I use PI as a software repository. Since one of its functions is software deployment, I chose to use it. It worked without any problems (simple tftp transfer). I have verified the md5 hash via another job, just to be on the safe side, but I don't see the harm in using it as a simple TFTP server for software distribution, taking into consideration that Cisco has included this functionality in this product. We do not have a massive network (software was distributed to 100 sites), so maybe for a larger scale it could have issues. For our case it worked perfectly.   I still don't understand how the parallel distribution is done, because I noticed that it was made in bulks of 5. Is there a way to change this value?   Thanks ... View more

Hello Leo,   Can you please elaborate on your answer? We are using PI as a simple tftp server. What other tool do you recommend for bulk distribution of software images? Some form of network automation?   Katerina ... View more

I also found the following post (https://community.cisco.com/t5/server-networking/nexus-5600-hsrp-design-question-for-stretched-vlans-between-2/td-p/2964094) that states: "Due to the HW architecture on the Nexus 5600, control plane multicast packets are punted to the CPU ignoring any PACL or MAC-ACL. So with a PACL, you will not be able to filter HSRP Hellos, ARP, BPDUs, etc. which need to go to the CPU, because there is a pre-defined ACL to redirect control traffic to CPU and this ACL that takes precedence over the user-configured ACL.           ... View more

Hello all! I know this is an old post, but I was wondering if the configuration performed on N7K to isolate HSRP in two DC via DCI  (Port ACL and VLAN ACL) can now be performed on N5K running 7.3(3)N1(1).     Thank you in advance, Katerina ... View more

The affected switches run IOS c2950-i6q4l2-mz.121-22.EA1.bin, as do most of the 2950 still in our environment. They are VTP clients with maximum supported vlans 250. The number of existing vlans is 54. I logged in to the switch in site A with console while it had lost connectivity and I noticed that it had no root port!!!! Ports were up. For the switch in site B the logs are totally different! Site B:   strata_remove_vtable_entry : vlan entry not found strata_remove_vtable_entry : vlan entry not found strata_remove_vtable_entry : vlan entry not found strata_remove_vtable_entry : vlan entry not found May 23 15:34:17.854: %SPANTREE-2-LOOPGUARD_BLOCK: Loop guard blocking port GigabitEthernet0/1 on VLAN0051. May 23 15:34:59.074: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down May 23 15:35:00.082: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down May 23 15:38:33.170: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up May 23 15:38:35.206: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up May 23 15:38:38.006: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down May 23 15:38:39.014: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down May 23 15:39:34.118: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up May 23 15:39:36.154: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up May 23 15:40:07.606: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down May 23 15:40:08.618: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down May 23 15:40:11.274: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up May 23 15:40:13.306: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up May 23 15:42:33.338: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down May 23 15:42:34.350: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down May 23 15:44:17.422: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up May 23 15:44:19.454: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up   As can be seen from the logs a loop is created for vlan 51, but that brings the whole Gi0/1 (connection to 6509) down! The connection is up after 5 minutes, which could be the VTP update as you stated, but even then the connectivity is not restored. From the 6509 we flapped the link at 15:42 and connectivity was restored briefly after that.   The behavior is indeed weird. What surprised us it we had the same impact in two different sites with 2950 connected on ports Gi1/1 on different 6509, even though the logs and the output of show commands on the two switches is totally different. I blame old hardware!!!! I don't think there is much more to use for investigation. I was just wondering if anyone had seen such behavior before, and what the meaning of the log message was (I could not much it to any thing I knew).   Thanks! ... View more

Hi Giuseppe,   the switches are configured as VTP clients and already have allowed vlans on their trunk links. We faced the issue on two different 2950 switches. These switches were connected via redundant links to Gi1/1 of 6509. The first switch is located in site A and connects to 6509-A1 and 6509-A2. The second switch is located in site B and connects to 6509-B1 and 6509-B2. Vlan deletion on site A caused the behavior already described on the previous post for switch-A and vlan deletion on site B caused the behavior for switch-B. No other 2950 switches were affected in either case. The switches started functioning as normal after some period of time (more than STP timers!!! About 15 minutes or so). So my understanding is that there is something going on with Gi1/1 connecting to old switches (???). My main concern is the meaning of the message: strata_remove_vtable_entry : vlan entry not found   Thank you in advance,   Katerina ... View more