Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About andrew.butterworth
05-15-2019
andrew.butterwo
Member since
06-20-2002
Rising star
Created by
andrew.butterwo
in Switching
05-09-2019
08:44 AM
05-09-2019
08:44 AM
I have a C887VA router that I have upgraded to 15.8(3)M2 and I am now seeing this error message: %SNMP-3-INPUT_QFULL_ERR: Packet dropped due to input queue full If I check the output of the 'show snmp' command I see this: router#show snmp Chassis: XXXXXXXXXX 2210 SNMP packets input 0 Bad SNMP version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 19184 Number of requested variables 0 Number of altered variables 1896 Get-request PDUs 26 Get-next PDUs 0 Set-request PDUs 0 packets currently in SNMP process input queue 22 Input queue packet drops (Maximum queue size 1) 2788 SNMP packets output 0 Too big errors (Maximum packet size 1500) 0 No such name errors 0 Bad values errors 0 General errors 2188 Response PDUs 600 Trap PDUs SNMP Dispatcher: queue 0/75 (current/max), 0 dropped SNMP Engine: queue 0/1 (current/max), 22 dropped It says the maximum input queue size is 1. I have the same router running older IOS 15.6(1)T3 and this shows: 0 Input queue packet drops (Maximum queue size 1000) This isn't configurable as far as I can tell and looks to be a change between IOS releases. Does anyone know if this is the case or is this a new bug? It seems a massive jump from 1000 down to 1? Cheers Andy
... View more
Created by
andrew.butterwo
in Routing
05-03-2019
04:48 AM
05-03-2019
04:48 AM
Our current CPE router of choice is the C1111-8P & C1111-4P (and variants depending on the requirements). These are supplied with a rack-mount kit which is relatively easy to assemble although you do end up with lots of spare screws. The guide on CCO shows how to assemble the kit, however it fails to mention anything about mounting the external PSU. Based on the design of the rack-mount kit and the various Velcro straps and different length cable ties I 'assumed' the PSU is designed to go into the left-hand side of the rack-mount kit with the mains power to the rear and the DC power cable out of the front and then strapped in with the cable ties or Velcro straps? I have searched and simply cannot find a guide for this anywhere. I 'think' I have done it correct, however the Velcro straps aren't perfect for holding the PSU in place as there aren't exact holes in the rack-mount frame - its more of a best effort attempt that looks OK and works, however I would have thought Cisco would have a definitive guide for this and I just can't find one. This is the only guide I can find: C1100 hardware install guide Any pointers?
... View more
Labels:
Created by
andrew.butterwo
in Wireless and Mobility
01-21-2019
03:21 AM
01-21-2019
03:21 AM
There is no ARP entry on the switch in the same VLAN or the router in the same VLAN - GUI won't work...
The problem is the IPv4 address is configured on the GigabitEthernet0.30 dot1q subinterface rather than the BVI. I have verified this behavior with a spare 1142 I found in my garage. With 12.4 it works OK, however with 15.3 the AP reports 'encapsulation error' when trying to send IP packets.
I know how to fix it but it requires physical access and this is remote. I was hoping there might be a 'trick' to defaulting it without physical access... Looks like there isn't.
Andy
... View more
Created by
andrew.butterwo
in Wireless and Mobility
01-21-2019
02:05 AM
01-21-2019
02:05 AM
It is connected to a Catalyst 2960 with PoE (WS-C2960-24PC-S). I can see via CDP its Management IPv4 address, however I cannot ping it from the switch which has its management SVI in the same VLAN (30). It doesn't respond to ARP. The switchport is configured as a dot1q trunk and allows the management VLAN and the VLAN the SSID is bound to. I have tried configuring the Native VLAN to match the management VLAN of the AP as well as leaving it at default (1). Neither work.
I found an old 1142AP and have upgraded it to the same IOS version. If the IPv4 address is configured on the GigabitEthernet0.30 subinterface (enacapsulation dot1q 30) then it doesn't work, if the IPv4 address is configured on the BVI1 interface then it does work. There are 'encapsulation failed' messages on the AP when you try and ping from it and debugging IP packet in enabled.
I think my only options are to default it with the mode button or get a console connected. I was hoping there might be another option that doesn't require physical access...
Andy
... View more
Created by
andrew.butterwo
in Wireless and Mobility
01-19-2019
11:04 AM
01-19-2019
11:04 AM
In troubleshooting an issue with a AIR-AP1142N-E-K9 autonomous AP I upgraded the IOS from 12.4 to the latest 15.3(3)JD16 image and now I have lost management connectivity to it, although WiFi clients are working OK. It is a simple setup with a single SSID with a WPA2 PSK. The management is on one VLAN and the client traffic another.
