Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About SAM R.
Stats
Member since
10-23-2012
17
Posts
15
Helpful
0
Solutions
01-25-2019
04:02 PM
I have a pair of ASR1006 routers each that have the following hardware:
ASR1006 chassis
ASR1000-rp2 route-processor (slot0)
ASR1000-ESP40
ASR1000-2T+20X1GE
When booting one of the ASR1006 chassis #1, everything boots fine with console access. However, when booting ASR1006 chassis #2, I get a critical alarm and a red status light which indicates there was a system failure @ power up. I am unable to see the output from the console:
For the console, I have tried the following: setting up a console connection with default settings 9600 baud, 8 data bits, 1 stop bit, parity non, and flow control none. I have also tried multiple speeds (baud) just in case the the speed was changed on the router. Either way I get not console. It is possible, that someone has configured the no exec command on the console which could also have disabled this console connection. Since I cannot see the console output, I am not able to find out what errors are occurring nor am I able to do a password recovery. I have tried a hard shutdown of the router and sending a break signal to the console, but got not response. My last attempt will be to switch out the RP from the ASR1006 chassis#1 or use a different slot for the RP that is in chassis that is failing. I will try this when I get back to work. Any other suggestions would be appreciated.
... View more
Labels:
12-21-2016
08:02 AM
There are a few things to consider:
Does Router 3 have a route to the source and destination? If not, then you need to fix this. This can be done with a static route or with dynamic routing (OSPF,EIGRP,etc) Ensure that on Router 3, you have a route to the source and destination. Loopback should be directly connected so that shouldn't be problem
Does Router 1 have a route to the source and destination (tunnel source/destination)? If not, then you need to fix this. This can be done with a static route or with dynamic routing (OSPF,EIGRP,etc) Ensure that on Router 1, you have a route to the source and destination.
Same for router 7 and Router 4, ensure that each specific router has a path (route) to source and destination. Once you fix this, I believe you should be good to go. Sorry I didn't give you the specific answer, but I think you have the knowledge to fix this based on the information you already posted.
Sam
... View more
Prasad,
You may be having an issue with your media. Although most switches these days are auto-MDI/MDIX, packet tracer may not be. On one side of your network you seem to be using straight-through (non-dotted line) cables. On the other side of your network, you seem to be using cross-over cables (dashed-lines). This may be your problem
When I troubleshoot I try to work in layers. (hopefully i put all the things in the right layers below, I apologize if I didn't. )
Layer1- physical layer (cabling type, cabling length, media converters, etc)
Layer2/2.5 - verify that things such as spanning-tree, vlans, access-lists, MTU(things at the switch level)
Layer 3 - ip address, network, subnet, default gateway, route to network, access-lists, MSS (endless possibilities)
If this is not your problem, make sure that your switch ports on the switch in question are configured for the same vlan and that the vlan actually exists on the switch. Deleting vlans on a switch where ports are still configured to use the vlan can issues.
Good luck, let me know what you find.
... View more
08-18-2016
02:24 PM
Thanks, thats what I thought, but I wasn't able to find that in any documentation.
... View more
08-18-2016
01:54 PM
Do the ASA 5545 Firewall ACLs affected locally generated traffic? Lets I use one of the interfaces of the ASA 5545 (not the managemet interface) to report syslog information or snmp information. If i created a ACL to block snmp/syslog traffic from the ip address of the firewall to the destination, will this actually get blocked? I know in routers that an ACL does not affect locally generated traffic, however, I am having trouble finding documentation to support the same thing in the ASA 5545. Does anyone have any insight on that?
... View more
Labels:
08-05-2016
04:05 PM
Etherchannel misconfiguration guard or "Etherchannel Guard" is a feature that protects you when you incorrectly configure an etherchannel. So, how can you incorrectly configure an etherchannel? Well remember for an etherchannel to be configured correctly, the parameters need to be setup correctly on both ends.
Speed must be the same Duplex must be the same # of ports needs to be the same 1 side is set to a trunk while other side is not Type of port (L2 or L3) need to be the same
By incorrectly configuring or not configuring one of these settings, you can run into issues. When the switch detects one of these types of errors (list above is not all inclusive) then it will place the port-channel interface and all associated interfaces into an "err-disabled" state. This is to notify the administrator that the switch protected you from configuring your etherchannel incorrectly. Hope this helps
... View more
01-27-2016
08:39 AM
Jose, One way to begin tunning your environment would be to create class-maps which rely on ACLs to properly categorize the traffic. In the class-map, you may want to specific the conform action to be "transmit" and the exceed action to be transmit as well. This should ensure that the traffic that you are categorizing in CoPP will still transmit even if it exceeds the bandwidth you specified, but will still increment your exceed counter if the bandwidth you specified is not enough. Later all you will have to do is adjust your bandwidth to higher amount until you do not see the exceed counter increment. When using the "show policy-map control-plane-policy" command be aware that the output may be limiited to a small window of time.
conf t
ip access-list ex test_ssh permit ip any any eq ssh permit ip any eq ssh any exit
class-map test_ssh match access-group test_ssh policy-map control-plane-policy !notice the exceed action of "transmit" below class test_ssh police rate 100 10 conform-action transmit exceed-action transmit exit control plane service-policy input control-plane-policy end show policy-map control-plane-policy
Hopefully my syntax is correct, I do not have a router in front of me right now.
... View more
Adam,
When a switch receives a packet on an untrusted interface and the interface belongs to a VLAN in which DHCP snooping is enabled, the switch compares the source MAC address and the DHCP client hardware address. If the addresses match (the default), the switch forwards the packet. If the addresses do not match, the switch drops the packet.
The switch drops a DHCP packet when one of these situations occurs:
• A packet from a DHCP server, such as a DHCPOFFER, DHCPACK, DHCPNAK, or DHCPLEASEQUERY packet, is received from outside the network or firewall.
• A packet is received on an untrusted interface, and the source MAC address and the DHCP client hardware address do not match.
• The switch receives a DHCPRELEASE or DHCPDECLINE broadcast message that has a MAC address in the DHCP snooping binding database, but the interface information in the binding database does not match the interface on which the message was received.
• A DHCP relay agent forwards a DHCP packet that includes a relay-agent IP address that is not 0.0.0.0, or the relay agent forwards a packet that includes option-82 information to an untrusted port.
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_52_se/configuration/guide/3750scg/swdhcp82.html#wp1058138
... View more
01-25-2019
I have a pair of ASR1006 routers each that have the following hardware:
ASR1006 chassis ASR1000-rp2 ...
12-21-2016
There are a few things to consider: Does Router 3 have a route to the
source and destination? If not...
08-18-2016
Do the ASA 5545 Firewall ACLs affected locally generated traffic? Lets I
use one of the interfaces o...
08-05-2016
Etherchannel misconfiguration guard or "Etherchannel Guard" is a feature
that protects you when you ...
05-23-2016
Jaime, after reading my post I can see how the problem may be a bit
misleading, I have updated my po...
05-23-2016
Daniel,Thanks for your response. Unfortunately, we are only permitting
specific IP addresses from re...
05-23-2016
Jaime, I have a similar post that captures the same issue. Please review
https://communities.cisco.c...
05-13-2016
In our network our 3rd party handsets register with our Call Manager
after connecting to our network...
Public Statistics
| Date Registered | 10-23-2012 04:48 PM |
| Date Last Visited | 02-14-2019 08:35 AM |
| Total Messages Posted | 17 |
| Total Helpful Votes Received | 15 |
.jpg "Hall of Fame Cisco Employee"){kind=icon}
.jpg "VIP Mentor"){kind=icon}
