Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About simon.dwyer
Stats
Member since
01-21-2010
29
Posts
4
Helpful
2
Solutions
Created by
simon.dwyer
in VPN and AnyConnect
in VPN and AnyConnect
02-06-2013
02:29 PM
02-06-2013
02:29 PM
Hi All, I have a DMVPN hub which is a 1841 with image c1841-advsecurityk9-mz.151-4.M1.bin . I have been using DMVPN and its awesome but now trying to get the QOS sorted out and having issues. I have configured the interface like so. interface Tunnel1 ip address 10.255.255.1 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication xxx ip nhrp map multicast dynamic ip nhrp map group ADSL1 service-policy output ADSL1 ip nhrp network-id 1 ip nhrp redirect ip tcp adjust-mss 1360 no ip split-horizon ip ospf 1 area 0 tunnel source Loopback0 tunnel mode gre multipoint tunnel key 1 tunnel path-mtu-discovery tunnel protection ipsec profile VPN end policy-map ADSL1 class class-default shape average 1000000 service-policy Classes policy-map Classes class Silver bandwidth percent 25 fair-queue class Gold bandwidth percent 50 fair-queue class Scavanger bandwidth percent 5 class class-default fair-queue The output of show dmvpn detail shows it has applied the QOS rule. NG-SR-WE-RT-2#show dmvpn detail Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete N - NATed, L - Local, X - No Socket # Ent --> Number of NHRP entries with same NBMA peer NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting UpDn Time --> Up or Down Time for a Tunnel ========================================================================== Interface Tunnel1 is up/up, Addr. is 10.255.255.1, VRF "" Tunnel Src./Dest. addr: 10.32.0.100/MGRE, Tunnel VRF "" Protocol/Transport: "multi-GRE/IP", Protect "VPN" Interface State Control: Disabled Type:Hub, Total NBMA Peers (v4/v6): 1 # Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network ----- --------------- --------------- ----- -------- ----- ----------------- 1 x.x.x.x 10.255.255.2 UP 1d18h D 10.255.255.2/32 NHRP group: ADSL1 Output QoS service-policy applied: ADSL1 but my router cannot run show policy-map multipoint... it doesnt come up with a tab but i can write it in by hand. Even when i write it in by hand it outputs blank. I cut the ADSL1 shape down to 512k and it didnt take affect so i dont think the qos is working at all. Is my feature set too low? Cheers, Simon
... View more
Labels:
Created by
simon.dwyer
in Small Business Switches
in Small Business Switches
01-23-2013
07:00 PM
01-23-2013
07:00 PM
Hi All, I have just configured up a sg500 with a lacp trunk to an upstream switch. I am getting native vlan mismatch on the individual ports of the lacp team. 24-Jan-2013 12:54:48 %CDP-W-NATIVE_VLAN_MISMATCH: Native VLAN mismatch detected on interface gi1/1/24. 24-Jan-2013 12:57:35 %CDP-W-NATIVE_VLAN_MISMATCH: Native VLAN mismatch detected on interface gi1/1/48. The following is showing the correct native vlan BH-WS-AC-2#show int switchport port 1 Port : Po1 Port Mode: Trunk Gvrp Status: disabled Ingress Filtering: true Acceptable Frame Type: admitAll Ingress UnTagged VLAN ( NATIVE ): 2000 Port is member in: Vlan Name Egress rule Port Membership Type ---- -------------------------------- ----------- -------------------- 1200 1200 Tagged Static 1210 Management Tagged Static 1212 1212 Tagged Static 2000 Native Vlan Untagged Static But the following shows that the individual ports think they are the default vlan 1. BH-WS-AC-2#show int switchport gi1/1/48 Port : gi1/1/48 Port Mode: Trunk Gvrp Status: disabled Ingress Filtering: true Acceptable Frame Type: admitAll Ingress UnTagged VLAN ( NATIVE ): 1 Port is member in: Vlan Name Egress rule Port Membership Type ---- -------------------------------- ----------- -------------------- The following shows the LACP as up: BH-WS-AC-2#show int Port-Channel 1 Load balancing: src-dst-mac-ip. Gathering information... Channel Ports ------- ----- Po1 Active: gi1/1/24,gi1/1/48 Is this normal behaviour? as i cannot set the native vlan directly on the gi interface due to it being in the trunk. Simon
... View more
Labels:
11-12-2012
01:00 PM
NG-SR-WE-RT-2#show policy-map int fa0/0 FastEthernet0/0 Service-policy output: Master Class-map: class-default (match-any) 14456462 packets, 6633389318 bytes 30 second offered rate 480000 bps, drop rate 0 bps Match: any Queueing queue limit 128 packets (queue depth/total drops/no-buffer drops) 6/29660/0 (pkts output/bytes output) 14317890/6578999930 shape (average) cir 3700000, bc 14800, be 14800 target shape rate 3700000 Service-policy : Main Class-map: site1 (match-any) 2100251 packets, 710542995 bytes 30 second offered rate 33000 bps, drop rate 0 bps Match: access-group name Strahan 2100251 packets, 710543265 bytes 30 second rate 33000 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/2338/0 (pkts output/bytes output) 2071818/704852585 shape (average) cir 2000000, bc 8000, be 8000 target shape rate 2000000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 187678 packets, 65414569 bytes 30 second offered rate 2000 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 187681/65416697 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 309036 packets, 248342370 bytes 30 second offered rate 4000 bps, drop rate 0 bps Match: dscp af11 (10) 156644 packets, 143705694 bytes 30 second rate 2000 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 152392 packets, 104636676 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1045/0/1045 (pkts output/bytes output) 307991/246945249 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 1602417 packets, 396664374 bytes 30 second offered rate 25000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1416/0/1416 (pkts output/bytes output) 1601000/394917473 Fair-queue: per-flow queue limit 16 Class-map: site2 (match-all) 2299692 packets, 447799900 bytes 30 second offered rate 112000 bps, drop rate 0 bps Match: access-group name Freycinet Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1796/0 (pkts output/bytes output) 2287384/444688272 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 90496 packets, 30432777 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 90496/30432777 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 1318302 packets, 186789408 bytes 30 second offered rate 85000 bps, drop rate 0 bps Match: dscp af11 (10) 1283396 packets, 160960268 bytes 30 second rate 57000 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 34906 packets, 25829140 bytes 30 second rate 31000 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1311/0/1311 (pkts output/bytes output) 1317004/186027693 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 890269 packets, 230474321 bytes 30 second offered rate 25000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/486/0/486 (pkts output/bytes output) 889785/229869026 Fair-queue: per-flow queue limit 16 Class-map: site3 (match-all) 1095647 packets, 432669708 bytes 30 second offered rate 23000 bps, drop rate 0 bps Match: access-group name Saffire Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1719/0 (pkts output/bytes output) 1080265/428516633 shape (average) cir 900000, bc 3600, be 3600 target shape rate 900000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 76519 packets, 16886845 bytes 30 second offered rate 7000 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 76519/16886845 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 277338 packets, 262250310 bytes 30 second offered rate 1000 bps, drop rate 0 bps Match: dscp af11 (10) 201236 packets, 197880101 bytes 30 second rate 1000 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 76102 packets, 64370209 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1548/0/1548 (pkts output/bytes output) 275791/260316777 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 740973 packets, 153414997 bytes 30 second offered rate 13000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/180/0/180 (pkts output/bytes output) 740797/153199296 Fair-queue: per-flow queue limit 16 Class-map: site4 (match-all) 41664 packets, 4590063 bytes 30 second offered rate 1000 bps, drop rate 0 bps Match: access-group name CradleMountainCafe Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/49/0 (pkts output/bytes output) 39811/4325558 shape (average) cir 600000, bc 2400, be 2400 target shape rate 600000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 82 packets, 20014 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 52 packets, 9093 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 30 packets, 10921 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 82/20014 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 41478 packets, 4558825 bytes 30 second offered rate 1000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/49/0/49 (pkts output/bytes output) 41429/4489091 Fair-queue: per-flow queue limit 16 Class-map: site5 (match-all) 1408719 packets, 350645119 bytes 30 second offered rate 36000 bps, drop rate 0 bps Match: access-group name CradleMountainChateau Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/880/0 (pkts output/bytes output) 1404488/349176866 shape (average) cir 450000, bc 1800, be 1800 target shape rate 450000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 106022 packets, 37679967 bytes 30 second offered rate 10000 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 106022/37679967 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 171531 packets, 104937156 bytes 30 second offered rate 4000 bps, drop rate 0 bps Match: dscp af11 (10) 134747 packets, 72722781 bytes 30 second rate 4000 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 36784 packets, 32214375 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/339/0/339 (pkts output/bytes output) 171192/104450979 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 1131027 packets, 208013822 bytes 30 second offered rate 21000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/541/0/541 (pkts output/bytes output) 1130486/207347924 Fair-queue: per-flow queue limit 16 Class-map: site6 (match-all) 425248 packets, 150256922 bytes 30 second offered rate 11000 bps, drop rate 0 bps Match: access-group name Queenstown Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/149/0 (pkts output/bytes output) 424348/150031574 shape (average) cir 2000000, bc 8000, be 8000 target shape rate 2000000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 34327 packets, 18478904 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 25831 packets, 13227562 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 8496 packets, 5251342 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/29/0/29 (pkts output/bytes output) 34298/18441262 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 390867 packets, 131773898 bytes 30 second offered rate 11000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/120/0/120 (pkts output/bytes output) 390747/131646802 Fair-queue: per-flow queue limit 16 Class-map: site7 (match-all) 434070 packets, 129465505 bytes 30 second offered rate 24000 bps, drop rate 0 bps Match: access-group name Sydney Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/73/0 (pkts output/bytes output) 431489/129124946 shape (average) cir 900000, bc 3600, be 3600 target shape rate 900000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 70115 packets, 46097575 bytes 30 second offered rate 7000 bps, drop rate 0 bps Match: dscp af11 (10) 7887 packets, 1957279 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 62228 packets, 44140296 bytes 30 second rate 7000 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/24/0/24 (pkts output/bytes output) 70091/46067011 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 363806 packets, 83353388 bytes 30 second offered rate 18000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/49/0/49 (pkts output/bytes output) 363757/83293841 Fair-queue: per-flow queue limit 16 Class-map: V-KP (match-all) 123876 packets, 56542454 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: access-group name V-KP Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/305/0 (pkts output/bytes output) 121185/55780221 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 33659 packets, 39051647 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 29912 packets, 35908904 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 3747 packets, 3142743 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1/0/1 (pkts output/bytes output) 33658/39050213 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 90086 packets, 17477681 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/336/0/336 (pkts output/bytes output) 89750/17000672 Fair-queue: per-flow queue limit 16 Class-map: V-SI (match-all) 499530 packets, 369252332 bytes 30 second offered rate 37000 bps, drop rate 0 bps Match: access-group name V-SI Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 6/1848/0 (pkts output/bytes output) 495118/366488272 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 163580 packets, 202750793 bytes 30 second offered rate 15000 bps, drop rate 0 bps Match: dscp af11 (10) 141501 packets, 193053607 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 22079 packets, 9697186 bytes 30 second rate 15000 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 5/317/0/317 (pkts output/bytes output) 163266/202350675 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 335810 packets, 166487588 bytes 30 second offered rate 19000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1561/0/1561 (pkts output/bytes output) 334249/164436314 Fair-queue: per-flow queue limit 16 Class-map: V-WH (match-all) 272905 packets, 136712628 bytes 30 second offered rate 18000 bps, drop rate 0 bps Match: access-group name V-WH Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1226/0 (pkts output/bytes output) 268880/134585731 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 80819 packets, 65884546 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 53346 packets, 61161662 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 27473 packets, 4722884 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/32/0/32 (pkts output/bytes output) 80787/65840880 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 191851 packets, 70795512 bytes 30 second offered rate 18000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1264/0/1264 (pkts output/bytes output) 190587/69097889 Fair-queue: per-flow queue limit 16 Class-map: V-SL (match-all) 252062 packets, 149304552 bytes 30 second offered rate 12000 bps, drop rate 0 bps Match: access-group name V-SL Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1137/0 (pkts output/bytes output) 248761/147554111 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 74969 packets, 88706011 bytes 30 second offered rate 5000 bps, drop rate 0 bps Match: dscp af11 (10) 69562 packets, 85196978 bytes 30 second rate 5000 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 5407 packets, 3509033 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/84/0/84 (pkts output/bytes output) 74885/88598985 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 176965 packets, 60586065 bytes 30 second offered rate 5000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1053/0/1053 (pkts output/bytes output) 175913/59159596 Fair-queue: per-flow queue limit 16 Class-map: V-VH (match-all) 287171 packets, 142961909 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: access-group name V-VH Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/922/0 (pkts output/bytes output) 282802/141181910 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 227 packets, 145415 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 227/145415 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 63463 packets, 65451135 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 58014 packets, 61841722 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 5449 packets, 3609413 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/17/0/17 (pkts output/bytes output) 63446/65426517 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 223329 packets, 77350583 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/936/0/929 (pkts output/bytes output) 222400/75981808 Fair-queue: per-flow queue limit 16 Class-map: V-HT (match-all) 797021 packets, 751618244 bytes 30 second offered rate 18000 bps, drop rate 0 bps Match: access-group name V-HT Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/2091/0 (pkts output/bytes output) 792584/748538061 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 20030 packets, 4515447 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 20030/4515447 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 517358 packets, 670118225 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 502508 packets, 658696420 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 14850 packets, 11421805 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/473/0/473 (pkts output/bytes output) 516885/669475271 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 259506 packets, 76972146 bytes 30 second offered rate 17000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1618/0/1618 (pkts output/bytes output) 257888/74765447 Fair-queue: per-flow queue limit 16 Class-map: V-SO (match-all) 304933 packets, 171719882 bytes 30 second offered rate 10000 bps, drop rate 0 bps Match: access-group name V-SO Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1007/0 (pkts output/bytes output) 301818/170056835 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 90015 packets, 106405507 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 70009 packets, 87664620 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 20006 packets, 18740887 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/243/0/243 (pkts output/bytes output) 89772/106068723 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 214794 packets, 65302291 bytes 30 second offered rate 10000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/764/0/764 (pkts output/bytes output) 214030/64187960 Fair-queue: per-flow queue limit 16 Class-map: V-FU (match-all) 378134 packets, 237453147 bytes 30 second offered rate 6000 bps, drop rate 0 bps Match: access-group name V-FU Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1021/0 (pkts output/bytes output) 374951/235852719 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 147133 packets, 159213350 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 116691 packets, 155003853 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 30442 packets, 4209497 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/111/0/111 (pkts output/bytes output) 147022/159073222 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 230868 packets, 78226564 bytes 30 second offered rate 5000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/910/0/910 (pkts output/bytes output) 229958/76983462 Fair-queue: per-flow queue limit 16 Class-map: V-DT (match-all) 481384 packets, 295901655 bytes 30 second offered rate 11000 bps, drop rate 0 bps Match: access-group name V-DT Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1029/0 (pkts output/bytes output) 477594/294116348 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 153182 packets, 171831569 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 119490 packets, 151385364 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 33692 packets, 20446205 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/130/0/130 (pkts output/bytes output) 153052/171658705 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 328046 packets, 124054996 bytes 30 second offered rate 10000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/943/0/941 (pkts output/bytes output) 327105/122786662 Fair-queue: per-flow queue limit 16 Class-map: V-GW (match-all) 223195 packets, 87892888 bytes 30 second offered rate 2000 bps, drop rate 0 bps Match: access-group name V-GW Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/518/0 (pkts output/bytes output) 217014/86733063 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 52376 packets, 57101095 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 36712 packets, 40168644 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 15664 