We have implemented PI 2.0 in HA. It was working fine before and now HA is failed due to some error. We could see "Read-only file system" as a reason for not joining the pair. We tried restarting the NCS application and restarting the server as well. Also tried to remove the HA and rebuild. Now we are not even able to configure HA and contineously getting the above error. Please suggest. ... View more

We are trying to configure Netflow version 5 in SUP-2T (15.0.1 SY version). Based on the configuration guide, we could see only "flexible netflow" configuration which is majorly works with Version 9 format. We found the below config template for ver 5 netflow export. But this "record netflow" command is not available. Please someone help in getting the configuration for this. ! flow exporter EXPORTER-1 destination * export-protocol netflow-v5 transport udp 90 exit ! flow monitor FLOW-MONITOR-1 record netflow ipv4 original-input exporter EXPORTER-1 ! ip cef ! interface Ethernet 0/0 ip address * 255.255.255.0 ip flow monitor FLOW-MONITOR-1 input ! Error: ------ DCINTS1(config)#flow monitor flow-mon-1 DCINTS1(config-flow-monitor)#rec DCINTS1(config-flow-monitor)#record net DCINTS1(config-flow-monitor)#record netf DCINTS1(config-flow-monitor)#record netfl DCINTS1(config-flow-monitor)#record ?   platform-original  Original platform flowmask collection schemes DCINTS1(config-flow-monitor)#record netflow ? % Unrecognized command DCINTS1(config-flow-monitor)#exit show ver: -------- System restarted at 11:22:57 ind Thu Apr 12 2012 System image file is "disk0:s2t54-advipservicesk9-mz.SPA.150-1.SY1.bin" Last reload reason: power-on This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. cisco WS-C6506-E (M8572) processor (revision ) with 1769472K/262144K bytes of memory. Processor board ID @ CPU: MPC8572_E, Version: 2.2, (0x80E80022) CORE: E500, Version: 3.0, (0x80210030) CPU:1500MHz, CCB:600MHz, DDR:600MHz L1:    D-cache 32 kB enabled         I-cache 32 kB enabled Last reset from power-on 4 Virtual Ethernet interfaces 102 Gigabit Ethernet interfaces 4 Ten Gigabit Ethernet interfaces 2543K bytes of non-volatile configuration memory. Configuration register is 0x2102 DCINTS1# DCINTS1#sh license feature Feature name             Enforcement  Evaluation  Subscription   Enabled MACSec_Encryption        yes          no          no             no CTS                      yes          no          no             no TEST_FEATURE_1           yes          yes         no             no TEST_FEATURE_2           yes          yes         no             no DCINTS1# DCINTS1# DCINTS1#sh license status                 License Type Supported         permanent               Non-expiring node locked license         extension               Expiring node locked license         evaluation              Expiring non node locked license                 License Operation Supported         install    Install license         clear      Clear license         annotate   Comment license         save       Save license         revoke     Revoke license         call-home  License call-home                 Call-home Operation Supported         show pak   Display license pak via call-home         install    Install license via call-home         revoke     Revoke license via call-home         resend     Fetch license via call-home                 Device status         Device Credential type: DEVICE         Device Credential Verification: PASS         Rehost Type: DC_OR_IC ... View more

Hi, We need to get the MIB /OID information for 6500 series switches. Especially we need to monitor the Gig interface “input & output” traffic rate for every second. Switch model: WS-C6509-E / SUP 720 We tried the below value but not getting proper output. MIB:- 1.3.6.1.2.1.2.2.1.10.2 Also we would like to know whether there would be any impact on running the below global command “snmp-server hc poll <in msec>” in 6500 series switch. Thanks in advance, Guru ... View more

