Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About balla-zoltan
Stats
Member since
02-01-2005
54
Posts
5
Helpful
0
Solutions
04-01-2013
11:56 AM
Thank you, I have to schedule the change, we have a very strict change policy. You mentioned IOS upgrade, do you think it will solve the issue? Thanks
... View more
04-01-2013
11:44 AM
Thank you for your response. IP CEF is enabled at the global level, as the default. We have an alias that uses nbar, so that is why it is on the interface. I thought that the virtual-assembly was to protect the router from certain attacks where the attacker sedn a large number of fragmented packets. Thanks
... View more
04-01-2013
09:54 AM
We had a very interesting issue with one of our 2811 router. We have Checkpoint firewalls at some of our locations and they all send messages back to the management station using TCP port 257. At our Chinese location at March 10th around 10:30PM, our time, the router stoppend sending traffic on port 257, all other traffic seemed to be normal. We put the same access-list, fuctionality wise, on FA0/0 in and on S0/0/0:1 out. We could see the hits on FA0/0 but not on S0/0/0:1. After rebooting the router the problem went away, for now. I opened a ticket with Cisco, but I did not get too far. Did anyone see anything like this before? Here are the access-lists: ip access-list extended Log-Testing permit tcp host 172.28.228.243 host 161.195.160.147 eq 257 log permit tcp host 172.28.228.242 host 161.195.160.147 eq 257 log permit tcp any host 161.195.160.147 eq 257 log permit tcp any any eq 257 log permit ip any any ip access-list extended Log-Testing2 permit tcp host 172.28.228.243 host 161.195.160.147 eq 257 log permit tcp host 172.28.228.242 host 161.195.160.147 eq 257 log permit tcp any host 161.195.160.147 eq 257 log permit tcp any any eq 257 log permit ip any any ! And here are the interface configurations: interface Serial0/0/0:1 description MPLS bandwidth 2048 ip address XXX.XXX.XXX.XXX 255.255.255.252 ip access-group Log-Testing out ip verify unicast reverse-path no ip redirects no ip unreachables no ip proxy-arp ip nbar protocol-discovery ip virtual-reassembly no ip route-cache cef no ip route-cache service-policy output XXXXXXXX ! interface FastEthernet0/0 ip address XXX.XXX.XXX.XXX 255.255.255.248 ip access-group Log-Testing2 in no ip redirects no ip unreachables no ip proxy-arp ip virtual-reassembly ip route-cache flow no ip mroute-cache duplex full speed 100 no mop enabled ! Thanks
... View more
- Tags:
- disappearing
- traffic
Labels:
03-19-2013
04:21 AM
I figured it out in my lab that you cannot use an interface for tracking when you have sub-interfaces under it. Thanks for everyone's hepl.
... View more
03-17-2013
09:14 AM
Here is the configuration from the router that I have access to: track 100 interface GigabitEthernet0/0 ip routing delay up 180 interface GigabitEthernet0/0 mtu 9216 no ip address load-interval 30 duplex full speed 1000 ! interface GigabitEthernet0/0.412 encapsulation dot1Q 412 ip address ! interface GigabitEthernet0/0.413 encapsulation dot1Q 413 ip address ! interface GigabitEthernet0/1 ip address 161.195.142.2 255.255.255.240 ip flow ingress standby 10 ip 161.195.142.1 standby 10 timers 5 15 standby 10 priority 130 standby 10 preempt standby 10 track 100 decrement 250 load-interval 30 duplex full speed 1000 ! I was thinking maybe I should you tracking like this: track 100 ip route 0.0.0.0 0.0.0.0 reachability It maybe that I have the issue because there are sub-interfaces configured.
... View more
03-17-2013
08:12 AM
Correction, the second configuration should read: interface GigabitEthernet0/1 ip address 10.10.10.3 255.255.255.240 ip flow ingress standby 10 ip 10.10.10.1 standby 10 timers 5 15 standby 10 preempt standby 10 priority 110 load-interval 30 duplex full speed 1000
... View more
03-17-2013
08:07 AM
I have two routers configured for HSRP: interface GigabitEthernet0/1 ip address 10.10.10.2 255.255.255.240 ip flow ingress standby 10 ip 10.10.10.1 standby 10 timers 5 15 standby 10 priority 130 standby 10 preempt standby 10 track 100 decrement 250 load-interval 30 duplex full speed 1000 ! interface GigabitEthernet0/1 ip address 10.10.10.3 255.255.255.240 ip flow ingress standby 10 ip 10.10.10.1 standby 10 timers 5 15 standby 10 preempt load-interval 30 duplex full speed 1000 ! The first configurration supposed to be the primary router but when I look at sh standby this is what I see: GigabitEthernet0/1 - Group 10 State is Standby 6 state changes, last state change 00:12:22 Virtual IP address is 161.195.142.1 Active virtual MAC address is 0000.0c07.ac0a Local virtual MAC address is 0000.0c07.ac0a (v1 default) Hello time 5 sec, hold time 15 sec Next hello sent in 1.520 secs Preemption enabled Active router is 161.195.142.3, priority 110 (expires in 12.560 sec) Standby router is local Priority 0 (configured 130) Track object 100 state Down decrement 250 Group name is "hsrp-Gi0/1-10" (default) Why does it say Priority 0 (configured 130)? Did I miss something in the configuration? Thanks
... View more
- Tags:
- hsrp-new
Labels:
02-19-2013
05:37 AM
What should be the bc and be value in the following configuration: policy-map block-sav class block-sav police cir 200000000 bc be conform-action transmit exceed-action drop violate-action drop Thanks
... View more
Labels:
11-29-2012
08:47 AM
I don't see any issue either but someone raised the question and this is now in a frenzy. We have two 6509s in our Testlab running VSS and we have no isse at all. Thank you for your response.