packets, 16932451 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/87/0/87 (pkts output/bytes output) 52289/56980016 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 170468 packets, 30758821 bytes 30 second offered rate 2000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/483/0/483 (pkts output/bytes output) 169986/30267322 Fair-queue: per-flow queue limit 16 Class-map: V-CH (match-all) 862578 packets, 817365461 bytes 30 second offered rate 8000 bps, drop rate 0 bps Match: access-group name V-CH Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/4386/0 (pkts output/bytes output) 848168/810486795 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 23302 packets, 4598897 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 23302/4598897 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 451361 packets, 648522265 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 445763 packets, 645321347 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 5598 packets, 3200918 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/2835/0/2824 (pkts output/bytes output) 448535/644730440 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 387758 packets, 164217395 bytes 30 second offered rate 8000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1580/0/1580 (pkts output/bytes output) 386178/161959473 Fair-queue: per-flow queue limit 16 Class-map: V-HF (match-all) 274060 packets, 150605569 bytes 30 second offered rate 10000 bps, drop rate 0 bps Match: access-group name V-HF Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1339/0 (pkts output/bytes output) 270488/148528040 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 92362 packets, 89967909 bytes 30 second offered rate 2000 bps, drop rate 0 bps Match: dscp af11 (10) 67972 packets, 85884455 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 24390 packets, 4083454 bytes 30 second rate 2000 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/126/0/126 (pkts output/bytes output) 92235/89799473 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 181557 packets, 60623692 bytes 30 second offered rate 9000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1213/0/1213 (pkts output/bytes output) 180344/58939576 Fair-queue: per-flow queue limit 16 Class-map: V-EH (match-all) 579312 packets, 298149985 bytes 30 second offered rate 9000 bps, drop rate 0 bps Match: access-group name V-EH Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1421/0 (pkts output/bytes output) 574797/295786243 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 130800 packets, 147474635 bytes 30 second offered rate 1000 bps, drop rate 0 bps Match: dscp af11 (10) 116388 packets, 141157763 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 14412 packets, 6316872 bytes 30 second rate 1000 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/89/0/89 (pkts output/bytes output) 130711/147361341 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 448305 packets, 150644898 bytes 30 second offered rate 5000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1371/0/1371 (pkts output/bytes output) 446934/148777471 Fair-queue: per-flow queue limit 16 Class-map: V-MM (match-all) 448873 packets, 389566414 bytes 30 second offered rate 52000 bps, drop rate 0 bps Match: access-group name V-MM Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/2348/0 (pkts output/bytes output) 444347/385977494 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 4190 packets, 1211744 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 4190/1211744 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 227218 packets, 325747760 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 225689 packets, 325108122 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 1529 packets, 639638 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1563/0/1563 (pkts output/bytes output) 225655/323499765 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 217330 packets, 62593530 bytes 30 second offered rate 52000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/785/0/785 (pkts output/bytes output) 216545/61471496 Fair-queue: per-flow queue limit 16 Class-map: V-JL (match-all) 225705 packets, 137954107 bytes 30 second offered rate 11000 bps, drop rate 0 bps Match: access-group name V-JL Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/338/0 (pkts output/bytes output) 223224/137306409 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 61509 packets, 84689364 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 60596 packets, 84382093 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 913 packets, 307271 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/92/0/92 (pkts output/bytes output) 61417/84583824 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 164069 packets, 53252099 bytes 30 second offered rate 11000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/246/0/246 (pkts output/bytes output) 163823/52925347 Fair-queue: per-flow queue limit 16 Class-map: V-MK (match-all) 387206 packets, 176569431 bytes 30 second offered rate 12000 bps, drop rate 0 bps Match: access-group name V-MK Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1705/0 (pkts output/bytes output) 383338/173990899 shape (average) cir 400000, bc 1600, be 1600 target shape rate 400000 Service-policy : Classes Class-map: Silver (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af21 (18) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 25% (38 kbps) Fair-queue: per-flow queue limit 16 Class-map: Gold (match-all) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af31 (26) Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (46 kbps) Fair-queue: per-flow queue limit 16 Class-map: Scavanger (match-any) 124883 packets, 99161606 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp af11 (10) 88309 packets, 89980446 bytes 30 second rate 0 bps Match: dscp cs1 (8) 0 packets, 0 bytes 30 second rate 0 bps Match: access-group name WebTraffic 36574 packets, 9181160 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/104/0/104 (pkts output/bytes output) 124779/99028211 bandwidth 5% (7 kbps) Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 262197 packets, 77395497 bytes 30 second offered rate 10000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/1601/0/1601 (pkts output/bytes output) 260596/75167578 Fair-queue: per-flow queue limit 16 Class-map: class-default (match-any) 253231 packets, 37848178 bytes 30 second offered rate 3000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/15/0/15 (pkts output/bytes output) 253216/35317717 Fair-queue: per-flow queue limit 16
... View more
11-12-2012
12:46 PM