Hi, We are facing this error in our 6506 switch when we insert the second sup2. We can see a hardware version mismatch between both primary and secondary supervisors. Other parameters are matching. 2010 Dec 30 15:00:49 IST +05:30 %SYS-5-SUP_REDMISMATCH:Standby supervisor 2 redundancy/power mgmt board detection mismatch 2010 Dec 30 15:01:14 IST +05:30 %SYS-5-SUP_MODSBY:Module 2 is in standby mode 2010 Dec 30 15:01:30 IST +05:30 %SYS-5-SUP_IMGSYNC:File synchronization process will start in 120 seconds 2010 Dec 30 15:01:39 IST +05:30 %SYS-5-SUP_REDMISMATCH:Standby supervisor 2 redundancy/power mgmt board detection mismatch Output from the switch with both SUP.. sh module Mod Slot Ports Module-Type               Model               Sub Status --- ---- ----- ------------------------- ------------------- --- -------- 1   1    2     1000BaseX Supervisor      WS-X6K-SUP2-2GE     yes ok 2   2          Supervisor other          Unknown             ok 3   3    48    10/100/1000BaseT Ethernet WS-X6148-GE-TX      no  ok 4   4    48    10/100/1000BaseT Ethernet WS-X6148-GE-TX      no  ok 5   5    48    10/100/1000BaseT Ethernet WS-X6148-GE-TX      no  ok 7   7    48    10/100/1000BaseT Ethernet WS-X6148-GE-TX      no  ok 8   8    48    10/100/1000BaseT Ethernet WS-X6148-GE-TX      no  ok 9   9    48    10/100/1000BaseT Ethernet WS-X6148-GE-TX      no  ok Mod Module-Name          Serial-Num --- -------------------- ----------- 1                        SAL094341DB 3                        SAL0934820Z 4                        SAL09337LNB 5                        SAL09337GP7 7                        SAL09337HFF 8                        SAL09412CER 9                        SAL09337UN6 Mod MAC-Address(es)                        Hw     Fw         Sw --- -------------------------------------- ------ ---------- ----------------- 1   00-15-c6-b3-88-c6 to 00-15-c6-b3-88-c7 5.3    7.1(1)     8.4(2a)     00-15-c6-b3-88-c4 to 00-15-c6-b3-88-c5     00-15-2c-31-ac-00 to 00-15-2c-31-af-ff 3   00-14-a9-ba-42-a8 to 00-14-a9-ba-42-d7 1.1    7.2(1)     8.4(2a) 4   00-09-12-5e-ee-14 to 00-09-12-5e-ee-43 1.1    7.2(1)     8.4(2a) 5   00-09-12-5e-a5-00 to 00-09-12-5e-a5-2f 1.1    7.2(1)     8.4(2a) 7   00-14-f2-21-73-c8 to 00-14-f2-21-73-f7 1.1    7.2(1)     8.4(2a) 8   00-15-63-b4-e3-e4 to 00-15-63-b4-e4-13 1.1    7.2(1)     8.4(2a) 9   00-14-a9-df-a9-c0 to 00-14-a9-df-a9-ef 1.1    7.2(1)     8.4(2a) Mod Sub-Type                Sub-Model           Sub-Serial  Sub-Hw Sub-Sw --- ----------------------- ------------------- ----------- ------ ------ 1   L3 Switching Engine II  WS-F6K-PFC2         SAL09434060 3.5   2   none                                                           We inserted the secondary sup separately in a chassis to confirm the functionality.. show mod Mod Slot Ports Module-Type               Model               Sub Status --- ---- ----- ------------------------- ------------------- --- -------- 1   1    2     1000BaseX Supervisor      WS-X6K-SUP2-2GE     yes ok 3   3    8     1000BaseX Ethernet        WS-X6408-GBIC       no  ok Mod Module-Name          Serial-Num --- -------------------- ----------- 1                        SAL08280E2P 3                        SAD03110524 Mod MAC-Address(es)                        Hw     Fw         Sw --- -------------------------------------- ------ ---------- ----------------- 1   00-09-12-47-a5-d2 to 00-09-12-47-a5-d3 5.0    7.1(1)     8.4(2a)     00-09-12-47-a5-d0 to 00-09-12-47-a5-d1     00-1a-30-a3-07-80 to 00-1a-30-a3-0b-7f 3   00-d0-bb-08-02-18 to 00-d0-bb-08-02-1f 1.9    5.4(2)     8.4(2a) Please revert to me with the clarifications. Regards, Guru ... View more

I am suspecting the connections entry based on the “sh conn” output. We tested this by establishing a telnet connection to 3389 from the below IP & observed the below connections. If we close the telnet, all the below getting closed simultaneously. This is not the behavior based on observations from our other firewalls. sho conn | in 10.242.3.79 TCP outside 10.242.3.79(0.0.0.0):0 inside 10.236.98.106:0, idle 0:00:00, bytes 0, flags i TCP outside 0.0.0.0(10.242.3.79):0 inside 0.0.0.0:0, idle 0:00:00, bytes 0, flags i TCP outside 10.242.3.79:63837 inside 10.236.98.106:3389, idle 0:00:00, bytes 0, flags UB Can someone let me know why is this 0.0.0.0 appears in the connection table. There are lots of similar connections (with flag "i") appears in the table. We are using the software version 8.2.1. Regards, Guru ... View more

We configured IP SLA with UDP jitter operation in 3800 series router for monitoring the status of the WAN link in terms of jitter, one way latency and packet loss. From the statistics, we can get results for Jitter but not one way latency and packet loss (always shows zero). (*both source and target routers are sync with NTP server) I have provided the configuration, ip sla stats and debug output in the attachment. Please suggest what will be the issue. Regards, Guru ... View more

Hi, We have 250GB of hard disk and it is almost used by CSCopx folder. Please suggest what would be a good action plan to reduce this size. Regards, Guru ... View more