Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ckeithjones
Stats
Member since
06-05-2001
35
Posts
0
Helpful
0
Solutions
06-20-2013
04:56 AM
I recently upgraded my GSS to 4.1. I've set the property (see below) that will allow forwarding of dnssec queries but how do I tell the GSS what DNS server to forward those queries to? property set ServerConfig.dnsserver.nsForwardAQueriesWithDOFlag 1 Keith
... View more
Labels:
09-26-2012
08:43 AM
I have a 2651 with a 4 port serial card. I cannot get any commands to work which might set the clock source. Is there another place in the IOS where I can set this? FEIDATAR#show hard Cisco Internetwork Operating System Software IOS (tm) C2600 Software (C2600-I-M), Version 12.3(20), RELEASE SOFTWARE (fc2) cisco 2651 (MPC860P) processor (revision 0x200) with 28672K/4096K bytes of memory. Processor board ID JAB05200C4C (4276647583) M860 processor: part number 5, mask 1 Bridging software. X.25 software, Version 3.0.0. 2 FastEthernet/IEEE 802.3 interface(s) 4 Serial(sync/async) network interface(s) 32K bytes of non-volatile configuration memory. 8192K bytes of processor board System flash (Read/Write) Configuration register is 0x2102 ------------------------------------------------------------------------------------------------------------------------------------ FEIDATAR(config-if)#clock ? rate Configure serial interface clock speed ------------------------------------------------------------------------------------------------------------------------------------ Interface Serial0/1 Hardware is PowerQUICC MPC860 DTE V.35 TX and RX clocks detected. idb at 0x815B81D8, driver data structure at 0x815BFFAC SCC Registers: General [GSMR]=0x2:0x00000030, Protocol-specific [PSMR]=0x8 Events [SCCE]=0x0300, Mask [SCCM]=0x001F, Status [SCCS]=0x03 Transmit on Demand [TODR]=0x0, Data Sync [DSR]=0x7E7E Interrupt Registers: Config [CICR]=0x00367F80, Pending [CIPR]=0x00008C04 Mask [CIMR]=0x48204002, In-srv [CISR]=0x00000000 Command register [CR]=0x6C0 Port A [PADIR]=0x4000, [PAPAR]=0xFFFF [PAODR]=0x0000, [PADAT]=0x29FE Port B [PBDIR]=0x0FF0F, [PBPAR]=0x0600E [PBODR]=0x00000, [PBDAT]=0x3631D Port C [PCDIR]=0x00C, [PCPAR]=0x000 [PCSO]=0xBA0, [PCDAT]=0xFC0, [PCINT]=0x00F Receive Ring rmd(68012A70): status 9000 length 60C address 1DCD604 rmd(68012A78): status 9000 length 60C address 1DC8804 rmd(68012A80): status 9000 length 60C address 1DCDC84 rmd(68012A88): status 9000 length 60C address 1DD0A04 rmd(68012A90): status 9000 length 60C address 1DD2A84 rmd(68012A98): status 9000 length 60C address 1DD3784 rmd(68012AA0): status 9000 length 60C address 1DCE984 rmd(68012AA8): status 9000 length 60C address 1DC9B84 rmd(68012AB0): status 9000 length 60C address 1DD1704 rmd(68012AB8): status 9000 length 60C address 1DD3104 rmd(68012AC0): status 9000 length 60C address 1DD0384 rmd(68012AC8): status 9000 length 60C address 1DC9504 rmd(68012AD0): status 9000 length 60C address 1DCF684 rmd(68012AD8): status 9000 length 60C address 1DCF004 tx_limited=1(2) SCC GENERAL PARAMETER RAM (at 0x68013F00) Rx BD Base [RBASE]=0x2A70, Fn Code [RFCR]=0x18 Tx BD Base [TBASE]=0x2B30, Fn Code [TFCR]=0x18 Max Rx Buff Len [MRBLR]=1548 Rx State [RSTATE]=0x0, BD Ptr [RBPTR]=0x2A70 Tx State [TSTATE]=0x0, BD Ptr [TBPTR]=0x2B30 SCC HDLC PARAMETER RAM (at 0x68013F38) CRC Preset [C_PRES]=0xFFFF, Mask [C_MASK]=0xF0B8 Errors: CRC [CRCEC]=0, Aborts [ABTSC]=0, Discards [DISFC]=0 Nonmatch Addr Cntr [NMARC]=0 Retry Count [RETRC]=0 Max Frame Length [MFLR]=1608 Rx Int Threshold [RFTHR]=0, Frame Cnt [RFCNT]=10945 User-defined Address 0000/0000/0000/0000 User-defined Address Mask 0x0000 buffer size 1524 PowerQUICC SCC specific errors: 153 input aborts on receiving flag sequence 0 throttles, 0 enables 0 overruns 0 transmitter underruns 0 transmitter CTS losts 328 aborted short frames