... View more
11-29-2012
08:45 AM
We have four 5580s and four 2232s. The configuration is a bit different but we don't have this issue. We don't have vpcs configured and this is how the port-channel configuration looks like: interface port-channel103 switchport mode fex-fabric fex associate 103 When I do a sh inv this is what I see: NAME: "FEX 103 CHASSIS", DESCR: "N2K-C2232PP-10GE CHASSIS" PID: N2K-C2232PP-10GE , VID: V03 , SN: SSI1519003B NAME: "FEX 103 Module 1", DESCR: "Fabric Extender Module: 32x10GE, 8x10GE Supervisor" PID: N2K-C2232PP-10GE , VID: V03 , SN: FOC15241F45 NAME: "FEX 103 Fan 1", DESCR: "Fabric Extender Fan module" PID: N2K-C2232-FAN , VID: N/A , SN: N/A NAME: "FEX 103 Power Supply 1", DESCR: "Fabric Extender AC power supply" PID: N2200-PAC-400W , VID: V02 , SN: LIT15170QFH NAME: "FEX 103 Power Supply 2", DESCR: "Fabric Extender AC power supply" PID: N2200-PAC-400W , VID: V02 , SN: LIT15170QHV We have only one 2232 connnected to one 5580, two 5580s are connected to each other and to the core 6509s.
... View more
11-29-2012
08:18 AM
Anyone has any issues running user traffic over the VSL link for devices that are not dual homed? I know that under ideal circumstance user traffic should not go over the VSL link, but we are not living in an ideal environment. Thanks
... View more
- Tags:
- vss
Labels:
03-22-2012
04:43 AM
Hi Karim, I had to associate the private VLANs again and it worked. My biggest concern was that during the upgrade I lost all of the VLAN configurations. When I opened a case about it I got the usual message, it is a bug. It turned out the under version 4.X the VLANs are created and stored differently than under version 5.X and there was nothing in place to convert the VLANs from the 4.X version to 5.X version.
... View more
02-01-2012
11:11 AM
Thank you for your response. The interface on the server is set to 100/full, just like the switch port. The interface does not have a lot of traffic because the RSA card is only for server management.
... View more
02-01-2012
11:10 AM
Thank you for your esponse. We have no empty ports o use wireshark. The interesting part is that there is only one device plugged into the port. It is the RSA card for that server is only for management, so, in theory, should not have a lot of traffic. QoS is not enabled on the port.
... View more
01-26-2012
06:53 AM
Hi, We have some issues with our 4948 switches namely there are a lot of drops on interfaces. Here is an example: GigabitEthernet1/19 is up, line protocol is up (connected) Hardware is Gigabit Ethernet Port, address is 001b.d417.a792 (bia 001b.d417.a792) Description: USPHL0ESX18 RSA MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, link type is auto, media type is 10/100/1000-TX input flow-control is off, output flow-control is off ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output never, output hang never Last clearing of "show interface" counters 6d17h Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 17577272 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 23000 bits/sec, 33 packets/sec 3083 packets input, 202707 bytes, 0 no buffer Received 299 broadcasts (0 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 86584193 packets output, 52059988888 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out Here is the interface configuration: interface GigabitEthernet1/19 description USPHL0ESX18 RSA switchport access vlan 120 speed 100 duplex full spanning-tree portfast The drops happen in a burst. The case was opened with TAC, but it looks like we have a run around. Thanks
... View more
Labels:
04-01-2013
Thank you, I have to schedule the change, we have a very strict change
policy. You mentioned IOS upg...
04-01-2013
Thank you for your response. IP CEF is enabled at the global level, as
the default. We have an alias...
04-01-2013
We had a very interesting issue with one of our 2811 router. We have
Checkpoint firewalls at some of...
03-19-2013
I figured it out in my lab that you cannot use an interface for tracking
when you have sub-interface...
03-17-2013
Here is the configuration from the router that I have access to:track
100 interface GigabitEthernet0...
03-17-2013
Correction, the second configuration should read:interface
GigabitEthernet0/1 ip address 10.10.10.3 ...
03-17-2013
I have two routers configured for HSRP:interface GigabitEthernet0/1 ip
address 10.10.10.2 255.255.25...
02-19-2013
What should be the bc and be value in the following
configuration:policy-map block-sav class block-s...
11-29-2012
I don't see any issue either but someone raised the question and this is
now in a frenzy. We have tw...
11-29-2012
We have four 5580s and four 2232s. The configuration is a bit different
but we don't have this issue...
11-29-2012
Anyone has any issues running user traffic over the VSL link for devices
that are not dual homed? I ...
03-22-2012
Hi Karim,I had to associate the private VLANs again and it worked. My
biggest concern was that durin...
02-01-2012
Thank you for your response. The interface on the server is set to
100/full, just like the switch po...
02-01-2012
Thank you for your esponse. We have no empty ports o use wireshark. The
interesting part is that the...
Public Statistics
| Date Registered | 02-01-2005 05:19 AM |
| Date Last Visited | 08-18-2017 03:56 AM |
| Total Messages Posted | 54 |
| Total Helpful Votes Received | 5 |
.jpg "Hall of Fame Master"){kind=icon}