Hi All, I have a Router that connects to a IP WAN. Its a over subscribed link by a fair bit. This router has a 4mbit link to the WAN while the sum of other sites are well over 20mbit. I have configured HQF on the outbound of the router and bumped up the hold-queue because the sum of queue spots on my qos rules reached over 1000. My question is that if HQF drops a packet because of shaping will it appear on the show int as "Total output drops"? FastEthernet0/0 is up, line protocol is up Hardware is Gt96k FE, address is 0025.4540.67b0 (bia 0025.4540.67b0) Internet address is 192.168.200.33/30 MTU 1500 bytes, BW 4096 Kbit/sec, DLY 100 usec, reliability 255/255, txload 102/255, rxload 26/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:02, output 00:00:00, output hang never Last clearing of "show interface" counters 15:57:14 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 29208 Queueing strategy: Class-based queueing Output queue: 41/8096/0 (size/max total/drops) 30 second input rate 422000 bits/sec, 305 packets/sec 30 second output rate 1646000 bits/sec, 396 packets/sec 12186897 packets input, 3364350770 bytes Received 0 broadcasts (0 IP multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 14074754 packets output, 2145701571 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out interface FastEthernet0/0 bandwidth 4096 ip address x x ip flow ingress ip flow egress ip ospf 1 area 0 load-interval 30 tx-ring-limit 3 tx-queue-limit 3 speed 100 full-duplex no cdp enable service-policy output Master hold-queue 8096 out end Cheers, Simon
... View more
Labels:
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
08-27-2012
12:11 PM
08-27-2012
12:11 PM
Hey, Thanks for the tips. I the only thing i had to change with your info is the aironet IE. I have now disabled it and will see how i go. The usecase i am atm only has one ap which we control. We have had some complaints from some other users on another ssid, the only linking thing is that the ones that seem to have trouble are on H-REAP. Following is the config for the ssid: (Cisco Controller) >show wlan 512 WLAN Identifier.................................. 512 Profile Name..................................... Mulawa Network Name (SSID).............................. Mulawa Status........................................... Enabled MAC Filtering.................................... Disabled Broadcast SSID................................... Enabled AAA Policy Override.............................. Disabled Network Admission Control Radius-NAC State............................... Disabled SNMP-NAC State................................. Disabled Quarantine VLAN................................ 0 Maximum number of Associated Clients............. 0 Number of Active Clients......................... 8 Exclusionlist.................................... Disabled Session Timeout.................................. Infinity CHD per WLAN..................................... Enabled Webauth DHCP exclusion........................... Disabled Interface........................................ management Multicast Interface.............................. Not Configured --More-- or (q)uit WLAN ACL......................................... unconfigured DHCP Server...................................... Default DHCP Address Assignment Required................. Enabled Static IP client tunneling....................... Disabled Quality of Service............................... Silver (best effort) Scan Defer Priority.............................. 4,5,6 Scan Defer Time.................................. 100 milliseconds WMM.............................................. Allowed WMM UAPSD Compliant Client Support............... Disabled Media Stream Multicast-direct.................... Disabled CCX - AironetIe Support.......................... Disabled CCX - Gratuitous ProbeResponse (GPR)............. Disabled CCX - Diagnostics Channel Capability............. Disabled Dot11-Phone Mode (7920).......................... Disabled Wired Protocol................................... None IPv6 Support..................................... Disabled Passive Client Feature........................... Disabled Peer-to-Peer Blocking Action..................... Disabled Radio Policy..................................... All DTIM period for 802.11a radio.................... 75 DTIM period for 802.11b radio.................... 75 Radius Servers Authentication................................ 10.20.0.7 1812 --More-- or (q)uit Accounting.................................... 10.20.0.7 1813 Dynamic Interface............................. Disabled Local EAP Authentication......................... Disabled Security 802.11 Authentication:........................ Open System Static WEP Keys............................... Disabled 802.1X........................................ Disabled Wi-Fi Protected Access (WPA/WPA2)............. Enabled WPA (SSN IE)............................... Disabled WPA2 (RSN IE).............................. Enabled TKIP Cipher............................. Disabled AES Cipher.............................. Enabled Auth Key Management 802.1x.................................. Enabled PSK..................................... Disabled CCKM.................................... Disabled FT(802.11r)............................. Disabled FT-PSK(802.11r)......................... Disabled FT Reassociation Timeout......................... 20 FT Over-The-Air mode............................. Enabled FT Over-The-Ds mode.............................. Enabled CCKM tsf Tolerance............................... 1000 --More-- or (q)uit CKIP ......................................... Disabled Web Based Authentication...................... Disabled Web-Passthrough............................... Disabled Conditional Web Redirect...................... Disabled Splash-Page Web Redirect...................... Disabled Auto Anchor................................... Disabled H-REAP Local Switching........................ Enabled H-REAP Local Authentication................... Disabled H-REAP Learn IP Address....................... Enabled Client MFP.................................... Disabled Tkip MIC Countermeasure Hold-down Timer....... 60 Call Snooping.................................... Disabled Roamed Call Re-Anchor Policy..................... Disabled SIP CAC Fail Send-486-Busy Policy................ Enabled SIP CAC Fail Send Dis-Association Policy......... Disabled Band Select...................................... Disabled Load Balancing................................... Disabled
... View more
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
08-26-2012
05:23 PM
08-26-2012
05:23 PM
Sadly we still have some 1230 AP so we cant go to 7.2 yet. I am trying to get money to get them upgraded but wont be for a little while yet.
