I am having some issues finding this info. Is there a limit to the line rates supported in a SPAN session on Cisco 9K switches? We are building a 40 gig backbone in our new datacenter and are researching visibility options. We will be using 9336 and 9396.
... View more
My logs show an entry that reads "Dec 19 15:19:26.811: EIGRP: Handle deallocation failure [8]". Has anyone ever seen this? Looks like info is scarce.
... View more
I am seeing strange behavior from a 3850 stack running EIGRP to a couple of 4507's. Let me start out by saying that over the past couple of weeks, we have replaced 5 stacks using the same configuration template, code version, etc. with no issues. Before we execute the change to install these switches, we always run failover testing to prove routing. Last night, on the 6th switch stack, failover testing did not succeed. Maybe you can help me figure out why. Here is what happened. I have a loopback configured on the stack. We connect the stack to each of the 4507's at the distribution layer and bring up an eigrp adjacency. I start a continuous ping from another site to the loopback. Then we pull the first link and the ping continues successfully. Plug it back in, bring up the adjacency. Then we pull the second uplink and the ping begins failing (TTL Lost in transit). The route at the source of the ping was lost so it was using the default route which led to nowhere. When I check the route against the table on the 4507's the subnet is not in the table but the adjacency is up. I have attached a topology drawing of the relevant devices (as I see it). Again, we never experienced this issue with the 5 previous stacks which are all connected to the 4507's the same way.
... View more
I have to agree with Hardi that something is off here. Your original post showed your port configurations with the 'switchport trunk native vlan 21' command present however the ouput you posted for 'show int trunk' showed VLAN 1 as the native. Try setting both switches to VTP transparent mode and see what happens.
... View more
Can you please post the interface configurations as well for each of the serial as well as the multilink interfaces? Also, provide the output of 'show ppp multi'. Thanks.
... View more
Looks like your tagging traffic and only have dot1q on one side of the trunk. As Panos mentioned, please configure on both sides and post results.
... View more
All, I am configuring a stack of new Cisco 3850's. In the past, we have always used 3750's with the switchport command "mls qos trust dscp" for the purpose of trusting markings sent across from our VOIP phones. This is not an option on IOS-XE so I am wondering, what is the equivalent of this command? Is there a default behavior that antiquates manual config? ~Josh
... View more
Admins can create accounts of just about any length as the lifetime fields seen by lobby admins (days, hours, minutes, seconds) is replaced by just one field (seconds). You can customize the number to any length as an ACS admin but lobby admins are limited to a max of 30 days.
... View more
Thanks Praveen, I think I figured it out. I was using a different native trunk vlan other than one of the 3 primary vlans (data, voice, mgmt). Since the router is set up to tag traffic on the subinterface to vlan 104, you cannot set a different vlan to native and allow other vlans to pass. Routers do not trunk the same way switches do. An excellent lesson. I changed the native vlan on both sides to 104 (data) and bang! it worked. The new issue now is that I have applied an ACL to the mgmt subinterface on the router to block the data and voice vlans from being able to reach it. When I ping from the switch on the data vlan I cannot reach IP's in the management vlan. However, when I ping from a host in the data vlan I CAN reach IP's in the mgmt vlan. Ugh! I love networking!
... View more
Thanks Everyone! Praveen, I have tested and verified that HSRP is working properly and that it fails over when the connection to the active router is disabled. I do face the same problem on both gateways as I attempt pings from the host to the actual IP of the gateways themselves as well as the VIP. I guess what really confuses me is that I can ping all of these devices from the switch itself using the ping x.x.x.x source x.x.x.x command but I do not get the same behavior with the host. All help is greatly appreciated as I am working on this design as a new standard template for my business. I know it works but I am missing something here.
... View more
Ok folks, this has probably been discussed a million times on here but I'm lost and could use your help. I have an HSRP configuration between a stack of 3750's and two separate 2811 WAN routers for redundancy. I have 3 vlans configured on subinterfaces on both routers going to the stack. The HSRP configuration seems to work beautifully but when I plug into the switch I can only ping on my data vlan to the data vlan gateway IP. I cannot ping to the voice vlan ip or my mgmt ip. I have attached the full 3 configs (stack and 2 routers) as well as a topology photo for your reference. So far I have only really worked on the x.2 router and the stack so you may want to focus on the attached documents labeled Alden-WAN-GW1 and Alden-SW1. To be clear, what I've done is configure a static on a PC in my data vlan and then pinged the data vlan gateway IP. With that same IP I cannot ping the voice gateway. If I change the PC's IP to an address in the voice vlan, I can't ping anything. I cannot ping the mgmt gateway either but I did that on purpose. I'm thinking this has something to do with native vlans on the trunks but I tried configuring the natives on both ends and could not get this working. Please pick me apart and teach me something!
... View more
It would seem to me that this would work with /32 subsets on the physical interfaces but making them /30's causes the issue. EDIT: Well it would work if the .2 address is physically the next hop but then why the GRE tunnel? Planning on applying encryption or something? Sent from Cisco Technical Support iPad App
... View more