packet size increases, then so will the throughput at layer 3. I would check the duplex settings on the interfaces and check for any errors by looking at the output of show interface x/x
... View more
11-16-2009
05:21 AM
Hi Zenon Could be wrong but is the 1811 not a fixed chassis, ie, no modules, I did not know you could use them as L2 interfaces but could be wrong, if so then, split horizon will not help you here as that is a Distance Vector protocol feature and you are using OSPF which is a Link State protocol. This sounds more like a configuration issue. As all the interfaces are in the same VLAN, then I assume you have put them all in the same subnet right? I also assume you are using the ethernet module in the Can you ping any of the routers Have you put the interfaces in to the same area, ie 871 Router 1 interface 192.168.1.x 255.255.255.0 router ospf 1 network 192.168.1.0 0.0.0.0 area 0 871 Router 2 interface 192.168.1.x 255.255.255.0 router ospf 1 network 192.168.1.0 0.0.0.0 area 0 871 Router 3 interface 192.168.1.x 255.255.255.0 router ospf 1 network 192.168.1.0 0.0.0.0 area 0 are the neighbour relationships up show ip ospf neighbour
... View more
01-18-2012
Hi I'm not 100% sure but from what I can tell, you might be in
luck.Create an ACL but with the detai...
01-18-2012
Hi JomoNot all QoS features operate when the link is saturated. The
enhanced etherswitch module for ...
01-18-2012
Hi JasonQoS is always important when dealing with VoIP, but as you only
control the flow as traffic ...
01-18-2012
Hi WillardI concur with rettuc and have put together some outputs of
what to expect.R1 is the config...
Created by
adamclarkuk_2
in Switching
11-16-2010
11-16-2010
Hi Giuesppe This is not an Internet facing device so the prefix
limitation is not a concen. Do you k...
Created by
adamclarkuk_2
in Switching
11-16-2010
11-16-2010
Thanks for the reply but i'm not sure that is the case as the module is
up and the interfaces are co...
Created by
adamclarkuk_2
in Switching
11-15-2010
11-15-2010
Hi AllI have installed a WS-X6708-10GE module into a 6509 chassis
running a WS-SUP720-3BXL superviso...
03-03-2010
Hi KevinI appreciate that VACL's are not just a replacement for SPAN
sessions, but are definitely a ...
03-03-2010
Hi AllI have just moved away from SPAN to VACL's due to the more
granular nature of VACL's, but am m...
02-16-2010
Hi AllI have an FWSM pair (stateful failover configured as
active/standby) running 3.1(4) and need t...
11-16-2009
Hi VSS does not yet support multiple SUP engines in a single chassis as
of yet. The word from Cisco ...
11-16-2009
Hi Juanuse policing instead, here is a sample config:-class-map
match-all matchany match anypolicy-m...
11-16-2009
Hi NaiduSpeed tests always produce intresting conversation. I have
tested the 3560 using dedicated t...
Public Statistics
| Date Registered | 08-07-2008 02:26 AM |
| Date Last Visited | 10-09-2017 01:34 PM |
| Total Messages Posted | 393 |
| Total Helpful Votes Received | 385 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 1 | |
| 20 | |
| 3 | |
| 5 | |
| 4 |
.jpg "Hall of Fame Expert"){kind=icon}
Helpful Votes From