... View more
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
08-26-2012
05:13 PM
08-26-2012
05:13 PM
Thanks for the ideas so far. Already had Band Select disabled. The driver is the latest 15.x from Intel still no luck. Upgrading to the latest 7.0 code tomorrow morning and will see how that goes.
... View more
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
08-21-2012
08:17 PM
08-21-2012
08:17 PM
Hi All, This first started when a user said they were getting disconnected and reconnected a few times a day to our wireless network. He is in a remote office with a 1142 which is set to H-Reap talking back to our 5508. Our WLC is running 7.0.166 The laptop has an intel ulitmate 6300agn wireless card with the latest 15.x drivers. We are using an SSID with wpa2 and 802.1x auth back to our ACS server using PEAP with our windows credentials. attached is what i am seeing on the wcs troubleshooting page. When i do a debug client on the WLC i see many reauthentications coming from the client on the different radio. *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Reassociation received from mobile on AP 0c:85:25:f3:7d:40 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621) *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Applying site-specific IPv6 override for station 00:24:d7:d1:16:6c - vapId 512, site 'VH-GasWorks', interface 'management' *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Applying IPv6 Interface Policy for station 00:24:d7:d1:16:6c - vlan 2, interface id 0, interface 'management' *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Applying site-specific override for station 00:24:d7:d1:16:6c - vapId 512, site 'VH-GasWorks', interface 'management' *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621) *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c STA - rates (8): 140 18 24 36 48 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Processing RSN IE type 48, length 38 for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Received RSN IE with 1 PMKIDs from mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: Received PMKID: (16) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Searching for PMKID in MSCB PMKID cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c No valid PMKID found in the MSCB PMKID cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Trying to compute a PMKID from MSCB PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] 0c 85 25 f3 7d 40 *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] 0c 85 25 f3 7d 4f *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Unable to compute a valid PMKID from MSCB PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Searching for PMK in global PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Found an entry in the global PMK cache for station 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: AA (6) *apfMsConnTask_2: Aug 22 12:59:36.763: [0000] 0c 85 25 f3 7d 4f *apfMsConnTask_2: Aug 22 12:59:36.763: CCKM: SPA (6) *apfMsConnTask_2: Aug 22 12:59:36.763: [0000] 00 24 d7 d1 16 6c *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c computed a valid PMKID from global PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Creating a PKC PMKID Cache entry for station 00:24:d7:d1:16:6c (RSN 0) on BSSID 0c:85:25:f3:7d:4f *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Adding BSSID 0c:85:25:f3:7d:4f to PMKID cache for station 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.763: New PMKID: (16) *apfMsConnTask_2: Aug 22 12:59:36.763: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Deleted mobile LWAPP rule on AP [0c:85:25:f3:7d:40] *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Updated location for station old AP 0c:85:25:f3:7d:40-0, new AP 0c:85:25:f3:7d:40-1 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfMsRunStateDec *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfMs1xStateDec *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 START (0) Initializing policy *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 START (0) Change state to AUTHCHECK (2) last state RUN (20) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 8021X_REQD (3) DHCP required on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1for this client *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 00:24:d7:d1:16:6c on AP 0c:85:25:f3:7d:40 from Associated to Associated *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Sending Assoc Response to station on BSSID 0c:85:25:f3:7d:40 (status 0) ApVapId 1 Slot 1 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfProcessAssocReq (apf_80211.c:5241) Changing state for mobile 00:24:d7:d1:16:6c on AP 0c:85:25:f3:7d:40 from Associated to Associated *apfMsConnTask_2: Aug 22 12:59:36.807: 00:24:d7:d1:16:6c Updating AID for REAP AP Client 0c:85:25:f3:7d:40 - AID ===> 1 *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c Initiating RSN with existing PMK to mobile 00:24:d7:d1:16:6c *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c Disable re-auth, use PMK lifetime. *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c dot1x - moving mobile 00:24:d7:d1:16:6c into Force Auth state *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c Skipping EAP-Success to mobile 00:24:d7:d1:16:6c *dot1xMsgTask: Aug 22 12:59:36.863: Including PMKID in M1 (16) *dot1xMsgTask: Aug 22 12:59:36.863: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *dot1xMsgTask: Aug 22 12:59:36.863: 00:24:d7:d1:16:6c Starting key exchange to mobile 00:24:d7:d1:16:6c, data packets will be dropped *dot1xMsgTask: Aug 22 12:59:36.863: 00:24:d7:d1:16:6c Sending EAPOL-Key Message to mobile 00:24:d7:d1:16:6c state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Received EAPOL-Key from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Received EAPOL-key in PTK_START state (message 2) from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c PMK: Sending cache add *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Stopping