Hi, I have two WS-C3650-48PD and I want to create a stack with them. Is it possible with one kit stack wise or it's necessary to order two kits (ring topology ?). thank you for your help. regards. David ... View more

Hi, I don't understand how to make to improve the security of dot1q tunneling. If the client makes some errors by example by disabling the spanning-tree on a vlan and he creates a loop between differents sites (L2VPN). What are the safety standards for Q-in- Q to protect the provider ? Thank you for your help. Regards. David         ... View more

Hi, On many 4506-E switch with cat4500e-entservicesk9-mz.122-53.SG1.bin, I have frequently this error : Feb 17 10:30:40.879 GMT+1: %C4K_HWPORTMAN-4-BLOCKEDTXQUEUE: Blocked transmit queue HwTxQId7 on Switch Phyport Gi2/48, count=102879 And it's always between the 4506-E and the Cisco 2901/K1 router, the port is blocked (Pause frames). I did this below (excepted reset the line card) but the only thing to unblock the port is to reboot cisco2901/K9. When the problem occurs the console port on the cisco2901/k9 is unreachable and I turned off the port on the 4506 and I disconnected the physical link, the port Ge0/0 on the Cisco2901 still has green leds as if it still was connected ! I also tried this command "flowcontrol receive off" on the 4506's port with the Cisco2902/K9, but nothing change ( Peer is Sending Pause Frames => flow control problem) So i have no idea where is the problem ? Would you have an idea ? Thank you for your help. Regards. David Core issue The %C4K_HWPORTMAN-4-BLOCKEDTXQUEUE:Blocked transmit queue HwTxQId[dec]on[char], count=[dec] error message is generated on a Cisco Catalyst 4500 series switch when connected to a device. This error is a rate-limited message that indicates a transmit queue blockage on a port. In this case, the traffic on the affected port is limited and blocked for reasons other than being paused . This blockage can occur if the supervisor is not able to send packets to the line card because a busybit message is received. In this situation, blocked transmit queue messages are seen. A bad hardware or speed and duplex mismatch can cause this problem. Resolution Perform these procedures as a workaround for this issue: Issue the shut /no shut commands to recover the port and configure both ends to operate at the same speed and duplex, as per Cisco bug ID CSCsb62330. If the problem persists, move the connected device to another port and see if the problem also happens there. Issue the hw-module reset command to reboot the switch or reset the line card, as a final attempt to unblock the Transmit (Tx) queue. Alternatively, upgrade the the Cisco IOS version to the 12.2(25)EWA2 and 12.2(25)SG releases, which have the fix for this problem, as per Cisco bug ID CSCsb01311. ... View more

Hi, On an VSS 6509  (IOS) switch there is this configuration : interface Port-channel11 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 10,12,14 switchport mode trunk spanning-tree bpdufilter enable I want to translate spanning-tree bpdfilter enable to two WS-C6509 with CatOS , one with PO11 with two ports 3/15-16 and another with PO11 with eight ports 3/13-16 & 4/13-16. I'm not sure but for me the correct translation for Catos is for the first switch (3/15-16) set spantree bpdu-filter 3/15-16 enable And the second I don't know because the PO11 is on two differents modules(3 & 4), what is the good command line ? set spantree bpdu-filter ???? enable Thank you for your help and your advice. David ... View more

Hi, I would put a ACL on a 6500 (WS-C6509 Software, Version NmpSW: 7.4(3)) on Catos. On IOS here the ACL : access-list 23 access-list 23 deny host xxx.xxx.xxx.xxx access-list 23 permit any int gigax/x ip access-group 23 out But on Catos I don't understand if it's possible ? How to translate this ios ACL to catos ? Thank your for your help. Regards. David ... View more

Hello, I want to run wccp gre between bluecoat proxsg and 6509 but i don't understand if it is possible with GRE (best practices "Cisco catalyst  6500 wccp gre return is handled in software",  Bluecoat doc  :"Typically, GRE forwarding is supported on software-based switching platforms such as the Cisco 800, 1800, 2800, 3800, 7200, and 7500"). ), currently it's not run with windows seven client and ie7 and http in vlan 62 (wccp 1 redirect in). Packets are bypassed (Total Bypassed Packets Received:     281) but there are exchanges between proxysg and 6509. where is the problem ? GRE ? Thank you for your help ! Currently : Cisco 6509 : 6509#show ip wccp 1 Global WCCP information:     Router information:         Router Identifier:                   10.42.11.61         Protocol Version:                    2.0     Service Identifier: 1         Number of Service Group Clients:     1         Number of Service Group Routers:     1         Total Packets s/w Redirected:        110           Process:                           0           CEF:                               110         Redirect access-list:                100         Total Packets Denied Redirect:       0         Total Packets Unassigned:            36         Group access-list:                   -none-         Total Messages Denied to Group:      0         Total Authentication failures:       0         Total Bypassed Packets Received:     281 6509#show ip wccp 1 view     WCCP Routers Informed of:         10.42.11.61     WCCP Clients Visible:         10.193.118.30     WCCP Clients NOT Visible:         -none- ip wccp 1 redirect-list 100 Extended IP access list 100     10 permit ip any any (110 matches)     20 permit tcp any any eq www     30 permit tcp any any eq 443     40 permit tcp any any eq 8080 interface Vlan62 description EvoLAN_data ip address 10.194.62.1 255.255.255.0 no ip redirects no ip proxy-arp ip wccp 1 redirect in ip pim sparse-mode end ProxySG WCCP :  v2 Forwarding/Return : Generic Gre Assignment type : Mask Home IP Router : 10.42.11.61 (Loopback 6509) ... View more

Hi, I've a problem on a isdn line (in theory up all the time) and i want to test with track and event manager the state of the int bri0/0/0:1 every ten minutes and if is down (not test state change up <=> down but only state down) make a task (reboot router or other). How test if the interface is down with track and event manager every xx minutes ? It's easy to test up => down or down => up but if no state change, i don't understand how to make that ? thank you for you help. ... View more

Hello, I have a problem on a isdn bri card (Canal D busy, i opened a TAC) but for the moment i want to "resolve" the problem with event manager. I want to reload router when automatic ping ip adress (up the isnd line) not run (ping not run => canad d busy => reload router) at the moment i have two applet but without if ping not run reload. how will we do it? event manager applet isdnping event timer watchdog time 900 action 1.0 cli command "ping 172.xx.xxx.x repeat 20" action 2.0 syslog msg "ping isdn vers router1 " event manager applet reload event timer watchdog time 21600 action 1.0 reload action 2.0 syslog msg "router reboot" Thank you for you help (and sorry for my english language). David ... View more