It has (had?) the IPv4 address configured on the GigabitEthernet0.30 subinterface (dot1q VLAN 30) and not the BVI and I am assuming it still has this configuration when it has rebooted with 15.3. I can no longer connect to it as it isn't responding to ARP. I think there was a behavior change from 12.4 -> 15.x whereby the IPv4 address should only be configured on the BVI interface.
The switchport trunk interface allows VLAN 30 and the Guest VLAN (90). VLAN 30 is also the Native VLAN (I have played around with changing this to see if makes any difference but it doesn't). Clients are associating OK as its just a local PSK.
I know what I need to change - i.e. 'no ip address' on the GigabitEthernet0.30 subinterface and put this on the BVI interface, however this is remote and I don't have console access.
Other than defaulting the AP with the mode button or getting a console connected are there any other options that don't require physical access?
Cheers
Andy
... View more
Labels:
Created by
andrew.butterwo
in IPv6
01-17-2019
07:15 AM
01-17-2019
07:15 AM
I thought as much TBH. The problem is there is nothing new in the later switches that will force many customers to upgrade. A working 48 port 1Gbps switch to a new 48 port 1Gbps switch - why upgrade? If it breaks, then there is a reason to upgrade but other than that what are the drivers?
MACSEC, TrustSEC - I have seen one customer testing it, but no real deployments of it. Even 802.1x - I have a few customers who have it deployed, but not many - plus I can do that on a 3560 though (I can even do it on a 2950....). IPv6 - its starting to appear on more customer LANs, but again its been in 3560/3750 code for ages (RDNS aside...).
Looks like its a re-engineer piece of work to get the WLC connected to a newer platform. Wired clients though are staying on the 3560/3750s that are out there.
... View more
Created by
andrew.butterwo
in IPv6
01-17-2019
04:51 AM
01-17-2019
04:51 AM
I am playing around with Android and IPv6 on a wireless network. I have a WLC connected to a Catalyst 3560G L3 switch running the latest IOS (IP Services 15.0(2)SE11). IPv6 is working fine and I am using Stateless address assignment with DHCP to provide the 'other' options including DNS servers. Configuration on the various SVIs is like this:
ipv6 address My-Prefix-48 ::64FE:0:0:0:FE/64 ipv6 enable ipv6 nd other-config-flag no ipv6 redirects ipv6 dhcp relay destination 2001:0:0:0:192:168:1:1
The DHCPv6 server is Windows 2012R2 and doesn't have any IPv6 scopes, just some global server options for DNS. This works perfectly for my Windows 7+ machines. Most implementations of Android however don't have a DHCPv6 client included and adding one requires root etc so not an option really. Android however does support (R)DNS. Unfortunately this isn't available on the 3560/3750 platform. I have checked on a 3650 running 16.8.1a and it is available here, as well as a C891F router running 15.6.1.
I know the 3560/3750 platform is EoL but is there any possibility that this will be added or am I just daydreaming?
Andy
... View more
Labels:
11-27-2018
01:54 PM
Go with Johnd2310's suggestion of capturing the conversation with it working locally on the same subnet and not working across subnets and compare them.
I know I have been through this before and did manage to get it working, however it was ages ago on a Windows 2000 domain. I have searched through my documents and can't find any notes I made unfortunately...
... View more
Created by
andrew.butterwo
in Switching
11-27-2018
08:29 AM
11-27-2018
08:29 AM
There is a bug listed regarding high CPU with snmpwalk (CSCum72168) so I wonder if the SNMP server is walking through all MIBs to discover the device?
Does the 3750X support control-plane policing? Might be worth looking into that?
... View more
Created by
andrew.butterwo
in Switching
11-27-2018
07:05 AM
11-27-2018
07:05 AM
Probably not the answer you want but I'd probably upgrade the IOS on the stack in a maintenance window as 15.2(1)E1 was 5-years old yesterday. I'd suggest moving to 15.2.(4)E6 and then retesting.
Sorry I can't be of more help :(
... View more
Created by
andrew.butterwo
in Switching
11-27-2018
06:13 AM
11-27-2018
06:13 AM
Not sure if this previous post helps?
https://community.cisco.com/t5/network-architecture-documents/snmp-engine-over-80-cpu-100/ta-p/3117261
When you disable SNMP are you removing all the SNMP configuration? That post mentions disabling the SNMP engine. I have never configured a SNMP EngineED manually. I think it gets generated automatically when you enable SNMP and doesn't appear in the configuration unless you manually set it. Not sure though....
... View more
11-27-2018
04:13 AM
Do you have DHCP options 66 & 67 configured on the DHCP server? 66 should tell the client the IP address of the PXE boot server (TFTP server) and 67 should tell it the path and file to boot from.
HTH
Andy
... View more
Created by
andrew.butterwo
in Switching
11-27-2018
03:55 AM
11-27-2018
03:55 AM
If all the sub-interfaces on the ASA are the same security level then you can apply the global command 'same-security-traffic permit inter-interface'. This will allow the ASA to simply route between the networks of the same security level. If you apply different security levels you will need to write ACLs permitting your traffic. These could be as simple as 'permit ip 10.1.0.0 255.255.0.0 10.0.0.0 255.0.0.0'.
