Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About James Smith
08-23-2017
Stats
Member since
03-09-2012
66
Posts
0
Helpful
0
Solutions
Just giving this another BUMP
in Wireless Security and Network Management
04-30-2017
10:07 PM
04-30-2017
10:07 PM
Just giving this another BUMP as I am sure there is someone on here that can help me with this.
... View more
04-17-2017
05:59 PM
Hey All,
Just giving this a BUMP as I am sure there is someone on here that can help me with this.
Cheers,
JS
... View more
04-06-2017
09:01 PM
Hi Rasika,
Yes, the WLC is displayed as 'Managed' under the Admin Status column in PI.
Cheers, JS
... View more
05-31-2016
08:09 PM
G'day All,
I've got an issue with a new 4321 that is meant to be replacing a 2800 router that is acting as a voice gateway. The 2800 uses a BVI to connect 2 gig interfaces to two 6509 switches and this works a treat at the moment. STP is blocking the vlan on one of the switch interfaces to the router, while the other forwards, as expected.
The new 4321 was built, but the BVI config is not able to be used, so based on the Cisco doco, the Bridge Domain setup was used, which I have posted below. On paper the config looked good and the router was introduced into the network. Cue spanning tree loop and network outage. Luckily this was afterhours so no real harm done.
So my understanding was that in the new IOS XE software, the BDI replaced the BVI, but this didn't work as I had expected. When using the BDI configuration on the router, the downstream switch ports didn't do any blocking of the vlan to the router and both switch ports stayed as forwarding.
Enabling BPDU guard, works as expected with one of the switch ports going err-disable after seeing an unexpected BPDU, but without that, at no point does either switchport block the vlan to prevent the loop. The switch ports configuration didn't change between the old 2800 and the new 4321 going in.
It is a pretty basic setup and it was that was inherited from the previous network guys, so I am wondering if anyone out there has any experience with BDIs and connecting to switches.
I've attached a basic diagram with some config of both the old and new router (the important bits).
Cheers,
JS
... View more
Labels:
12-09-2015
01:53 PM
Hi Raj,
Thanks for this. I will go through it and see what result it yields and I'll report back.
Thanks again.
JS
... View more
12-09-2015
01:51 PM
I haven't yet. I am going to look at doing that shortly. I'll report back if it does fix the issue.
... View more
12-02-2015
08:59 PM
Hi,
The FEXs are 2232's. Is this an offficial bug or just a known issue? Is there a known work around?
When I look at the sh queuing int the output for the buffer size is bigger than other interfaces on the same FEXs that aren't having this issue..
sh int e113/1/22
sh queuing int e113/1/22 if_slot 54, ifidx 0x1f790140 Ethernet113/1/22 queuing information: Input buffer allocation: Qos-group: 0 frh: 8 drop-type: drop cos: 0 1 2 3 4 5 6 xon xoff buffer-size ---------+---------+----------- 0 142080 151040
Thanks for all the help...
... View more
11-30-2015
06:54 PM
Hi,
Thanks for the reply.
It doesn't look to me that the jumbo MTU setting is enabled. Below is the output from the sh queuing int e1/1:
sh queuing int eth 1/1 Ethernet1/1 queuing information: TX Queuing qos-group sched-type oper-bandwidth 0 WRR 100
RX Queuing qos-group 0 q-size: 469760, HW MTU: 1500 (1500 configured) drop-type: drop, xon: 0, xoff: 469760 Statistics: Pkts received over the port : 1124463263 Ucast pkts sent to the cross-bar : 1057473509 Mcast pkts sent to the cross-bar : 66989754 Ucast pkts received from the cross-bar : 267110687 Pkts sent to the port : 2973124559 Pkts discarded on ingress : 0 Per-priority-pause status : Rx (Inactive), Tx (Inactive)
Total Multicast crossbar statistics: Mcast pkts received from the cross-bar : 2706013872
In newer nx-os images, do jumbos still need to be configured using a policy map?
Thanks for all the help.
Cheers,
... View more
Created by
James Smith
in Server Networking
in Server Networking
11-26-2015
11:44 PM
11-26-2015
11:44 PM
G'day All,
I am relatively new to the nx family and I presently have an issue of performance issues being reported on a server enclosure that is connected to a couple of 2k FEXs that are connected to a 5596.