... View more
Labels:
06-16-2012
04:50 AM
Looks like that got rid of the lacp error messages. I turned on etherchannel debugging and now I get this when shut/no shut on the port. 7010(config-if)# show port-2012 Jun 16 07:49:30.425278 eth_port_channel: pcm_eth_port_ac_drop_all_txns(897): Interface Ethernet1/17 suspended by protocol 2012 Jun 16 07:49:30.425317 eth_port_channel: pcm_proc_response(403): Ethernet1/17 (0x1a010000): Setting response status to 0x402b000c (port not compatible) for MTS_OPC_ETHPM_PORT_BRINGUP (61442) response 2012 Jun 16 07:49:30.425457 eth_port_channel: pss_create_mbr_tlv(330): Not writing type 3 to mbr pss
... View more
06-15-2012
11:18 AM
I currently have an etherchannel configured between my Nexus and a NetApp device. I have two 4-port etherchannels that are set for LACP (mode active) that are working and 1 2-port configured exactly the same that won't work. 12 Po12(SU) Eth LACP Eth1/17(s) Eth1/18(P) I turned on LACP error debugging and the error I get when I shut the Eth 1/17 interface and bring it back up is: 2012 Jun 15 14:09:46.731141 lacp: lacp_proto_suspend_secondary_ports(2049): Ethernet1/20(0x1a013000): Got port with non matching lag selection 2012 Jun 15 14:09:46.731177 lacp: lacp_proto_suspend_secondary_ports(2050): Port LAG=[(1, 2-a0-98-1c-a7-3e, 1, 0, 4), (8000, 40-55-39-25-75-41, c, 8000, 114)] 2012 Jun 15 14:09:46.731200 lacp: lacp_proto_suspend_secondary_ports(2052): Port channel LAG=[(1, 2-a0-98-1c-c7-86, 1, 0, 0), (8000, 40-55-39-25-75-41, c, 0, 0)] The configuration of the ports: interface Ethernet1/17 description NetApp NAS switchport switchport access vlan 2 storm-control broadcast level 1 storm-control multicast level 1 channel-group 12 mode active no shutdown interface port-channel12 description TSG-NAS5 Etherchannel switchport switchport access vlan 2 spanning-tree port type edge storm-control broadcast level 1 storm-control multicast level 1 Any ideas of why lacp is having this issue? Keith
... View more
- Tags:
- etherchannel
- netapp
Labels:
01-26-2012
04:29 AM
No, I have a TAC case open on it. So far it seems it's a problem with the freeware (TacPlus) software my company is using to do AAA. Keith
... View more
12-07-2011
04:22 AM
I forgot to put I originally had that in there. I put it back but I get the same response. MCN-CORE-D-7020# sh run tacacs+ all !Command: show running-config tacacs+ all !Time: Wed Dec 7 13:21:47 2011 version 5.1(3) feature tacacs+ tacacs-server key 7 "XXXXXXXXX" ip tacacs source-interface mgmt0 tacacs-server test username test password test idle-time 0 tacacs-server timeout 60 tacacs-server deadtime 0 tacacs-server host 172.26.32.200 port 49 tacacs-server host 172.25.35.9 port 49 tacacs-server host 172.26.32.200 test username test password test idle-time 0 tacacs-server host 172.25.35.9 test username test password test idle-time 0 aaa group server tacacs+ tacacs+ server 172.26.32.200 server 172.25.35.9 use-vrf management source-interface mgmt0 MCN-CORE-D-7020# sh run aaa !Command: show running-config aaa !Time: Wed Dec 7 13:21:54 2011 version 5.1(3) aaa authentication login default group tacacs+ tacacs+ tacacs-server directed-request Keith
... View more
12-06-2011
11:49 AM
I cannot get the AAA tacacs+ authentication to work on my Nexus 7000. The following is the logging error I get: 2011 Dec 7 01:17:05 MCN-CORE-D-7020 %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication failed for user ctcrgrf from 172.26.32.200 - sshd[16930] 2011 Dec 7 01:17:05 MCN-CORE-D-7020 %DAEMON-3-SYSTEM_MSG: error: PAM: Authentication failure for illegal user ctcrgrf from 172.26.32.200 - sshd[16922] 2011 Dec 7 01:17:08 MCN-CORE-D-7020 %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication failed for user ctcrgrf from 172.26.32.200 - sshd[16935] 