retransmission timer for mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.913: 00:24:d7:d1:16:6c Sending EAPOL-Key Message to mobile 00:24:d7:d1:16:6c state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c Received EAPOL-Key from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c apfMs1xStateInc *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20) *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 L2AUTHCOMPLETE (4) DHCP required on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1for this client *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1 *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c apfMsRunStateInc *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20) *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.961: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Reached PLUMBFASTPATH: from line 4864 Now this may be not be the issue thats causing our dropouts a couple times a day as this is happening every 5 mins. Any ideas would be brilliant. Simon
... View more
08-21-2012
08:01 PM
Hi All, This first started when a user said they were getting disconnected and reconnected a few times a day to our wireless network. He is in a remote office with a 1142 which is set to H-Reap talking back to our 5508. Our WLC is running 7.0.166 The laptop has an intel ulitmate 6300agn wireless card with the latest 15.x drivers. We are using an SSID with wpa2 and 802.1x auth back to our ACS server using PEAP with our windows credentials. attached is what i am seeing on the wcs troubleshooting page. When i do a debug client on the WLC i see many reauthentications coming from the client on the different radio. *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Reassociation received from mobile on AP 0c:85:25:f3:7d:40 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621) *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Applying site-specific IPv6 override for station 00:24:d7:d1:16:6c - vapId 512, site 'VH-GasWorks', interface 'management' *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Applying IPv6 Interface Policy for station 00:24:d7:d1:16:6c - vlan 2, interface id 0, interface 'management' *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Applying site-specific override for station 00:24:d7:d1:16:6c - vapId 512, site 'VH-GasWorks', interface 'management' *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621) *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c STA - rates (8): 140 18 24 36 48 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Processing RSN IE type 48, length 38 for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Received RSN IE with 1 PMKIDs from mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: Received PMKID: (16) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Searching for PMKID in MSCB PMKID cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c No valid PMKID found in the MSCB PMKID cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Trying to compute a PMKID from MSCB PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] 0c 85 25 f3 7d 40 *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] 0c 85 25 f3 7d 4f *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_2: Aug 22 12:59:36.762: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Unable to compute a valid PMKID from MSCB PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Searching for PMK in global PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: 00:24:d7:d1:16:6c Found an entry in the global PMK cache for station 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.762: CCKM: AA (6) *apfMsConnTask_2: Aug 22 12:59:36.763: [0000] 0c 85 25 f3 7d 4f *apfMsConnTask_2: Aug 22 12:59:36.763: CCKM: SPA (6) *apfMsConnTask_2: Aug 22 12:59:36.763: [0000] 00 24 d7 d1 16 6c *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c computed a valid PMKID from global PMK cache for mobile 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Creating a PKC PMKID Cache entry for station 00:24:d7:d1:16:6c (RSN 0) on BSSID 0c:85:25:f3:7d:4f *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Adding BSSID 0c:85:25:f3:7d:4f to PMKID cache for station 00:24:d7:d1:16:6c *apfMsConnTask_2: Aug 22 12:59:36.763: New PMKID: (16) *apfMsConnTask_2: Aug 22 12:59:36.763: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Deleted mobile LWAPP rule on AP [0c:85:25:f3:7d:40] *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Updated location for station old AP 0c:85:25:f3:7d:40-0, new AP 0c:85:25:f3:7d:40-1 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfMsRunStateDec *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfMs1xStateDec *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 START (0) Initializing policy *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 START (0) Change state to AUTHCHECK (2) last state RUN (20) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 8021X_REQD (3) DHCP required on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1for this client *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c 10.24.8.108 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 00:24:d7:d1:16:6c on AP 0c:85:25:f3:7d:40 from Associated to Associated *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c Sending Assoc Response to station on BSSID 0c:85:25:f3:7d:40 (status 0) ApVapId 1 Slot 1 *apfMsConnTask_2: Aug 22 12:59:36.763: 00:24:d7:d1:16:6c apfProcessAssocReq (apf_80211.c:5241) Changing state for mobile 00:24:d7:d1:16:6c on AP 0c:85:25:f3:7d:40 from Associated to Associated *apfMsConnTask_2: Aug 22 12:59:36.807: 00:24:d7:d1:16:6c Updating AID for REAP AP Client 0c:85:25:f3:7d:40 - AID ===> 1 *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c Initiating RSN with existing PMK to mobile 00:24:d7:d1:16:6c *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c Disable re-auth, use PMK lifetime. *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c dot1x - moving mobile 00:24:d7:d1:16:6c into