The physical connections from the 5k to the 2k show no TX pause hits, but the 2k phyiscal interfaces to the server enclosure show very high counts on the TX pause counters.
It appears to be a pretty simple setup, 2 10Gb interfaces, in a lacp port channel from each module in the enclosure connect to the 2ks. The switch config is pretty standard trunk config.
looking at the physical interfaces on the switch, as I type, the speed is around 13Mbps input and 18Mbps output, so by no mean pushing a 10Gb interface hard. The port channel interfrace is around input 15Mbps and output is 26Mbps, but I see the TX pause counter steadily rising on the po interface and the physical switch interfaces.
The server enclosure has been looked at by the vendor and they are pointing at the high TX pause as a sign of congestion so I am trying to work out what is going from the network side.
Looking at the basics, it look ok to me. But I am clearly missing something as I can't see why there would be TX pause frames being sent out by the N5K when the interfaces look like they are pushing under 1% of the 10Gb capacity.
I've attached the sh int and sh run int of the ports in question, to saving flooding the post with all the config.
Any help would be greatly appreciated. Thanks
Thank You.
JS
... View more
Labels:
10-20-2015
07:10 PM
Marvin and Tobias, Thanks for you replies. It is greatly appreciated. I will probably go with the ASA with Firepower and not configure it and not buy the subscription. Thanks again for attention. Cheers, JS
... View more
10-19-2015
09:55 PM
I would imagine that this post isn't heavily followed and being 2 months old, there is no interest in it what so ever. But I have answered my own question. I must have been very tired the week I posted the original question, but to solve it, I implemented a very normal solution of using the radius server as the authentication server, creating local accounts on the said radius server and simply configured the WLAN to use 802.1x auth. End up being the simplest solution and works seamlessly with the logon once aspect. Anyway 5 stars to me :)
... View more
10-19-2015
09:45 PM
G'day All, I am trying to work out if I can by a new Cisco ASA 5525-X without FirePower services included? Or can I buy it and use the ASA just as a traditional firewall as I plan on using a 7020 FirePower standalone appliance for IPS, on the perimeter of a new network I am building. Could it just be a matter of buying the ASA with FirePower services and not buying a subscription or configuring the services on the firewall? Many thanks in advance guys. JS
... View more
Labels:
08-12-2015
05:47 PM
No ideas guys, surely someone has a bit of a idea. I am leaning towards using 802.1x auth using the old ACS server, and hopefully there will be a way to have the clients credentials cached for automagical login when the wireless network is within range.
... View more
Created by
James Smith
in Wireless Security and Network Management
04-30-2017
04-30-2017
Just giving this another BUMP as I am sure there is someone on here that
can help me with this.
04-17-2017
Hey All, Just giving this a BUMP as I am sure there is someone on here
that can help me with this. C...
04-06-2017
Hi Rasika, Yes, the WLC is displayed as 'Managed' under the Admin Status
column in PI. Cheers, JS
Created by
James Smith
in Switching
05-31-2016
05-31-2016
G'day All, I've got an issue with a new 4321 that is meant to be
replacing a 2800 router that is act...
12-09-2015
Hi Raj, Thanks for this. I will go through it and see what result it
yields and I'll report back. Th...
12-09-2015
I haven't yet. I am going to look at doing that shortly. I'll report
back if it does fix the issue.
12-02-2015
Hi, The FEXs are 2232's. Is this an offficial bug or just a known issue?
Is there a known work aroun...
11-30-2015
Hi, Thanks for the reply. It doesn't look to me that the jumbo MTU
setting is enabled. Below is the ...
Created by
James Smith
in Server Networking
11-26-2015
11-26-2015
G'day All, I am relatively new to the nx family and I presently have an
issue of performance issues ...
10-20-2015
Marvin and Tobias,Thanks for you replies. It is greatly appreciated. I
will probably go with the ASA...
10-19-2015
I would imagine that this post isn't heavily followed and being 2 months
old, there is no interest i...
10-19-2015
G'day All,I am trying to work out if I can by a new Cisco ASA 5525-X
without FirePower services incl...
08-12-2015
No ideas guys, surely someone has a bit of a idea. I am leaning towards
using 802.1x auth using the ...
Public Statistics
| Date Registered | 03-09-2012 05:33 AM |
| Date Last Visited | 08-23-2017 09:20 AM |
| Total Messages Posted | 66 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
.jpg "VIP Advisor"){kind=icon}