2011 Dec 7 01:17:08 MCN-CORE-D-7020 %DAEMON-3-SYSTEM_MSG: error: PAM: Authentication failure for illegal user ctcrgrf from 172.26.32.200 - sshd[16922] 2011 Dec 7 01:17:08 MCN-CORE-D-7020 %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication failed for user ctcrgrf from 172.26.32.200 - sshd[16936] 2011 Dec 7 01:17:08 MCN-CORE-D-7020 %DAEMON-3-SYSTEM_MSG: error: PAM: Authentication failure for illegal user ctcrgrf from 172.26.32.200 - sshd[16922] 2011 Dec 7 01:17:42 MCN-CORE-D-7020 %VSHD-5-VSHD_SYSLOG_CONFIG_I: Configured from vty by ncbranch on 172.26.22.20@pts/0 2011 Dec 7 01:19:46 MCN-CORE-D-7020 %VSHD-5-VSHD_SYSLOG_CONFIG_I: Configured from vty by ncbranch on 172.26.22.20@pts/0 2011 Dec 7 01:29:34 MCN-CORE-D-7020 %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication failed for user ctcrsrackj from 172.26.22.20 - sshd[17316] 2011 Dec 7 01:29:34 MCN-CORE-D-7020 %DAEMON-3-SYSTEM_MSG: error: PAM: Authentication failure for illegal user ctcrsrackj from 172.26.22.20 - sshd[17315] Relevant config: MCN-CORE-D-7020# show run tacacs+ !Command: show running-config tacacs+ !Time: Wed Dec 7 01:33:42 2011 version 5.1(3) feature tacacs+ tacacs-server key 7 "XXXXXXX" ip tacacs source-interface mgmt0 tacacs-server timeout 60 tacacs-server host 172.26.32.200 tacacs-server host 172.25.35.9 aaa group server tacacs+ tacacs+ server 172.26.32.200 server 172.25.35.9 use-vrf management source-interface mgmt0 All users get this same error when trying to log in. Any other switch works with that username.
... View more
Labels:
11-16-2011
06:14 AM
I am seeing high CPU usage on a Cat 4507. I have run the following: show logg Nov 16 14:08:27.154 UTC: %C4K_EBM-4-HOSTFLAPPING: Host 00:00:00:00:FE:01 in vlan 1 is flapping between port Gi5/10 and port Gi5/30 Nov 16 14:08:42.150 UTC: %C4K_EBM-4-HOSTFLAPPING: Host 00:00:00:00:FE:01 in vlan 1 is flapping between port Gi5/10 and port Gi5/30 Nov 16 14:08:57.138 UTC: %C4K_EBM-4-HOSTFLAPPING: Host 00:00:00:00:FE:01 in vlan 1 is flapping between port Gi5/30 and port Gi5/10 show process cpu sort CPU utilization for five seconds: 81%/1%; one minute: 83%; five minutes: 83% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 46 40109659921826789115 2195 64.16% 64.07% 64.57% 0 Cat4k Mgmt LoPri 45 30200456881129227993 2674 11.65% 12.01% 11.94% 0 Cat4k Mgmt HiPri show platform health (snipped to show high process) %CPU %CPU RunTimeMax Priority Average %CPU Total Target Actual Target Actual Fg Bg 5Sec Min Hour CPU K2L2 Address Table R 2.00 65.03 12 6 100 500 82 78 60 327274:28 I assume the hostflapping is causing a spike in CPU since the packets are not being processed by CEF. A checkpoint firewall is on the other side of the two ports. Has anyone run across this problem in general or with Checkpoint firewall using the same mac on two different ports? How could I solve this? Keith
... View more
Labels:
07-05-2011
03:55 AM
That's exactly what I need however on our Catalyst 6500 switches it appears the "routing" event is not an option. Is there another workaround for this or is it possibly just a limitation of our IOS ((s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXH8a)? Keith
... View more
06-27-2011
07:54 AM
I have a stable network that rarely has any routing changes. I would like any routing table updates to be sent to a logging server or possibly generate a trap so I am aware of the changes. Currently I use a Debug ip routing command and get the output sent. Is there another way to accomplish this without using the debug command? Keith
... View more
Labels:
06-07-2011
04:13 AM