However if that is your requirement and you already have a L3 switch I would leave the routing there and only route traffic to the firewall that is going outside of your 'domain'. The firewall won't have the same forwarding performance as the L3 switch.
Andy
... View more
Created by
andrew.butterwo
in Switching
11-26-2018
12:16 PM
11-26-2018
12:16 PM
Are you sure its definitely a WS-C2950G-48-EI and not a WS-C2950T-48-SI? The WS-C2950G-48-EI runs the EI image and the WS-C2950T-48-SI only runs the SI image and doesn't support the cryptographic image. Does your 2950 have GBIC uplinks or 10/100/1000 copper uplinks?
I found the release notes for 12.1(22)EA14 and it states:
c2950-i6k2l2q4-tar.121-22.EA14.tar - Catalyst 2950 SI1 and EI files. This includes the cryptographic Cisco IOS image and the device manager files. c2950-i6q4l2-tar.121-22.EA14.tar - Catalyst 2950 SI and EI files. This includes the Cisco IOS image and the device manager files.
1. Switches that support only the SI cannot run the cryptographic image. For more information, see the SI-only switches listed in Table 1 and the “Cisco IOS Limitations and Restrictions” section on page 15.
I tried to load the image you have onto a SI only switch a few years back and I had the same issues you have. I had to recover the switch with XModem.
HTH
Andy
There was also a WS-C2950SX-48-SI that had 48 10/100 ports with two fixed 1000BaseSX uplinks. This also only ran the SI image.
... View more
Created by
andrew.butterworth
in Switching
2 weeks ago
2 weeks ago
I have a C887VA router that I have upgraded to 15.8(3)M2 and I am now
seeing this error message: %SN...
3 weeks ago
Our current CPE router of choice is the C1111-8P & C1111-4P (and
variants depending on the requireme...
Created by
andrew.butterworth
in Wireless and Mobility
01-21-2019 03:21 AM
01-21-2019 03:21 AM
There is no ARP entry on the switch in the same VLAN or the router in
the same VLAN - GUI won't work...
Created by
andrew.butterworth
in Wireless and Mobility
01-21-2019 02:05 AM
01-21-2019 02:05 AM
It is connected to a Catalyst 2960 with PoE (WS-C2960-24PC-S). I can see
via CDP its Management IPv4...
Created by
andrew.butterworth
in Wireless and Mobility
01-19-2019 11:04 AM
01-19-2019 11:04 AM
In troubleshooting an issue with a AIR-AP1142N-E-K9 autonomous AP I
upgraded the IOS from 12.4 to th...
Created by
andrew.butterworth
in IPv6
01-17-2019 07:15 AM
01-17-2019 07:15 AM
I thought as much TBH. The problem is there is nothing new in the later
switches that will force man...
Created by
andrew.butterworth
in IPv6
01-17-2019 04:51 AM
01-17-2019 04:51 AM
I am playing around with Android and IPv6 on a wireless network. I have
a WLC connected to a Catalys...
11-27-2018 01:54 PM
Go with Johnd2310's suggestion of capturing the conversation with it
working locally on the same sub...
Created by
andrew.butterworth
in Switching
11-27-2018 08:29 AM
11-27-2018 08:29 AM
There is a bug listed regarding high CPU with snmpwalk (CSCum72168) so I
wonder if the SNMP server i...
Created by
andrew.butterworth
in Switching
11-27-2018 07:05 AM
11-27-2018 07:05 AM
Probably not the answer you want but I'd probably upgrade the IOS on the
stack in a maintenance wind...
Created by
andrew.butterworth
in Switching
11-27-2018 06:13 AM
11-27-2018 06:13 AM
Not sure if this previous post helps?
https://community.cisco.com/t5/network-architecture-documents/...
11-27-2018 04:13 AM
Do you have DHCP options 66 & 67 configured on the DHCP server? 66
should tell the client the IP add...
Created by
andrew.butterworth
in Switching
11-27-2018 03:55 AM
11-27-2018 03:55 AM
If all the sub-interfaces on the ASA are the same security level then
you can apply the global comma...
Created by
andrew.butterworth
in Switching
11-26-2018 12:16 PM
11-26-2018 12:16 PM
Are you sure its definitely a WS-C2950G-48-EI and not a WS-C2950T-48-SI?
The WS-C2950G-48-EI runs th...
Public Statistics
| Date Registered | 06-20-2002 01:22 AM |
| Date Last Visited | 05-15-2019 12:03 AM |
| Total Messages Posted | 1,149 |
| Total Helpful Votes Received | 608 |
Helpful Votes Given To
Helpful Votes From
.jpg "Hall of Fame Expert"){kind=icon}