Force Auth state *dot1xMsgTask: Aug 22 12:59:36.862: 00:24:d7:d1:16:6c Skipping EAP-Success to mobile 00:24:d7:d1:16:6c *dot1xMsgTask: Aug 22 12:59:36.863: Including PMKID in M1 (16) *dot1xMsgTask: Aug 22 12:59:36.863: [0000] e0 79 8a 5f 4d 38 a0 52 b5 64 96 22 23 86 be 24 *dot1xMsgTask: Aug 22 12:59:36.863: 00:24:d7:d1:16:6c Starting key exchange to mobile 00:24:d7:d1:16:6c, data packets will be dropped *dot1xMsgTask: Aug 22 12:59:36.863: 00:24:d7:d1:16:6c Sending EAPOL-Key Message to mobile 00:24:d7:d1:16:6c state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Received EAPOL-Key from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Received EAPOL-key in PTK_START state (message 2) from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c PMK: Sending cache add *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.912: 00:24:d7:d1:16:6c Stopping retransmission timer for mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.913: 00:24:d7:d1:16:6c Sending EAPOL-Key Message to mobile 00:24:d7:d1:16:6c state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c Received EAPOL-Key from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:24:d7:d1:16:6c *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c apfMs1xStateInc *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20) *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 L2AUTHCOMPLETE (4) DHCP required on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1for this client *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 0c:85:25:f3:7d:40 vapId 512 apVapId 1 *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c apfMsRunStateInc *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.960: 00:24:d7:d1:16:6c 10.24.8.108 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20) *Dot1x_NW_MsgTask_4: Aug 22 12:59:36.961: 00:24:d7:d1:16:6c 10.24.8.108 RUN (20) Reached PLUMBFASTPATH: from line 4864 Now this may be not be the issue thats causing our dropouts a couple times a day as this is happening every 5 mins. Any ideas would be brilliant. Simon
... View more
Labels:
07-28-2011
04:37 AM
You sure can. that second link will show you how to do it. Basicly you setup two route-policies and apply them to the vlan svi. One for each VLAN and within the route policy you set the next hop interface which will be one of the adsl links. It can be as flexable as you want. Just make sure you do the NAT properly as per the first link i put in. You have to make sure you have a route-map per internet connection and make sure that you use the match statement. This is explained better in the first link.
... View more
07-28-2011
04:22 AM
Hi there, There is alot of troubleshooting to do. Run through this website if you havnt already http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a00804916e0.shtml
... View more
07-28-2011
04:19 AM
This looks like a question from a class exercise? if it is i think you need to look at wildcard acl's to use as little as possible.
... View more
07-28-2011
04:17 AM
if you cant ping the ip address of the dial0 interface that is really strange. Does it get an internet address with the command show ip int brief
... View more
07-28-2011
04:12 AM
Why do you want a IPv6 only SDM? you are still running IPv4. Or are you talking down the track? I am sure cisco will do a SDM ipv6 only down the track
... View more
07-28-2011
04:07 AM
The path is chosen using CEF. If there are two equal routes in the routing table the router/switch will use CEF to choose which one to use. This will explain it better than i can off the top of my head http://www.cisco.com/en/US/products/hw/modules/ps2033/prod_technical_reference09186a00800afeb7.html
... View more
Created by
simon.dwyer
in VPN and AnyConnect
02-06-2013
02-06-2013
Hi All,I have a DMVPN hub which is a 1841 with image
c1841-advsecurityk9-mz.151-4.M1.bin . I have be...
Created by
simon.dwyer
in Small Business Switches
01-23-2013
01-23-2013
Hi All,I have just configured up a sg500 with a lacp trunk to an
upstream switch.I am getting native...
11-12-2012
NG-SR-WE-RT-2#show policy-map int fa0/0 FastEthernet0/0 Service-policy
output: Master Class-map: cla...
11-12-2012
Hi All,I have a Router that connects to a IP WAN. Its a over subscribed
link by a fair bit. This rou...
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
08-27-2012
08-27-2012
Hey,Thanks for the tips. I the only thing i had to change with your info
is the aironet IE. I have n...
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
08-26-2012
08-26-2012
Sadly we still have some 1230 AP so we cant go to 7.2 yet. I am trying
to get money to get them upgr...
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
08-26-2012
08-26-2012
Thanks for the ideas so far. Already had Band Select disabled.The driver
is the latest 15.x from Int...
Created by
simon.dwyer
in Other Wireless - Mobility Subjects
08-21-2012
08-21-2012
Hi All,This first started when a user said they were getting
disconnected and reconnected a few time...
Created by
simon.dwyer
in Wireless
08-21-2012
08-21-2012
Hi All,This first started when a user said they were getting
disconnected and reconnected a few time...
Created by
simon.dwyer
in Routing
07-28-2011
07-28-2011
You sure can.that second link will show you how to do it.Basicly you
setup two route-policies and ap...
Created by
simon.dwyer
in Switching
07-28-2011
07-28-2011
Hi there,There is alot of troubleshooting to do. Run through this
website if you havnt
alreadyhttp:/...
07-28-2011
This looks like a question from a class exercise? if it is i think you
need to look at wildcard acl'...
07-28-2011
if you cant ping the ip address of the dial0 interface that is really
strange. Does it get an intern...
07-28-2011
Why do you want a IPv6 only SDM? you are still running IPv4. Or are you
talking down the track?I am ...
Public Statistics
| Date Registered | 01-21-2010 06:04 PM |
| Date Last Visited | 08-18-2017 03:56 AM |
| Total Messages Posted | 29 |
| Total Helpful Votes Received | 4 |