After a recent upgrade to IOS s72033-adventerprisek9_wan-mz.122-33.shx8a.bin we are seeing the following routing messages in our logs. This message occurs continuously for various periods of time then disappears randomly on various switches and for multiple different subnets. Any ideas on what could be causing this? Keith Jun 2 09:42:30: RT: SET_LAST_RDB for 137.244.235.0/24 OLD rdb: via 137.244.128.182, Vlan853 NEW rdb: via 137.244.128.174, Vlan851 Jun 2 09:42:30: RT: SET_LAST_RDB for 137.244.235.0/24 OLD rdb: via 137.244.128.174, Vlan851 NEW rdb: via 137.244.128.182, Vlan853 Jun 2 09:42:30: RT: SET_LAST_RDB for 137.244.235.0/24 OLD rdb: via 137.244.128.182, Vlan853 NEW rdb: via 137.244.128.174, Vlan851 Jun 2 09:42:30: RT: SET_LAST_RDB for 137.244.235.0/24 OLD rdb: via 137.244.128.174, Vlan851 NEW rdb: via 137.244.128.182, Vlan853 Jun 2 10:50:33: RT: SET_LAST_RDB for 137.244.235.0/24 OLD rdb: via 137.244.128.182, Vlan853 NEW rdb: via 137.244.128.174, Vlan851 Jun 2 10:50:33: RT: SET_LAST_RDB for 137.244.235.0/24 OLD rdb: via 137.244.128.174, Vlan851 NEW rdb: via 137.244.128.182, Vlan853 Routing table portion: sh ip route 137.244.235.0 Routing entry for 137.244.235.0/24 Known via "ospf 100", distance 110, metric 30, type intra area Last update from 137.244.128.174 on Vlan851, 1w1d ago Routing Descriptor Blocks: * 137.244.128.182, from 137.244.128.250, 1w1d ago, via Vlan853 Route metric is 30, traffic share count is 1 137.244.128.174, from 137.244.128.250, 1w1d ago, via Vlan851 Route metric is 30, traffic share count is 1
... View more
Labels:
05-31-2011
03:39 AM
Both of you pointed toward the problem. It did show 0 bytes free so I deleted some old crashinfo folders and now it's working. Thanks for the help! Keith
... View more
05-26-2011
07:47 AM
When the switch reboots and I try to save the running config I get this error message: 228_CRIT_VM17_3020#wr Building configuration... Error writing new config file "flash:/config.text.new" nv_done: unable to open "flash:/private-config.text.new" nv_done: unable to open "flash:/multiple-fs.new"[OK] Has anyone seen this problem before? Keith
... View more
- Tags:
- catalyst_3020
Labels:
02-07-2011
06:30 AM
Ok, thanks I've already tried to set the baud rate in ROMMON but i get a vb:: permission denied error. I've never seen that one either. I'll just get a replacement. Thanks for all the replies. Keith
... View more
06-20-2013
I recently upgraded my GSS to 4.1. I've set the property (see below)
that will allow forwarding of d...
09-26-2012
I have a 2651 with a 4 port serial card. I cannot get any commands to
work which might set the clock...
06-16-2012
Looks like that got rid of the lacp error messages. I turned on
etherchannel debugging and now I get...
06-15-2012
I currently have an etherchannel configured between my Nexus and a
NetApp device. I have two 4-port ...
01-26-2012
No, I have a TAC case open on it. So far it seems it's a problem with
the freeware (TacPlus) softwar...
12-07-2011
I forgot to put I originally had that in there. I put it back but I get
the same response.MCN-CORE-D...
12-06-2011
I cannot get the AAA tacacs+ authentication to work on my Nexus 7000.
The following is the logging e...
11-16-2011
I am seeing high CPU usage on a Cat 4507. I have run the following:show
logg Nov 16 14:08:27.154 UTC...
07-05-2011
That's exactly what I need however on our Catalyst 6500 switches it
appears the "routing" event is n...
06-27-2011
I have a stable network that rarely has any routing changes. I would
like any routing table updates ...
06-07-2011
After a recent upgrade to IOS
s72033-adventerprisek9_wan-mz.122-33.shx8a.bin we are seeing the
follo...
05-31-2011
Both of you pointed toward the problem. It did show 0 bytes free so I
deletedsome old crashinfo fold...
05-26-2011
When the switch reboots and I try to save the running config I get this
error message:228_CRIT_VM17_...
Public Statistics
| Date Registered | 06-05-2001 08:06 PM |
| Date Last Visited | 08-18-2017 04:01 AM |
| Total Messages Posted | 35 |
